$ rpki-client -vvf rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft File: nhuiMnN6PQDX-qC03Dg02arwbfg.mft (raw, json) Hash identifier: kwa7g4nPpuMqUgS+TJ/BmWcEAADNeR2DZVUYVJhnHeU= Subject key identifier: 84:02:BE:44:C2:D5:1D:C7:BC:12:A0:4B:30:2E:A9:AC:0E:AA:7F:2B Authority key identifier: 9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 Certificate issuer: /CN=A9178297/serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft Manifest number: 067A Signing time: Tue 22 Jul 2025 22:47:00 +0000 Manifest this update: Tue 22 Jul 2025 22:46:59 +0000 Manifest next update: Tue 29 Jul 2025 22:46:59 +0000 Files and hashes: 1: nhuiMnN6PQDX-qC03Dg02arwbfg.crl (hash: DhOwtgxy25w/KnZachF7pTWIBZRctGdEYkHo7SXkjRU=) 2: 3B3D9AA4162211F0AE684383C4F9AE02.roa (hash: XamxWQNFXzVAky34dKuvGM9L/Xfu1Wl8RSwCxVZ6CUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178297, serialNumber=9E1BA232737A3D00D7FAA0B4DC3834D9AAF06DF8 Validity Not Before: Jul 22 22:46:59 2025 GMT Not After : Jul 29 22:46:59 2025 GMT Subject: CN=688014e3-430b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:b8:6b:2c:b8:a8:64:50:97:b7:1d:62:3d: e5:ae:dd:5d:18:70:3d:92:0a:52:54:1c:0f:60:cc: f0:12:f5:19:d6:6c:22:31:06:3f:95:a1:bd:b1:5f: e7:22:f0:70:1c:2d:9b:c3:17:b0:bc:4e:c5:29:b2: a3:a4:4f:54:d7:8e:81:b4:41:32:96:9e:b6:7b:70: 33:5c:f1:c3:ce:8e:cf:92:05:96:aa:3e:5f:c7:21: d9:3e:0a:46:f6:68:77:0c:2c:fd:2b:8f:f2:74:09: 9a:1a:cd:1f:3f:a5:b2:58:59:cd:65:3a:a5:66:37: 07:cf:42:c7:1e:9d:f8:d5:1d:d4:f8:42:fe:43:7f: 3a:0a:f9:31:85:85:eb:26:85:e4:68:61:9f:66:31: bc:16:f3:9f:ca:ba:ed:f4:8d:f3:c9:19:65:9f:4b: 36:b7:1e:54:e0:68:e8:68:24:99:93:81:15:55:36: 71:a6:8b:93:c9:c3:52:71:04:d9:e9:07:1d:e0:0d: 07:e1:ed:ac:9a:a9:46:aa:1a:8c:9c:9f:2d:79:9c: a2:6b:c6:0c:6d:67:20:73:93:fa:6b:c7:fa:5b:d1: a5:03:54:da:bb:9f:c6:b2:98:ee:fa:c0:c6:7e:e4: 06:f6:0c:08:9d:bd:70:99:70:5a:2e:1f:2c:0f:c2: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:02:BE:44:C2:D5:1D:C7:BC:12:A0:4B:30:2E:A9:AC:0E:AA:7F:2B X509v3 Authority Key Identifier: keyid:9E:1B:A2:32:73:7A:3D:00:D7:FA:A0:B4:DC:38:34:D9:AA:F0:6D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhuiMnN6PQDX-qC03Dg02arwbfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178297/4B1F748487B411EB8EF3321AC4F9AE02/nhuiMnN6PQDX-qC03Dg02arwbfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:03:b5:c3:6a:13:56:d2:ec:0c:3c:b0:21:87:34:1a:21:24: