$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: sXr8XFwinqrxH2io/a67NZc7ab5edWun15sUlvkIso8= Subject key identifier: 85:F3:C4:59:32:0A:5C:77:88:DF:D4:19:A5:00:15:3C:6C:6D:CE:49 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 37 Signing time: Sat 19 Jul 2025 07:51:41 +0000 Manifest this update: Sat 19 Jul 2025 07:51:40 +0000 Manifest next update: Sat 26 Jul 2025 07:51:40 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: RjhvgqkXdd3BC2b3s1O4OzXudbRatuJHIVuecVk55oU=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: ZDuunhoBLIFxkgffUJp6fhz6W2Ysr7yM0HyGKDGLaSU=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Jul 19 07:51:40 2025 GMT Not After : Jul 26 07:51:40 2025 GMT Subject: CN=687b4e8d-2dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:80:4e:15:d6:fb:24:d2:e9:30:51:db:a2: a0:b4:a5:e0:25:47:8e:6f:49:7c:88:a4:34:2b:c2: d7:7e:70:14:42:82:32:03:f8:52:ea:b5:83:b1:d5: eb:b3:fa:52:cc:ff:a5:0f:59:9a:99:dc:a4:85:ec: a7:30:40:02:0e:fb:42:60:22:f5:b7:d6:9f:64:64: 5e:6f:26:72:62:66:de:e8:5d:89:51:b3:cd:14:c7: 06:33:c6:b1:ff:19:2d:0c:b0:47:96:bc:c4:39:56: 74:27:11:8e:32:85:dc:55:a9:e1:17:73:43:4b:21: 02:aa:c1:dd:99:cf:03:9b:88:1a:c9:2d:7c:3d:7d: fc:41:46:4e:29:be:23:25:7a:b0:16:aa:1d:d0:8c: d1:d1:32:12:0b:eb:9d:83:b1:f0:28:07:5a:48:3c: 84:b4:ca:2a:f9:93:c5:e8:7f:f7:51:5f:fe:08:a3: 40:c7:6e:5a:7e:d9:0e:53:7e:88:02:75:f8:d2:89: 08:fa:3b:19:fd:cf:3d:41:af:c2:84:84:fb:34:93: fb:9a:00:97:b2:53:3f:2a:1b:3d:db:2e:b5:79:d9: 09:f2:8b:48:9b:5d:39:84:b7:b4:83:ad:b1:5d:83: 26:0f:38:fc:51:6f:38:07:69:f6:8e:cb:92:de:33: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F3:C4:59:32:0A:5C:77:88:DF:D4:19:A5:00:15:3C:6C:6D:CE:49 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6c:dd:bf:7e:b5:6b:31:50:d2:7b:7a:92:2d:46:ea:f1:1d: e7:1e:10:b9:37:8e:6a:7c:f8:3a:81:97:ab:24:53:79:3a:a5: 2b:04:ed:e3:7a:64:62:84:1b:cd:2a:de:d3:ff:32:f1:a7:be: f4:e1:dd:89:d2:c1:cd:1a:bd:30:44:42:1e:bc:2e:04:9c:97: 98:b0:b3:4f:a8:23:73:4f:9e:1b:87:c4:b1:bd:0a:1e:f0:ae: 9d:6c:a7:67:25:a5:2b:1e:11:7f:c8:0c:93:ba:ed:ab:03:9a: 55:7f:9c:de:ee:d3:fc:a3:f2:2c:e8:5b:02:9e:2c:ff:62:85: d3:99:bd:9d:f5:fa:ee:09:fa:1c:35:11:bc:d6:c6:8c:f1:29: 49:33:9b:59:16:91:b1:1a:db:7c:6c:33:6d:d6:e7:f1:ef:df: ad:d8:4f:fa:58:12:57:6b:dc:31:03:b6:e8:87:1f:39:f0:87: d2:ce:b1:6c:d3:14:03:6b:f9:5f:62:8d:d1:8d:6b:52:cd:7e: 8f:fb:0d:a9:14:db:b6:53:2c:b8:d1:9b:5e:3a:f9:d8:59:9f: f9:eb:b5:97:6f:4b:75:ae:3b:c9:43:a2:27:49:de:2f:9c:13: 14:a5:86:7d:eb:ca:74:45:c7:7a:b3:28:59:23:2b:c4:4c:c9: 03:fe:90:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTA3MTkwNzUxNDBaFw0yNTA3MjYwNzUxNDBaMBgxFjAUBgNV BAMTDTY4N2I0ZThkLTJkYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzwYBOFdb7JNLpMFHboqC0peAlR45vSXyIpDQrwtd+cBRCgjID+FLqtYOx1euz +lLM/6UPWZqZ3KSF7KcwQAIO+0JgIvW31p9kZF5vJnJiZt7oXYlRs80UxwYzxrH/ GS0MsEeWvMQ5VnQnEY4yhdxVqeEXc0NLIQKqwd2ZzwObiBrJLXw9ffxBRk4pviMl erAWqh3QjNHRMhIL652DsfAoB1pIPIS0yir5k8Xof/dRX/4Io0DHblp+2Q5TfogC dfjSiQj6Oxn9zz1Br8KEhPs0k/uaAJeyUz8qGz3bLrV52Qnyi0ibXTmEt7SDrbFd gyYPOPxRbzgHafaOy5LeM45PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhfPEWTIK XHeI39QZpQAVPGxtzkkwHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjNFLzMzOUVERTY4MTBFNDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJv dWQ4dDNXanJabkdoY1FHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBs3b9+tWsxUNJ7epItRurxHeceELk3jmp8+DqBl6skU3k6pSsE7eN6 ZGKEG80q3tP/MvGnvvTh3YnSwc0avTBEQh68LgScl5iws0+oI3NPnhuHxLG9Ch7w rp1sp2clpSseEX/IDJO67asDmlV/nN7u0/yj8izoWwKeLP9ihdOZvZ31+u4J+hw1 EbzWxozxKUkzm1kWkbEa23xsM23W5/Hv363YT/pYEldr3DEDtuiHHznwh9LOsWzT FANr+V9ijdGNa1LNfo/7DakU27ZTLLjRm146+dhZn/nrtZdvS3WuO8lDoidJ3i+c ExSlhn3rynRFx3qzKFkjK8RMyQP+kO8= -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:49 2025 by rpki-client