$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: 3vheoM4RK7zBujdEoHEXA5o5S/WCEAk3S44lg+3vLME= Subject key identifier: 13:D2:61:B3:01:B0:E9:DC:C6:EB:F4:6B:D1:1E:50:43:05:A8:0B:D8 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 143D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1435 Signing time: Mon 28 Jul 2025 17:09:31 +0000 Manifest this update: Mon 28 Jul 2025 17:09:31 +0000 Manifest next update: Mon 04 Aug 2025 17:09:31 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: qMRjAXmfY4p5FmJdlU6PQzCiCRgJ62mqFG0ciCj5pNM=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5181 (0x143d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Jul 28 17:09:31 2025 GMT Not After : Aug 4 17:09:31 2025 GMT Subject: CN=6887aecb-561f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:39:20:3e:1a:24:02:fb:6d:ca:af:31:4c: 15:54:70:ad:96:06:41:2d:0d:b5:7a:12:33:4a:de: 93:51:fc:f0:5b:09:94:d4:a9:aa:08:1e:b8:72:de: f1:ec:0c:e5:cb:fc:bd:b7:d6:40:b3:4d:dc:4f:88: 34:84:d7:2f:1f:d9:9a:4c:c0:15:c8:eb:00:59:76: e2:0b:c6:8b:16:3e:3a:eb:ea:04:66:88:3d:ff:3e: 92:00:42:74:86:d0:b8:64:28:80:db:97:64:08:0b: ab:27:cc:27:80:71:c0:df:cd:a0:ee:36:cc:5a:f6: 78:27:b5:90:60:32:07:96:f8:4f:95:5f:3a:4f:6b: 35:4c:66:46:fe:31:57:b8:df:df:24:99:3f:75:94: 18:0b:7a:b7:88:bb:6d:df:b5:c9:fb:69:7e:fe:a9: 13:e8:c2:a1:cd:c8:f7:12:d9:44:4d:06:cd:ef:db: 6a:55:0c:76:ad:e5:cd:0b:df:15:79:7e:8f:98:21: 3e:0f:08:c2:ab:fa:43:f6:c1:b4:1a:d2:58:5c:f0: 51:1c:3e:3c:9d:8d:de:28:13:58:18:16:f7:68:44: 02:3f:81:d4:1a:57:97:67:97:d4:51:d9:ce:0b:11: fe:6b:e7:4c:b1:69:03:62:fe:12:fd:72:b8:27:8d: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:61:B3:01:B0:E9:DC:C6:EB:F4:6B:D1:1E:50:43:05:A8:0B:D8 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2c:99:f4:4d:b0:c1:bd:b2:af:62:0b:06:1c:66:18:87:19: 7b:5a:74:55:7d:76:b2:c4:5d:25:4c:98:6d:f3:ce:61:dc:be: 26:13:b8:70:ad:9e:4a:49:fc:2c:09:a9:18:13:f4:e4:2e:d6: a0:46:45:8c:72:52:41:69:2a:ae:7f:74:5d:ba:a1:66:2d:12: 8b:24:f7:57:3f:63:3c:e4:8f:50:07:68:b8:33:53:0b:91:45: 65:22:b0:1b:21:95:85:3b:4f:dd:e7:ba:09:8d:3c:8d:f6:b1: 24:96:36:c9:55:12:14:12:52:6c:ee:de:91:39:26:fd:0a:eb: 0f:a8:9d:73:d8:93:c9:22:d2:e1:90:06:31:eb:8a:fe:54:c7: d3:aa:48:52:5b:85:81:d5:89:26:70:60:19:c3:45:f0:31:60: c9:80:7b:51:3d:4b:bd:b5:65:73:1c:85:48:c2:48:a0:bf:7d: e9:8f:a1:ff:52:76:12:68:c4:b8:69:77:bf:20:c8:a7:01:2e: 4a:35:9e:28:30:7f:e9:2d:1a:82:00:f5:81:bc:b6:2e:9a:b0: 98:ce:5b:1a:50:fb:a1:0a:f6:9d:9f:12:d6:88:01:78:8a:5d: 18:8e:44:f9:96:3a:4e:7d:d9:17:09:62:1c:5a:41:46:ac:3c: 9f:82:10:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNzI4MTcwOTMxWhcNMjUwODA0MTcwOTMxWjAYMRYwFAYD VQQDEw02ODg3YWVjYi01NjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5z45ID4aJAL7bcqvMUwVVHCtlgZBLQ21ehIzSt6TUfzwWwmU1KmqCB64ct7x 7Azly/y9t9ZAs03cT4g0hNcvH9maTMAVyOsAWXbiC8aLFj466+oEZog9/z6SAEJ0 htC4ZCiA25dkCAurJ8wngHHA382g7jbMWvZ4J7WQYDIHlvhPlV86T2s1TGZG/jFX uN/fJJk/dZQYC3q3iLtt37XJ+2l+/qkT6MKhzcj3EtlETQbN79tqVQx2reXNC98V eX6PmCE+DwjCq/pD9sG0GtJYXPBRHD48nY3eKBNYGBb3aEQCP4HUGleXZ5fUUdnO CxH+a+dMsWkDYv4S/XK4J40pxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPSYbMB sOncxuv0a9EeUEMFqAvYMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLJn0TbDBvbKvYgsGHGYYhxl7WnRVfXayxF0lTJht885h3L4mE7hw rZ5KSfwsCakYE/TkLtagRkWMclJBaSquf3RduqFmLRKLJPdXP2M85I9QB2i4M1ML kUVlIrAbIZWFO0/d57oJjTyN9rEkljbJVRIUElJs7t6ROSb9CusPqJ1z2JPJItLh kAYx64r+VMfTqkhSW4WB1YkmcGAZw0XwMWDJgHtRPUu9tWVzHIVIwkigv33pj6H/ UnYSaMS4aXe/IMinAS5KNZ4oMH/pLRqCAPWBvLYumrCYzlsaUPuhCvadnxLWiAF4 il0YjkT5ljpOfdkXCWIcWkFGrDyfghCe -----END CERTIFICATE-----Generated at Tue Jul 29 16:40:53 2025 by rpki-client