$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: 41sv5f7AUs1lpLEBFoq2BGiwbsIgH7Qt8BrC77wAjEg= Subject key identifier: 86:B0:D3:54:C7:6F:71:25:C2:F1:D9:41:DA:22:3B:89:E5:1E:FD:3B Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B57 Signing time: Sun 24 Aug 2025 19:06:36 +0000 Manifest this update: Sun 24 Aug 2025 19:06:35 +0000 Manifest next update: Sun 31 Aug 2025 19:06:35 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: GPavGUQJornxQNtnK+8o1wMiz2wZBVx0UVST/jE9Kvo=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Aug 24 19:06:35 2025 GMT Not After : Aug 31 19:06:35 2025 GMT Subject: CN=68ab62bc-736f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:ca:fa:b8:ee:ac:ca:e7:c3:99:45:a3:42: 5d:01:37:11:29:3e:a9:96:e4:63:e6:f4:c3:93:4b: 40:c9:25:77:71:a8:6a:ac:1e:ee:33:5b:2b:eb:2a: fe:5c:6c:7c:1b:b5:29:77:55:0c:3d:45:c8:21:23: 52:7c:cc:54:93:6f:f1:de:27:48:32:7d:97:cc:26: 25:ca:b7:86:fd:00:e9:e3:85:20:d2:3f:31:6b:08: 47:30:e7:16:c1:77:5a:1b:36:90:a6:80:20:4d:fe: bb:94:45:45:28:7a:b0:a6:ae:f5:c0:27:e6:31:1d: a3:d0:1b:ca:8e:c0:5d:12:d5:fd:13:91:a5:51:e7: 46:1a:66:c8:e9:b9:8e:dc:cc:cb:6f:60:86:bc:23: 79:51:78:07:0f:65:c0:e9:8b:d6:be:49:d2:97:bd: 47:8e:bf:f0:3f:d7:aa:73:76:4f:1d:6f:a7:97:aa: 0c:07:b3:3b:ad:0c:d6:88:a4:21:8c:d2:e7:d9:e8: 1f:2e:34:9e:a1:79:4f:c2:17:bf:05:1c:23:2f:f8: dd:30:d9:9a:85:1b:19:e6:53:c9:11:53:98:b4:9c: 2c:da:57:21:99:1b:7f:92:e3:ee:d0:08:5a:e0:99: 48:60:68:45:75:0d:55:78:00:52:33:af:f3:a8:fa: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B0:D3:54:C7:6F:71:25:C2:F1:D9:41:DA:22:3B:89:E5:1E:FD:3B X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:37:72:fe:bc:27:5b:2f:20:a8:3f:d5:06:9f:92:e3:97:99: c2:6d:62:48:c5:bc:ce:3f:07:2c:d8:40:ae:15:fe:13:f4:40: 55:49:4c:f7:67:03:08:b9:d5:59:a2:f1:bb:d2:26:f1:78:46: 59:54:cb:90:cb:48:4d:91:f8:3a:5b:3b:2a:66:71:24:a6:21: ec:63:a3:b1:09:c9:a6:c8:66:6a:e9:1c:31:1b:cf:0b:cb:aa: 62:e6:f9:fb:c4:7e:83:0c:cb:e0:f8:40:51:8e:f3:a6:15:65: 42:3c:f8:ff:cb:a1:e9:3f:04:87:cc:4a:d2:ab:83:2c:74:b6: f2:7b:b0:d2:c4:65:00:4c:3a:a3:41:9b:5c:9c:1a:70:22:e5: cc:8d:c4:a8:53:ad:8e:be:19:45:56:57:50:00:b6:89:66:e2: b9:5e:f2:77:44:29:77:57:dd:26:4e:28:7d:8e:6c:a1:a1:4f: c4:9f:d2:f6:53:70:1b:ff:22:0d:80:c5:7f:85:7a:49:71:05: eb:ab:71:cc:c2:ff:64:c1:20:56:68:23:17:a9:ee:26:37:f5: 3b:57:d1:0c:df:e8:55:c7:d7:6a:cf:27:00:3b:37:cc:b0:fd: 3c:f3:91:7c:10:23:51:c1:c2:1d:a2:1a:ca:44:79:66:1d:98: 87:3a:d5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwODI0MTkwNjM1WhcNMjUwODMxMTkwNjM1WjAYMRYwFAYD VQQDEw02OGFiNjJiYy03MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F3K+rjurMrnw5lFo0JdATcRKT6pluRj5vTDk0tAySV3cahqrB7uM1sr6yr+ XGx8G7Upd1UMPUXIISNSfMxUk2/x3idIMn2XzCYlyreG/QDp44Ug0j8xawhHMOcW wXdaGzaQpoAgTf67lEVFKHqwpq71wCfmMR2j0BvKjsBdEtX9E5GlUedGGmbI6bmO 3MzLb2CGvCN5UXgHD2XA6YvWvknSl71Hjr/wP9eqc3ZPHW+nl6oMB7M7rQzWiKQh jNLn2egfLjSeoXlPwhe/BRwjL/jdMNmahRsZ5lPJEVOYtJws2lchmRt/kuPu0Aha 4JlIYGhFdQ1VeABSM6/zqPpbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaw01TH b3ElwvHZQdoiO4nlHv07MB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2N3L+vCdbLyCoP9UGn5Ljl5nCbWJIxbzOPwcs2ECuFf4T9EBVSUz3 ZwMIudVZovG70ibxeEZZVMuQy0hNkfg6WzsqZnEkpiHsY6OxCcmmyGZq6RwxG88L y6pi5vn7xH6DDMvg+EBRjvOmFWVCPPj/y6HpPwSHzErSq4MsdLbye7DSxGUATDqj QZtcnBpwIuXMjcSoU62OvhlFVldQALaJZuK5XvJ3RCl3V90mTih9jmyhoU/En9L2 U3Ab/yINgMV/hXpJcQXrq3HMwv9kwSBWaCMXqe4mN/U7V9EM3+hVx9dqzycAOzfM sP0885F8ECNRwcIdohrKRHlmHZiHOtU8 -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:08 2025 by rpki-client