$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: NOmI/4pkmT3Jm2LjUNCTm9Qt7zoOTYLUcT9Mf2MgBcE= Subject key identifier: 45:27:51:31:D7:EB:57:B8:23:D1:96:D8:89:39:99:CC:0A:FE:F8:F6 Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1DEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1DE0 Signing time: Sun 20 Jul 2025 16:08:16 +0000 Manifest this update: Sun 20 Jul 2025 16:08:15 +0000 Manifest next update: Sun 27 Jul 2025 16:08:15 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: 6XY5oqCb3V6oNPbpn3cEu3GdpxvgR3a5YissejPVIRA=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7662 (0x1dee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Jul 20 16:08:15 2025 GMT Not After : Jul 27 16:08:15 2025 GMT Subject: CN=687d146f-9ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:b7:a7:9c:3d:be:2d:69:37:f6:e1:78:27: 39:17:5b:7d:0c:59:3c:50:47:35:63:0c:af:de:9c: 08:14:09:1b:c2:7a:a6:89:4d:75:ba:d5:09:73:f5: 4f:ed:a6:e1:8e:5e:7f:f9:d6:52:cc:aa:50:0d:bb: 9b:a7:26:cc:f3:86:d5:8d:65:a8:26:14:bd:06:5f: 67:99:44:ba:7e:14:2e:74:9c:c3:48:a6:f9:6a:86: 3c:2d:7c:8a:1d:70:60:35:ac:a4:13:81:d4:b8:e4: 9e:d5:ea:4f:b0:48:da:7b:ba:f5:0a:f1:29:86:a9: 02:15:1a:4b:05:32:8f:43:7a:42:23:62:fb:b0:4b: 94:93:76:0e:62:99:2e:b0:de:fe:dc:ea:cf:d8:06: 7a:f3:0c:91:e7:59:fd:39:af:22:fa:69:5f:42:29: 29:41:5d:75:4f:53:2a:58:f5:ed:8b:95:36:8d:90: e0:1f:9f:bf:3e:4f:8b:46:ce:5d:22:3e:b2:13:d1: 12:e9:4b:97:41:4f:8d:8d:32:bd:82:39:33:ee:8b: d7:38:e4:c0:37:fb:05:27:9d:2f:3c:11:be:e1:3b: 5a:47:38:1c:a0:7a:e9:e8:3b:e8:6f:32:7d:ea:ba: 7a:78:8a:02:2a:f2:28:09:1a:34:e9:a5:f9:b8:14: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:51:31:D7:EB:57:B8:23:D1:96:D8:89:39:99:CC:0A:FE:F8:F6 X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d2:7e:f1:18:2d:2d:26:2c:99:c7:72:60:83:aa:b8:f4:c3: c3:7f:15:09:18:50:6b:58:e9:d8:38:65:6f:d5:ba:94:25:c1: 61:3d:c9:3b:16:18:50:c3:aa:cb:e9:db:b9:08:f2:ae:4f:b1: 76:87:cd:16:d4:f9:0c:97:47:06:92:d9:bf:94:34:0a:2e:38: b9:77:bf:48:d1:cf:07:cb:08:b2:e3:1f:eb:5f:43:b8:19:ef: e2:d1:1f:af:73:55:52:5d:6c:8d:e6:de:35:63:b0:ad:08:57: e2:64:96:85:41:a6:e9:5d:63:47:d6:39:bb:05:1a:76:ce:8d: 2c:c9:9e:9d:15:e5:0a:c3:06:18:58:22:d2:db:63:90:fe:d3: 6d:cb:99:83:1f:5d:d9:5c:12:d9:f3:b6:36:c0:a3:4b:45:11: a8:42:e7:70:7a:ea:31:0a:f7:2d:77:c0:6a:f7:cd:62:a7:03: 3c:f5:cb:c0:1a:f4:54:4c:79:0b:65:54:f8:72:dd:cf:c0:e0: f7:40:20:b8:94:50:49:aa:c4:e5:17:ec:86:93:9e:d7:07:e1: 5b:00:6a:f1:eb:d9:c8:02:2c:e2:25:d1:97:95:5a:00:80:34: ae:b3:a9:ea:df:f9:07:5c:6c:9f:7d:fb:ea:4c:1a:8e:c6:51: ec:42:fb:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUwNzIwMTYwODE1WhcNMjUwNzI3MTYwODE1WjAYMRYwFAYD VQQDEw02ODdkMTQ2Zi05YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fC3p5w9vi1pN/bheCc5F1t9DFk8UEc1Ywyv3pwIFAkbwnqmiU11utUJc/VP 7abhjl5/+dZSzKpQDbubpybM84bVjWWoJhS9Bl9nmUS6fhQudJzDSKb5aoY8LXyK HXBgNaykE4HUuOSe1epPsEjae7r1CvEphqkCFRpLBTKPQ3pCI2L7sEuUk3YOYpku sN7+3OrP2AZ68wyR51n9Oa8i+mlfQikpQV11T1MqWPXti5U2jZDgH5+/Pk+LRs5d Ij6yE9ES6UuXQU+NjTK9gjkz7ovXOOTAN/sFJ50vPBG+4TtaRzgcoHrp6DvobzJ9 6rp6eIoCKvIoCRo06aX5uBRN+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUnUTHX 61e4I9GW2Ik5mcwK/vj2MB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0n7xGC0tJiyZx3Jgg6q49MPDfxUJGFBrWOnYOGVv1bqUJcFhPck7 FhhQw6rL6du5CPKuT7F2h80W1PkMl0cGktm/lDQKLji5d79I0c8Hywiy4x/rX0O4 Ge/i0R+vc1VSXWyN5t41Y7CtCFfiZJaFQabpXWNH1jm7BRp2zo0syZ6dFeUKwwYY WCLS22OQ/tNty5mDH13ZXBLZ87Y2wKNLRRGoQudweuoxCvctd8Bq981ipwM89cvA GvRUTHkLZVT4ct3PwOD3QCC4lFBJqsTlF+yGk57XB+FbAGrx69nIAiziJdGXlVoA gDSus6nq3/kHXGyfffvqTBqOxlHsQvvk -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:29 2025 by rpki-client