$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: SBvrF/EUwBzzt5hbXM2t2WKadA2TB69GUvHob4K23zI= Subject key identifier: 69:03:9F:2B:4D:8B:CD:C0:64:67:15:8F:84:5E:D8:A9:FE:0B:B3:9B Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 073E Signing time: Fri 18 Jul 2025 22:02:57 +0000 Manifest this update: Fri 18 Jul 2025 22:02:56 +0000 Manifest next update: Fri 25 Jul 2025 22:02:56 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: hKHWpY820u1GjUOOvWqZ5wpLRbx5s733mbgF87TW3GQ=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Jul 18 22:02:56 2025 GMT Not After : Jul 25 22:02:56 2025 GMT Subject: CN=687ac491-706c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:44:d8:63:a4:cf:e2:4a:24:e2:ea:df:81: 47:71:9c:e7:57:37:51:1a:0d:7a:48:3f:83:2c:63: c8:f7:43:7e:ca:57:ad:a3:bf:0e:01:a3:25:ef:9b: e8:cc:4d:d2:0c:8d:28:4d:2b:e8:d7:cf:2b:35:95: 78:95:4e:4c:95:0c:88:40:40:3c:62:aa:43:a5:cb: 15:b2:f5:60:f2:aa:a6:6e:b8:9f:9b:1a:42:fd:a8: af:ce:df:26:56:07:21:b0:2c:46:99:6a:27:94:61: 1c:fa:92:e9:cd:a7:48:e4:c4:dd:09:51:84:77:0b: 12:54:9c:2d:3d:bf:0d:89:70:93:d8:a3:43:1b:56: 93:0b:1a:32:0d:cc:1c:ea:0a:b9:77:8f:f5:88:11: c6:45:7c:87:36:02:dc:0b:ef:bb:25:d2:7d:11:d7: 6a:c7:cb:85:f5:90:e5:d9:53:66:18:b2:83:86:83: 97:f9:f2:0c:11:2b:ed:cf:aa:c4:da:11:c0:ad:35: 78:5c:33:10:96:e1:99:c0:0b:a6:bc:e3:4d:b8:ec: e1:bc:86:53:be:3e:25:83:4a:8c:2c:3b:7b:3c:91: 64:d6:85:fb:96:b9:f3:83:3a:23:51:2d:de:d9:1e: 30:0e:b3:1e:81:c6:78:bc:ee:be:b3:70:58:65:33: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:03:9F:2B:4D:8B:CD:C0:64:67:15:8F:84:5E:D8:A9:FE:0B:B3:9B X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:d9:b1:47:ca:4a:52:dd:fa:6f:dd:ff:0f:ac:9c:09:81: ee:a0:c6:4d:2f:19:99:71:d4:25:15:f6:d2:d0:f2:0d:a8:7b: 41:7c:67:5b:f2:b9:bf:be:7c:83:6c:ea:6c:d6:26:50:c3:44: a3:f1:5d:d3:0a:c0:39:ac:58:ab:db:a9:b0:6a:dd:3d:f5:36: d0:eb:e9:45:25:78:e2:13:1b:78:a0:ea:5b:c0:b8:cc:8a:5f: 3e:4c:4e:8b:5e:c4:b3:62:ff:8c:6b:e7:a7:57:54:cf:ef:da: 03:b6:fb:c1:65:ce:3b:a3:35:6e:05:20:60:3c:d5:d3:9f:29: 9a:24:0e:24:4a:5c:8e:5d:a1:75:f1:f5:6e:6a:01:f5:be:92: 57:38:b8:60:84:1a:e6:ec:cf:af:c4:67:a5:2c:85:7b:9b:36: 4e:7c:e5:ce:74:53:ac:06:9d:7c:82:56:08:d5:ed:f6:4e:33: 1c:84:a6:d0:41:af:ad:72:ad:bf:90:4c:d9:13:c5:b2:59:8d: 9a:cb:65:db:4d:aa:42:ea:f6:42:6e:47:3a:30:7d:50:89:e7: b0:61:6e:24:e5:51:80:7d:24:c2:2b:fd:d4:cc:f8:18:d5:23: 97:89:8c:17:c9:bb:0d:f4:d4:09:61:d2:e7:e3:cb:68:03:a9: 03:62:ba:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwNzE4MjIwMjU2WhcNMjUwNzI1MjIwMjU2WjAYMRYwFAYD VQQDEw02ODdhYzQ5MS03MDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsURE2GOkz+JKJOLq34FHcZznVzdRGg16SD+DLGPI90N+yleto78OAaMl75vo zE3SDI0oTSvo188rNZV4lU5MlQyIQEA8YqpDpcsVsvVg8qqmbrifmxpC/aivzt8m VgchsCxGmWonlGEc+pLpzadI5MTdCVGEdwsSVJwtPb8NiXCT2KNDG1aTCxoyDcwc 6gq5d4/1iBHGRXyHNgLcC++7JdJ9Eddqx8uF9ZDl2VNmGLKDhoOX+fIMESvtz6rE 2hHArTV4XDMQluGZwAumvONNuOzhvIZTvj4lg0qMLDt7PJFk1oX7lrnzgzojUS3e 2R4wDrMegcZ4vO6+s3BYZTPGSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkDnytN i83AZGcVj4Re2Kn+C7ObMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNNmxR8pKUt36b93/D6ycCYHuoMZNLxmZcdQlFfbS0PINqHtBfGdb 8rm/vnyDbOps1iZQw0Sj8V3TCsA5rFir26mwat099TbQ6+lFJXjiExt4oOpbwLjM il8+TE6LXsSzYv+Ma+enV1TP79oDtvvBZc47ozVuBSBgPNXTnymaJA4kSlyOXaF1 8fVuagH1vpJXOLhghBrm7M+vxGelLIV7mzZOfOXOdFOsBp18glYI1e32TjMchKbQ Qa+tcq2/kEzZE8WyWY2ay2XbTapC6vZCbkc6MH1QieewYW4k5VGAfSTCK/3UzPgY 1SOXiYwXybsN9NQJYdLn48toA6kDYrps -----END CERTIFICATE-----Generated at Sun Jul 20 19:06:03 2025 by rpki-client