$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: gH8AI+3PrQublR87OlBBeorSWmM1mk4EJYDLRhsaAK4= Subject key identifier: 08:9C:F4:07:0C:33:AC:60:92:80:63:CE:1C:E8:02:33:91:14:B4:37 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 77 Signing time: Sat 19 Jul 2025 07:05:14 +0000 Manifest this update: Sat 19 Jul 2025 07:05:14 +0000 Manifest next update: Sat 26 Jul 2025 07:05:14 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: Tqbp8A5p7ZcsY1FVrAnJ7MZEQUPP1XeJsswAh34D+YE=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Jul 19 07:05:14 2025 GMT Not After : Jul 26 07:05:14 2025 GMT Subject: CN=687b43aa-1d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:7b:e6:8e:9f:cb:b8:15:51:bc:71:25:80: d6:eb:63:ed:2c:fc:5c:72:a3:55:26:b8:30:f5:72: 13:e5:a2:3c:ad:58:a4:68:7b:8f:ef:63:d6:a3:d7: 3c:60:37:e4:0d:e1:0f:be:02:7e:57:cd:64:58:14: 34:16:ed:c3:21:00:f5:22:ad:3d:66:14:a9:68:25: 12:89:31:ad:89:98:24:9d:c5:26:bc:61:17:d6:ec: 18:09:9a:7f:7d:17:38:36:b4:fd:0b:24:26:27:9f: 62:3e:79:6a:be:27:fc:b7:50:2c:cc:ed:e4:a9:23: 17:63:8a:d2:cc:4d:5c:ac:dd:16:02:8f:c3:1f:64: fa:1d:e3:a6:2c:1f:96:43:e0:f0:1d:df:bc:a2:63: ab:3c:40:f8:58:18:73:e0:a0:ef:60:b8:9f:3d:70: 57:b7:09:39:db:da:3a:fd:78:8e:12:ec:6a:7f:5c: 58:8a:7b:f4:de:1a:53:b4:12:b5:c0:e9:54:1c:1c: b3:78:5a:9f:1c:25:48:91:3e:d5:2f:9f:57:fd:cc: de:38:06:2d:05:f2:4a:2f:0c:87:a1:d3:01:ea:91: a5:95:ae:5d:3a:02:1a:46:f6:07:c8:69:db:b2:e4: 47:dd:b4:7f:08:61:cb:b0:48:74:46:a7:f5:b5:f9: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9C:F4:07:0C:33:AC:60:92:80:63:CE:1C:E8:02:33:91:14:B4:37 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:98:0a:13:2f:7d:0b:b8:fb:d8:5a:87:02:f4:81:22:ed:1a: ee:59:3b:9e:4b:d8:8b:79:94:0a:31:10:47:7f:27:32:b3:20: 5e:e4:ec:a1:b8:a8:d1:b0:c0:1d:81:b6:ac:18:cb:5f:da:4d: a4:9f:e6:98:6d:19:69:03:6b:aa:9a:a7:29:04:dd:a6:3e:d2: 36:f4:3d:16:4c:9a:ca:a2:1a:dd:6e:fd:e5:c8:3a:4a:e3:33: 48:9c:af:89:4f:21:27:72:1f:ea:74:a2:fb:1e:98:78:56:ec: db:79:cb:30:b1:b6:f5:31:b5:4c:66:cb:2c:de:da:6e:41:95: 27:de:20:b2:7e:72:5d:b9:06:90:b7:42:04:fe:b2:ee:a4:05: 73:fb:f3:53:f2:41:d5:aa:21:03:27:da:33:52:6d:53:25:29: d1:cc:1a:5c:c5:97:17:95:09:54:13:6c:f9:79:32:4e:d6:b6: 6e:0c:86:df:c4:e7:cf:04:6d:25:5a:bb:48:14:a7:e6:e7:05: df:08:1b:1d:bf:8e:a9:29:6f:bb:eb:c4:14:e3:b2:e7:cb:4d: 83:be:9b:74:c5:0b:e3:7e:6b:66:de:c4:af:8a:bd:5a:74:f3: 4a:ea:35:fe:f8:42:32:bb:f3:c7:68:6a:df:96:0f:73:46:39: b0:04:d5:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoOUY0OTA2QzBENENDOTY0NUQ5QkZEOTMzNjRBMjNBNUEz M0VGNThEQjAeFw0yNTA3MTkwNzA1MTRaFw0yNTA3MjYwNzA1MTRaMBgxFjAUBgNV BAMTDTY4N2I0M2FhLTFkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwFXvmjp/LuBVRvHElgNbrY+0s/Fxyo1UmuDD1chPlojytWKRoe4/vY9aj1zxg N+QN4Q++An5XzWRYFDQW7cMhAPUirT1mFKloJRKJMa2JmCSdxSa8YRfW7BgJmn99 Fzg2tP0LJCYnn2I+eWq+J/y3UCzM7eSpIxdjitLMTVys3RYCj8MfZPod46YsH5ZD 4PAd37yiY6s8QPhYGHPgoO9guJ89cFe3CTnb2jr9eI4S7Gp/XFiKe/TeGlO0ErXA 6VQcHLN4Wp8cJUiRPtUvn1f9zN44Bi0F8kovDIeh0wHqkaWVrl06AhpG9gfIaduy 5EfdtH8IYcuwSHRGp/W1+Va/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCJz0Bwwz rGCSgGPOHOgCM5EUtDcwHwYDVR0jBBgwFoAUn0kGwNTMlkXZv9kzZKI6WjPvWNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzY3MkRCMDQ4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjBrR3dOVE1sa1hadjlrelpLSTZXalB2V05zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzY3MkRCMDQ4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL24wa0d3TlRNbGtY WnY5a3paS0k2V2pQdldOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISYChMvfQu4+9hahwL0gSLtGu5ZO55L2It5lAoxEEd/JzKzIF7k7KG4 qNGwwB2BtqwYy1/aTaSf5phtGWkDa6qapykE3aY+0jb0PRZMmsqiGt1u/eXIOkrj M0icr4lPISdyH+p0ovsemHhW7Nt5yzCxtvUxtUxmyyze2m5BlSfeILJ+cl25BpC3 QgT+su6kBXP781PyQdWqIQMn2jNSbVMlKdHMGlzFlxeVCVQTbPl5Mk7Wtm4Mht/E 588EbSVau0gUp+bnBd8IGx2/jqkpb7vrxBTjsufLTYO+m3TFC+N+a2bexK+KvVp0 80rqNf74QjK788doat+WD3NGObAE1b8= -----END CERTIFICATE-----Generated at Sun Jul 20 14:31:50 2025 by rpki-client