$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: SExESr9DqsVJj0cRnK62WS2mc3bgBJKIZBWX+Y52lQg= Subject key identifier: 42:37:31:CC:A8:A2:24:64:63:88:E7:B8:D3:31:4E:4C:8C:1F:48:63 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0933 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 089D Signing time: Fri 18 Jul 2025 21:14:47 +0000 Manifest this update: Fri 18 Jul 2025 21:14:47 +0000 Manifest next update: Fri 25 Jul 2025 21:14:47 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: gjCggtE2DZ5ufeQe/E3vQJZppWnx4nqutoyNFmopZmo=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: rGSaf9r5NHWNkGd2dlgWyn72IpJZOpkzcKbp3O1O8bg=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: FEK8EzXCQ/8MiufhcQyCAnkfxapHFXjscSrsdrF8TfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2355 (0x933) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Jul 18 21:14:47 2025 GMT Not After : Jul 25 21:14:47 2025 GMT Subject: CN=687ab947-8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:d5:23:83:e4:fe:c6:68:57:14:c4:2b:cf: a5:a1:a1:2d:35:3d:c0:3a:01:49:85:53:c2:4c:5b: ba:20:7f:a9:f9:58:5e:d9:8e:f8:9a:59:b2:31:a4: 8d:fd:7a:de:72:34:ae:89:1b:fa:64:1d:43:d7:23: a1:1d:7d:76:69:0e:b4:2e:16:f8:ee:c5:f2:9f:2f: b1:4b:b5:50:60:26:de:a6:1a:bf:f8:00:d1:e1:89: b9:d1:2e:50:e6:19:b6:be:e4:27:d9:46:b1:a6:3e: 55:88:19:72:bf:21:90:95:1b:69:f6:34:b8:1a:40: 12:ac:7b:30:62:fa:38:dd:2e:3d:c5:ad:ac:6c:08: 39:be:34:32:34:71:39:b9:fc:1a:8d:2b:71:5a:c8: 15:70:f9:2f:4b:e7:74:9c:cb:4a:38:81:ab:a3:4a: f0:66:25:0b:e6:87:4b:52:8c:e3:0e:f0:a9:d5:09: e2:0b:ff:b2:65:31:e1:d1:a0:f3:70:ac:4b:e1:db: db:4a:7d:b3:8d:21:34:de:52:19:60:a4:12:75:53: ae:c6:5f:7f:2d:0e:08:e8:01:37:95:63:13:82:e0: ba:f0:78:28:7f:71:f9:f5:69:cf:4a:5b:27:38:03: d5:13:77:bf:c8:9c:47:35:df:9b:58:eb:82:cf:c2: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:31:CC:A8:A2:24:64:63:88:E7:B8:D3:31:4E:4C:8C:1F:48:63 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f9:46:1b:71:cc:3a:1a:df:81:a3:cd:e9:fa:e9:f4:f9:b9: 64:f2:c7:bf:12:2f:a5:b7:34:78:7e:ec:ba:e3:ff:14:e7:95: 9b:69:cb:61:89:65:36:88:8a:76:43:fe:7f:4b:fe:d4:ac:bd: a9:8f:90:00:06:62:bf:fc:9b:35:aa:db:ee:27:88:22:3b:be: 1d:90:e2:5d:f2:ce:57:6a:d3:81:02:2c:85:0e:f7:21:d4:38: 79:bb:18:56:13:b6:9a:ee:5d:76:b4:bc:0e:d7:f6:95:fa:4d: 4c:62:fc:10:50:a6:54:69:c4:c2:59:5f:5d:08:dd:8c:cb:81: 95:a0:dd:9f:d2:a5:20:c8:b8:3e:7b:11:ec:6d:ab:5d:f9:3f: a1:a7:b2:55:67:f5:2e:2b:50:5f:98:12:d5:32:96:b9:74:03: c9:6a:ae:32:cd:2d:fa:a7:41:bb:ff:1e:06:ce:d5:43:f1:60: b7:52:3b:2c:d0:d5:d3:87:9f:6b:c4:0e:a1:f3:0a:9e:5a:e1: 6d:66:44:a5:24:96:e1:a5:07:1c:93:1c:d2:8c:dd:23:44:68: c0:a6:b9:45:08:a1:2d:a0:9c:e9:f4:e8:cb:f4:68:a2:4f:7e: 12:36:a7:99:6e:8a:c9:cb:0d:03:df:34:4f:4f:a9:18:3e:bf: ae:f7:5d:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwNzE4MjExNDQ3WhcNMjUwNzI1MjExNDQ3WjAYMRYwFAYD VQQDEw02ODdhYjk0Ny04ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk3VI4Pk/sZoVxTEK8+loaEtNT3AOgFJhVPCTFu6IH+p+Vhe2Y74mlmyMaSN /XrecjSuiRv6ZB1D1yOhHX12aQ60Lhb47sXyny+xS7VQYCbephq/+ADR4Ym50S5Q 5hm2vuQn2Uaxpj5ViBlyvyGQlRtp9jS4GkASrHswYvo43S49xa2sbAg5vjQyNHE5 ufwajStxWsgVcPkvS+d0nMtKOIGro0rwZiUL5odLUozjDvCp1QniC/+yZTHh0aDz cKxL4dvbSn2zjSE03lIZYKQSdVOuxl9/LQ4I6AE3lWMTguC68Hgof3H59WnPSlsn OAPVE3e/yJxHNd+bWOuCz8ICPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEI3Mcyo oiRkY4jnuNMxTkyMH0hjMB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe+UYbccw6Gt+Bo83p+un0+blk8se/Ei+ltzR4fuy64/8U55Wbacth iWU2iIp2Q/5/S/7UrL2pj5AABmK//Js1qtvuJ4giO74dkOJd8s5XatOBAiyFDvch 1Dh5uxhWE7aa7l12tLwO1/aV+k1MYvwQUKZUacTCWV9dCN2My4GVoN2f0qUgyLg+ exHsbatd+T+hp7JVZ/UuK1BfmBLVMpa5dAPJaq4yzS36p0G7/x4GztVD8WC3Ujss 0NXTh59rxA6h8wqeWuFtZkSlJJbhpQcckxzSjN0jRGjAprlFCKEtoJzp9OjL9Gii T34SNqeZborJyw0D3zRPT6kYPr+u9115 -----END CERTIFICATE-----Generated at Sun Jul 20 09:53:25 2025 by rpki-client