f8:e1:08:74:3b:9a:b0:5f:96:48:80:66:87:1b:86:e2:06:78: 68:d8:ac:c9:9a:98:26:e9:d6:c6:82:59:e0:5c:59:43:9c:f2: 6f:93:b6:a3:d8:ae:a6:42:84:74:4a:05:97:dd:5d:26:53:f9: 37:6b:bd:6d:e3:7b:4b:27:48:31:88:eb:95:f5:65:d5:bb:4b: 3a:55:f7:e2:99:2d:5f:e6:b6:c0:33:05:f9:78:9d:fa:1d:37: 8e:2f:4f:a0:c6:5b:2d:11:f5:f5:c0:bd:b4:1d:7c:a6:25:6d: 89:1a:d1:f7:25:3b:c4:9b:b5:3c:e0:04:e0:b3:f2:d3:c8:50: 54:13:75:41:de:d4:9f:6e:3c:ff:b4:48:f7:2e:4f:60:f9:c6: 0a:a1:3a:a5:61:5f:20:ca:5f:6a:2e:1f:8e:80:a0:aa:c3:e1: 9d:f0:00:9f:9e:52:9a:39:2f:27:ab:85:0b:6f:aa:e4:fa:43: 77:b1:a5:10:eb:cd:c4:bf:83:2f:2a:d6:4f:7d:18:01:cf:f1: a8:4d:b3:a2:ce:90:46:24:16:80:ff:9e:06:60:57:e0:2c:a5: 92:04:eb:bf:7b:5e:4e:b6:53:5f:ef:b7:56:0a:e6:71:92:a8: d0:e5:b0:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgyOTcxMTAvBgNVBAUTKDlFMUJBMjMyNzM3QTNEMDBEN0ZBQTBCNERDMzgzNEQ5 QUFGMDZERjgwHhcNMjUwNzIyMjI0NjU5WhcNMjUwNzI5MjI0NjU5WjAYMRYwFAYD VQQDEw02ODgwMTRlMy00MzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDG4ayy4qGRQl7cdYj3lrt1dGHA9kgpSVBwPYMzwEvUZ1mwiMQY/laG9sV/n IvBwHC2bwxewvE7FKbKjpE9U146BtEEylp62e3AzXPHDzo7PkgWWqj5fxyHZPgpG 9mh3DCz9K4/ydAmaGs0fP6WyWFnNZTqlZjcHz0LHHp341R3U+EL+Q386CvkxhYXr JoXkaGGfZjG8FvOfyrrt9I3zyRlln0s2tx5U4GjoaCSZk4EVVTZxpouTycNScQTZ 6Qcd4A0H4e2smqlGqhqMnJ8teZyia8YMbWcgc5P6a8f6W9GlA1Tau5/Gspju+sDG fuQG9gwInb1wmXBaLh8sD8JduwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQCvkTC 1R3HvBKgSzAuqawOqn8rMB8GA1UdIwQYMBaAFJ4bojJzej0A1/qgtNw4NNmq8G34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODI5Ny80QjFGNzQ4NDg3 QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBRRFgtcUMwM0RnMDJhcndi ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odWlNbk42UFFEWC1xQzAzRGcwMmFyd2JmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODI5Ny80QjFGNzQ4NDg3QjQxMUVCOEVGMzMyMUFDNEY5QUUwMi9uaHVpTW5ONlBR RFgtcUMwM0RnMDJhcndiZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRA7XDahNW0uwMPLAhhzQaIST44Qh0O5qwX5ZIgGaHG4biBnho2KzJ mpgm6dbGglngXFlDnPJvk7aj2K6mQoR0SgWX3V0mU/k3a71t43tLJ0gxiOuV9WXV u0s6VffimS1f5rbAMwX5eJ36HTeOL0+gxlstEfX1wL20HXymJW2JGtH3JTvEm7U8 4ATgs/LTyFBUE3VB3tSfbjz/tEj3Lk9g+cYKoTqlYV8gyl9qLh+OgKCqw+Gd8ACf nlKaOS8nq4ULb6rk+kN3saUQ683Ev4MvKtZPfRgBz/GoTbOizpBGJBaA/54GYFfg LKWSBOu/e15OtlNf77dWCuZxkqjQ5bC9 -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:13 2025 by rpki-client