$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: SsRDpXKAxnQ0xflfr5u12bnTnxjcz6G70r/eb8GwLg8= Subject key identifier: 07:3E:41:10:C1:CD:BB:C0:35:37:BB:8A:C5:94:04:A0:41:E5:57:93 Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 06E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 06DB Signing time: Thu 04 Sep 2025 22:18:23 +0000 Manifest this update: Thu 04 Sep 2025 22:18:23 +0000 Manifest next update: Thu 11 Sep 2025 22:18:23 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: e5Dh94YvpOZad11A1XRiMixLsvPm3tuQvkvfeH6sXnI=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1760 (0x6e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Sep 4 22:18:23 2025 GMT Not After : Sep 11 22:18:23 2025 GMT Subject: CN=68ba102f-f3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:78:0a:10:cf:54:bd:fe:d1:c7:21:50:a6: 42:ae:8a:da:6d:21:f5:12:f2:94:3b:bf:9e:7c:65: 92:b4:1a:f1:b5:df:f8:b7:5c:2a:fc:a7:6a:b8:4c: 74:26:bc:08:ca:14:9d:51:60:26:ab:ad:ed:fa:ff: 09:92:47:ef:17:c9:c6:f0:bd:20:28:87:35:80:04: bd:15:90:1f:d8:7a:a7:78:85:14:82:e1:e5:ff:a5: d4:38:52:d9:57:84:18:6a:c6:df:6d:10:c8:47:18: c0:d8:df:8d:ca:e3:0a:e5:c4:60:22:da:b6:84:bb: 48:55:c7:0c:c4:c9:25:42:0e:ca:d6:13:83:72:8b: 29:e4:17:66:ee:69:7e:b8:ee:a1:fd:70:b4:25:6a: 62:7f:93:36:90:e5:7c:29:b9:f3:be:50:70:a2:32: 04:8c:bf:5a:23:0f:fb:d0:48:93:d6:8a:c9:dd:ef: 68:1a:94:92:bb:db:24:88:ad:66:7c:47:5c:43:f9: 84:ee:db:f5:18:a0:7c:b9:05:c6:c7:0d:1f:74:72: 28:57:be:9a:ee:b0:e5:fd:22:cb:20:7b:d3:c0:7d: 0b:05:3b:0c:15:c0:c3:88:53:f2:7b:81:0d:39:0c: be:4d:03:5b:3b:f3:a7:56:19:c2:ed:11:92:a0:24: 38:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3E:41:10:C1:CD:BB:C0:35:37:BB:8A:C5:94:04:A0:41:E5:57:93 X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1d:fc:ed:85:41:7e:69:b7:29:73:6b:2b:08:e4:5b:46:10: f2:14:f4:65:42:cb:c0:17:3a:a8:b6:fa:79:3e:6f:7d:db:fb: 4a:c6:13:43:40:7e:41:58:27:c2:af:11:0f:8e:3f:c6:59:43: 94:2a:20:f0:32:24:a6:13:90:6c:d5:be:e0:18:76:41:9f:6f: 21:a3:cf:a5:44:61:76:10:b4:2d:c8:15:00:35:32:d0:02:c6: 9d:ab:4f:2a:12:ae:65:80:22:77:bc:87:8f:0a:c1:b7:90:8c: 90:82:c6:05:5b:2c:f7:47:3c:7f:c2:95:e3:7c:81:13:08:3b: a9:02:e3:57:06:d6:26:82:13:17:d3:f1:e4:a2:ab:c7:d8:c9: 93:91:a2:c5:16:5b:41:fc:dc:20:ac:d6:df:b4:a4:0d:28:ba: 1f:1a:16:c6:0e:57:f7:b8:0c:a7:a5:b0:70:6f:b6:3a:09:dc: 0e:da:3a:85:fe:a6:2f:76:bc:7e:c1:12:9f:5a:73:d2:e9:44: ec:47:e5:25:05:36:eb:c8:25:c4:d2:24:06:61:45:57:be:e4: 4f:01:2c:ed:69:e9:74:eb:95:17:63:59:a2:f7:f2:f6:80:b2: 70:3c:ff:44:8b:1a:23:b9:ad:d2:6c:fc:07:41:fa:5d:19:98: 6f:bd:0b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjUwOTA0MjIxODIzWhcNMjUwOTExMjIxODIzWjAYMRYwFAYD VQQDEw02OGJhMTAyZi1mM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe94ChDPVL3+0cchUKZCrorabSH1EvKUO7+efGWStBrxtd/4t1wq/KdquEx0 JrwIyhSdUWAmq63t+v8JkkfvF8nG8L0gKIc1gAS9FZAf2HqneIUUguHl/6XUOFLZ V4QYasbfbRDIRxjA2N+NyuMK5cRgItq2hLtIVccMxMklQg7K1hODcosp5Bdm7ml+ uO6h/XC0JWpif5M2kOV8KbnzvlBwojIEjL9aIw/70EiT1orJ3e9oGpSSu9skiK1m fEdcQ/mE7tv1GKB8uQXGxw0fdHIoV76a7rDl/SLLIHvTwH0LBTsMFcDDiFPye4EN OQy+TQNbO/OnVhnC7RGSoCQ45wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc+QRDB zbvANTe7isWUBKBB5VeTMB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgHfzthUF+abcpc2srCORbRhDyFPRlQsvAFzqotvp5Pm992/tKxhND QH5BWCfCrxEPjj/GWUOUKiDwMiSmE5Bs1b7gGHZBn28ho8+lRGF2ELQtyBUANTLQ Asadq08qEq5lgCJ3vIePCsG3kIyQgsYFWyz3Rzx/wpXjfIETCDupAuNXBtYmghMX 0/HkoqvH2MmTkaLFFltB/NwgrNbftKQNKLofGhbGDlf3uAynpbBwb7Y6CdwO2jqF /qYvdrx+wRKfWnPS6UTsR+UlBTbryCXE0iQGYUVXvuRPASztael065UXY1mi9/L2 gLJwPP9Eixojua3SbPwHQfpdGZhvvQsU -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:54 2025 by rpki-client