$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json) Hash identifier: Acpn6cyJZ6T96grVJdrkwgn+NeDe685ZuefBX701qwc= Subject key identifier: 0D:1A:80:67:B8:83:2B:8B:F4:2E:70:0C:E9:B3:0E:91:FB:08:83:EA Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft Manifest number: 0837 Signing time: Thu 24 Jul 2025 20:55:22 +0000 Manifest this update: Thu 24 Jul 2025 20:55:21 +0000 Manifest next update: Thu 31 Jul 2025 20:55:21 +0000 Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: vk/7n7z2AX9MNVnSru/NQUtqAwEMUga87afC9ytrIvs=) 2: A2C769FC60C811F09495960BC4F9AE02.roa (hash: L4gg8mdxMo6PA1RRURkqhzDjFEp2mlU7yB0IG7OzryM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Validity Not Before: Jul 24 20:55:21 2025 GMT Not After : Jul 31 20:55:21 2025 GMT Subject: CN=68829dba-96de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:54:7b:8b:7d:1b:fa:dc:a6:3e:42:2d:01: ac:71:94:51:dc:0c:e1:7f:6f:cc:3f:3d:11:d0:16: 05:dd:5d:ab:78:c1:0f:57:d4:2f:b6:b3:16:7d:9b: f6:19:36:b1:2e:cd:c6:13:13:8d:3c:89:15:01:b4: 92:9c:3e:3b:c1:1c:b7:af:0c:3a:bf:1f:fc:24:61: 6b:33:e9:2e:bc:b5:9b:54:67:91:5c:10:11:ca:92: 0f:6c:a8:35:61:f6:ad:c9:6a:57:78:09:7b:1d:5b: 91:46:b6:b3:e9:c8:e5:bb:b7:97:9c:7e:3e:ec:ff: b4:e5:07:a8:7b:2e:b3:65:1c:57:98:cc:17:49:7f: 34:78:54:55:ed:70:1c:31:e3:7f:55:da:02:cd:3c: cd:e7:95:20:25:ea:44:4e:6b:65:c9:a9:79:a1:49: 11:32:dc:32:32:4f:0d:63:78:8b:f3:16:4f:6c:a6: d8:0a:42:2d:48:3a:d8:9f:df:7a:d4:a4:ec:4a:7e: 62:3f:94:60:27:6d:63:36:45:38:48:9b:e6:c1:58: ea:d9:9c:68:3b:24:07:cf:c0:29:a1:b2:6e:35:8f: 75:9a:92:06:9f:73:c8:36:2a:6a:7c:57:9a:29:66: 24:6a:45:54:4c:dd:a9:d7:4b:f7:3d:bf:5b:a5:fe: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1A:80:67:B8:83:2B:8B:F4:2E:70:0C:E9:B3:0E:91:FB:08:83:EA X509v3 Authority Key Identifier: keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:5b:94:90:38:26:8d:a6:82:b5:24:16:88:de:4d:32:81: 7a:08:b8:bc:29:b3:ce:32:25:3a:f9:77:9a:d7:32:0c:44:19: c6:3f:16:4c:31:c4:40:a9:0b:8a:da:a5:0f:0b:8b:eb:f7:6c: 60:34:31:5a:b8:47:36:50:fe:17:b8:54:b9:f6:7b:04:25:9d: ae:4d:44:d2:02:8a:ef:9d:b2:92:9d:ee:2f:bc:eb:1c:4f:df: 13:d6:0f:8c:9e:40:46:d7:97:34:d4:0d:3d:9b:6a:8f:0a:7c: 4c:dc:c4:d7:db:a5:1d:19:a3:26:1d:8c:1e:8d:57:bd:22:7b: 40:41:ad:d7:0c:da:bf:e9:8f:3c:22:c4:22:ef:f1:35:ff:04: 2c:6e:87:df:82:5a:bc:89:63:42:67:ef:0e:a2:22:69:f7:d8: 11:53:49:59:0b:f0:8d:46:46:e1:39:ed:d9:a6:3d:1b:9b:ff: c4:76:d6:6c:10:f2:a4:2a:4c:0a:49:a6:3c:4a:b2:fd:6f:1a: 95:78:b7:3c:fc:3b:64:14:39:3b:bb:b4:ad:99:0d:4c:9b:bf: c7:41:b5:3e:f4:29:0c:c4:fb:dc:88:a8:dc:a1:eb:4f:9f:a6: 3d:9a:73:87:48:80:f3:7f:15:9a:58:54:8d:3f:a4:b4:2b:04: 80:7c:68:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2 NjI3NjFFNEIwHhcNMjUwNzI0MjA1NTIxWhcNMjUwNzMxMjA1NTIxWjAYMRYwFAYD VQQDEw02ODgyOWRiYS05NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kRUe4t9G/rcpj5CLQGscZRR3Azhf2/MPz0R0BYF3V2reMEPV9QvtrMWfZv2 GTaxLs3GExONPIkVAbSSnD47wRy3rww6vx/8JGFrM+kuvLWbVGeRXBARypIPbKg1 YfatyWpXeAl7HVuRRraz6cjlu7eXnH4+7P+05Qeoey6zZRxXmMwXSX80eFRV7XAc MeN/VdoCzTzN55UgJepETmtlyal5oUkRMtwyMk8NY3iL8xZPbKbYCkItSDrYn996 1KTsSn5iP5RgJ21jNkU4SJvmwVjq2ZxoOyQHz8ApobJuNY91mpIGn3PINipqfFea KWYkakVUTN2p10v3Pb9bpf4awwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0agGe4 gyuL9C5wDOmzDpH7CIPqMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0 RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/luUkDgmjaaCtSQWiN5NMoF6CLi8KbPOMiU6+Xea1zIMRBnGPxZM McRAqQuK2qUPC4vr92xgNDFauEc2UP4XuFS59nsEJZ2uTUTSAorvnbKSne4vvOsc T98T1g+MnkBG15c01A09m2qPCnxM3MTX26UdGaMmHYwejVe9IntAQa3XDNq/6Y88 IsQi7/E1/wQsboffglq8iWNCZ+8OoiJp99gRU0lZC/CNRkbhOe3Zpj0bm//EdtZs EPKkKkwKSaY8SrL9bxqVeLc8/DtkFDk7u7StmQ1Mm7/HQbU+9CkMxPvciKjcoetP n6Y9mnOHSIDzfxWaWFSNP6S0KwSAfGh1 -----END CERTIFICATE-----Generated at Fri Jul 25 05:27:18 2025 by rpki-client