$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json) Hash identifier: Q2GNsxrtwTIRFx+d+d660WR9AFuhOsMkHOQADvo2xD0= Subject key identifier: 5C:87:A5:3C:B4:4C:AE:ED:51:27:19:B6:31:52:C2:47:53:39:95:F2 Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3 Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft Manifest number: 36 Signing time: Sat 19 Jul 2025 07:51:08 +0000 Manifest this update: Sat 19 Jul 2025 07:51:07 +0000 Manifest next update: Sat 26 Jul 2025 07:51:07 +0000 Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: jJWd1hnCJIWqEv5TobGsS+RbavDjAni50Bd//Fn+nZw=) 2: AF75682A101911F09363D44DC4F9AE02.roa (hash: /DitzvGpGkwCd2xAbI8HPUNETw+T64yJeC7XoZd/K/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3 Validity Not Before: Jul 19 07:51:07 2025 GMT Not After : Jul 26 07:51:07 2025 GMT Subject: CN=687b4e6c-05d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e8:ce:95:ef:c1:7e:e6:e1:f4:9a:88:59:d6: 59:50:2b:8e:de:d1:07:ba:55:2a:7b:39:b3:0c:1c: 11:6b:40:ee:88:9a:09:b3:a5:6f:85:14:25:b2:5b: 8c:40:6e:b1:a2:1d:a7:ca:3b:ed:8a:9e:6f:ed:48: 45:7e:e9:33:2f:5a:c7:12:14:ef:d0:ec:01:01:51: 3e:79:e5:58:81:55:9d:bf:17:49:26:18:4e:64:33: 5e:c4:58:ff:30:ab:76:0c:79:63:90:1e:cf:3c:50: 90:54:8c:f8:a8:f1:de:59:cc:bf:70:52:0f:9d:4d: 7c:e2:03:ac:1e:6b:30:84:71:cb:8b:db:1f:d5:f2: 71:84:76:b7:bc:e7:de:f0:ba:8a:98:61:a3:53:a7: 4b:b1:08:99:93:3c:00:b3:18:f9:7e:d9:68:83:df: b9:a8:61:8e:2b:cc:7a:10:51:13:16:1b:85:2e:76: c9:8e:58:51:ea:b7:38:5d:a9:bc:97:eb:bb:2e:06: 7b:3e:ac:5c:56:a3:b6:07:57:db:c7:91:a0:8e:17: 50:91:da:0d:57:1c:75:8d:9a:38:84:55:1d:8b:7c: ac:bd:d8:64:f8:d4:56:1e:15:0d:e0:cf:a1:7e:fe: 03:de:1b:ca:22:6f:48:79:9b:08:d0:ca:dd:e3:bb: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:A5:3C:B4:4C:AE:ED:51:27:19:B6:31:52:C2:47:53:39:95:F2 X509v3 Authority Key Identifier: keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:36:11:48:74:83:33:c8:8e:3d:a1:bf:fe:0d:d1:e2:c4:5c: b7:ae:25:1e:19:69:f7:21:2d:cb:0c:10:01:81:22:d2:40:70: 56:32:e1:06:38:5e:a6:30:86:5a:e2:9f:ff:eb:d8:31:a1:eb: 54:c0:0b:d2:35:bf:b6:9b:81:46:70:c4:c7:ca:54:2d:69:29: a2:60:92:ba:3f:bb:3a:6f:3d:70:68:37:1a:5c:af:d7:ed:2d: 78:93:ba:5b:cd:4e:91:34:19:78:d8:79:4c:c2:6f:e4:95:d3: 38:62:08:45:32:82:b0:3a:4b:ad:a6:e4:03:d9:39:4a:f3:2f: 97:6a:06:bc:ae:02:d8:3d:dd:7a:f9:86:0f:4b:0e:0d:f7:51: ef:b8:55:1c:bc:e6:33:a1:3c:a6:be:78:78:21:3f:e9:a0:72: 9d:53:91:1a:69:90:26:e1:30:05:db:87:4d:f5:bd:5c:80:14: 3b:d8:41:4e:23:5b:99:58:44:cf:97:55:81:b0:22:ca:0d:20: 47:df:c7:42:55:44:a7:81:3f:06:3e:33:1a:10:aa:9e:d4:2d: 38:87:78:9c:ed:36:6b:1c:06:37:be:c7:1a:bb:18:14:2c:ad: c8:08:89:0f:71:09:94:05:82:4e:3b:ee:c5:87:36:9d:a5:c4: a2:aa:b9:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0ZBQzExMC8GA1UEBRMoOUQ0NTY3RkJFMjUyQzY2MTY0MkFBMzNFNzgwNDhBODcx N0ZBN0NCMzAeFw0yNTA3MTkwNzUxMDdaFw0yNTA3MjYwNzUxMDdaMBgxFjAUBgNV BAMTDTY4N2I0ZTZjLTA1ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy6M6V78F+5uH0mohZ1llQK47e0Qe6VSp7ObMMHBFrQO6ImgmzpW+FFCWyW4xA brGiHafKO+2Knm/tSEV+6TMvWscSFO/Q7AEBUT555ViBVZ2/F0kmGE5kM17EWP8w q3YMeWOQHs88UJBUjPio8d5ZzL9wUg+dTXziA6weazCEccuL2x/V8nGEdre8597w uoqYYaNTp0uxCJmTPACzGPl+2WiD37moYY4rzHoQURMWG4UudsmOWFHqtzhdqbyX 67suBns+rFxWo7YHV9vHkaCOF1CR2g1XHHWNmjiEVR2LfKy92GT41FYeFQ3gz6F+ /gPeG8oib0h5mwjQyt3ju0sVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXIelPLRM ru1RJxm2MVLCR1M5lfIwHwYDVR0jBBgwFoAUnUVn++JSxmFkKqM+eASKhxf6fLMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRkFDL0FGRjU2M0U2MTAx ODExRjA4MEJDQzM0OEM0RjlBRTAyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZM TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvblVWbi0tSlN4bUZrS3FNLWVBU0toeGY2ZkxNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RkFDL0FGRjU2M0U2MTAxODExRjA4MEJDQzM0OEM0RjlBRTAyL25VVm4tLUpTeG1G a0txTS1lQVNLaHhmNmZMTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABI2EUh0gzPIjj2hv/4N0eLEXLeuJR4ZafchLcsMEAGBItJAcFYy4QY4 XqYwhlrin//r2DGh61TAC9I1v7abgUZwxMfKVC1pKaJgkro/uzpvPXBoNxpcr9ft LXiTulvNTpE0GXjYeUzCb+SV0zhiCEUygrA6S62m5APZOUrzL5dqBryuAtg93Xr5 hg9LDg33Ue+4VRy85jOhPKa+eHghP+mgcp1TkRppkCbhMAXbh031vVyAFDvYQU4j W5lYRM+XVYGwIsoNIEffx0JVRKeBPwY+MxoQqp7ULTiHeJztNmscBje+xxq7GBQs rcgIiQ9xCZQFgk477sWHNp2lxKKquU0= -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:50 2025 by rpki-client