$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft File: nT4CCLhd8EngI7NH2psYP8Vrqx4.mft (raw, json) Hash identifier: /OhCKheYdcgrje0tg3omx6OqOgCTXZukpgUKyUaBlL0= Subject key identifier: 10:AA:D8:E7:60:CE:CB:AA:B9:0E:C0:8C:B6:23:20:F2:31:9B:0E:91 Authority key identifier: 9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E Certificate issuer: /CN=A919D6D8/serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Certificate serial: 0ACA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft Manifest number: 1349 Signing time: Fri 18 Jul 2025 19:39:41 +0000 Manifest this update: Fri 18 Jul 2025 19:39:41 +0000 Manifest next update: Fri 25 Jul 2025 19:39:41 +0000 Files and hashes: 1: nT4CCLhd8EngI7NH2psYP8Vrqx4.crl (hash: EiawCWYAAufDRhiWyOBXmCUnqQ8s9lrY4xeGvzezAZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=9D3E0208B85DF049E023B347DA9B183FC56BAB1E Validity Not Before: Jul 18 19:39:41 2025 GMT Not After : Jul 25 19:39:41 2025 GMT Subject: CN=687aa2fd-8707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:ba:20:53:7d:de:47:47:83:7e:eb:4e:7e: 4b:2e:04:de:35:ea:63:0f:5a:28:3a:af:d4:4c:7d: b9:73:87:c0:5d:e3:b6:bf:90:60:29:a1:7c:fb:cd: fa:29:bd:39:89:d1:9a:9f:e7:52:54:dd:77:38:72: 58:fe:b7:70:36:a7:ff:d3:bc:fe:b7:fd:7e:0b:8e: eb:88:cc:a4:c8:b0:ea:f6:12:1b:8f:80:8b:7c:da: 98:a7:0d:df:47:0e:3a:a7:97:1c:22:d5:a9:94:20: 58:01:c5:df:05:24:e3:ff:d3:a8:2f:e8:ee:07:b0: 5a:f1:b6:eb:35:e6:98:ff:41:fd:82:47:76:a0:65: 7f:71:5e:5b:a3:f3:a8:84:da:b7:aa:01:91:ce:00: ce:63:eb:18:eb:b2:7c:4c:30:e6:c4:b6:30:25:ad: 4d:49:af:49:f7:43:c7:83:cd:61:5e:68:04:1a:66: bf:82:1a:6f:34:95:d8:05:5f:c5:68:a1:21:a0:0e: 9a:3a:b5:b5:91:25:cf:33:45:6d:ef:fd:8a:06:ea: b8:92:e7:df:9a:aa:6d:6e:91:c2:fd:bc:1d:60:3d: 46:59:ab:f5:1f:53:5c:ce:5e:08:40:68:5d:14:8b: b9:50:63:3f:26:34:64:e0:c8:22:f0:01:9e:71:9e: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:D8:E7:60:CE:CB:AA:B9:0E:C0:8C:B6:23:20:F2:31:9B:0E:91 X509v3 Authority Key Identifier: keyid:9D:3E:02:08:B8:5D:F0:49:E0:23:B3:47:DA:9B:18:3F:C5:6B:AB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nT4CCLhd8EngI7NH2psYP8Vrqx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/nT4CCLhd8EngI7NH2psYP8Vrqx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:40:c8:c8:08:09:e7:13:81:28:08:5d:b7:4f:81:2b:5f:f1: 47:4e:97:bd:95:ba:51:fe:9e:eb:e9:3a:16:df:da:99:14:43: 71:ae:53:10:8a:b9:b4:72:a2:8f:d6:5e:06:a1:e9:df:e9:f2: 45:50:c9:bc:e3:9c:b2:97:a0:a9:a4:55:0f:7f:03:9c:e1:21: 6e:66:03:79:8e:fa:de:fc:14:52:cd:34:1e:8b:00:cb:00:cb: dc:c9:08:9e:4d:9f:1c:53:6e:5b:4d:76:fe:31:b3:0c:b4:d7: 44:58:32:99:7f:e6:6f:2d:d7:c5:07:54:19:ca:71:a1:9f:5c: ec:b4:1e:d3:8e:da:0a:d9:ba:09:24:8b:ed:46:e9:fe:b3:0f: a0:82:84:86:1e:e7:a9:71:05:4b:50:35:d5:27:12:f4:61:4d: 00:3f:6a:03:c9:11:e9:67:51:39:d8:46:2b:00:00:fb:fa:ac: 92:da:ad:95:08:86:24:08:90:57:6d:cc:7d:3f:4e:a0:ba:7e: 79:ac:21:09:29:f6:90:a6:2f:d0:18:ac:d8:52:a9:35:94:8f: b5:d6:8e:37:d6:f3:b4:a3:b0:e7:b4:5d:3f:15:64:5e:03:3c: 6a:61:13:47:be:24:c3:08:11:9d:57:b1:d2:21:7f:fd:15:9d: 35:5c:f0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDlEM0UwMjA4Qjg1REYwNDlFMDIzQjM0N0RBOUIxODNG QzU2QkFCMUUwHhcNMjUwNzE4MTkzOTQxWhcNMjUwNzI1MTkzOTQxWjAYMRYwFAYD VQQDEw02ODdhYTJmZC04NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylC6IFN93kdHg37rTn5LLgTeNepjD1ooOq/UTH25c4fAXeO2v5BgKaF8+836 Kb05idGan+dSVN13OHJY/rdwNqf/07z+t/1+C47riMykyLDq9hIbj4CLfNqYpw3f Rw46p5ccItWplCBYAcXfBSTj/9OoL+juB7Ba8bbrNeaY/0H9gkd2oGV/cV5bo/Oo hNq3qgGRzgDOY+sY67J8TDDmxLYwJa1NSa9J90PHg81hXmgEGma/ghpvNJXYBV/F aKEhoA6aOrW1kSXPM0Vt7/2KBuq4kuffmqptbpHC/bwdYD1GWav1H1Nczl4IQGhd FIu5UGM/JjRk4Mgi8AGecZ5HhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCq2Odg zsuquQ7AjLYjIPIxmw6RMB8GA1UdIwQYMBaAFJ0+Agi4XfBJ4COzR9qbGD/Fa6se MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhFbmdJN05IMnBzWVA4VnJx eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UNENDTGhkOEVuZ0k3TkgycHNZUDhWcnF4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9uVDRDQ0xoZDhF bmdJN05IMnBzWVA4VnJxeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhQMjICAnnE4EoCF23T4ErX/FHTpe9lbpR/p7r6ToW39qZFENxrlMQ irm0cqKP1l4Goenf6fJFUMm845yyl6CppFUPfwOc4SFuZgN5jvre/BRSzTQeiwDL AMvcyQieTZ8cU25bTXb+MbMMtNdEWDKZf+ZvLdfFB1QZynGhn1zstB7TjtoK2boJ JIvtRun+sw+ggoSGHuepcQVLUDXVJxL0YU0AP2oDyRHpZ1E52EYrAAD7+qyS2q2V CIYkCJBXbcx9P06gun55rCEJKfaQpi/QGKzYUqk1lI+11o431vO0o7DntF0/FWRe AzxqYRNHviTDCBGdV7HSIX/9FZ01XPAY -----END CERTIFICATE-----Generated at Sun Jul 20 04:29:03 2025 by rpki-client