$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: CBT5bbISp3ELnlqXWGDbWfAwxUyHJhW54nUdF3Mx1Zc= Subject key identifier: 30:36:49:B0:D8:75:1D:E4:D6:D8:69:E5:E8:8E:B0:7C:D4:42:08:21 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2AA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A69 Signing time: Tue 22 Jul 2025 15:37:46 +0000 Manifest this update: Tue 22 Jul 2025 15:37:45 +0000 Manifest next update: Tue 29 Jul 2025 15:37:45 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: wEhxxdaE7hkO5+NbP0haIKslb+s+Bu0ba69kMyNcMKQ=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10919 (0x2aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Jul 22 15:37:45 2025 GMT Not After : Jul 29 15:37:45 2025 GMT Subject: CN=687fb049-ee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:4a:e7:1d:29:3c:4d:1e:52:e6:c1:39:c2: 43:4b:83:14:5b:e9:82:f8:e9:32:c2:4f:95:f2:eb: 31:93:d9:e5:4c:ad:af:61:41:a9:32:e0:c7:81:8b: 95:ce:26:57:ad:f8:ae:a6:60:23:2a:7e:67:11:1d: 67:d0:9e:b4:fd:ac:c9:f9:f8:75:42:89:47:8a:12: 7a:8d:09:40:34:7b:e9:49:95:00:e2:4f:46:1f:85: bd:33:c2:ab:b7:83:c8:58:a0:f0:2f:30:5f:d0:ed: 57:51:fd:df:1f:df:7a:aa:7e:29:c3:bc:ea:19:6a: 69:2d:d4:fe:9d:4f:dd:7d:27:44:0b:2a:33:94:38: 38:27:04:1c:35:ba:b9:c2:a1:36:6d:3d:22:2d:a1: 81:d3:a5:91:22:59:81:95:e4:4b:89:db:c8:18:23: 7d:70:4c:d5:74:ff:25:68:56:1e:88:40:dd:29:16: b7:9e:16:f9:4b:bb:24:60:1f:cd:1d:9b:70:85:df: 1e:0d:ba:39:48:b6:46:cf:d4:a8:ba:f1:2c:40:81: 18:01:74:09:5a:90:27:55:79:09:af:97:1c:9b:13: d2:86:94:11:12:26:e1:10:c1:d1:cf:80:e3:cd:ae: 52:e5:b9:d1:fa:74:d0:ab:0c:37:be:c4:a5:0f:8c: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:49:B0:D8:75:1D:E4:D6:D8:69:E5:E8:8E:B0:7C:D4:42:08:21 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:e9:3c:e3:d4:31:ba:63:2a:22:d8:0d:7e:b6:30:8f:0b:25: 26:13:8d:dd:22:16:ea:3f:fe:e5:6c:c3:6e:61:f2:5e:32:fa: 7d:41:d9:c1:2f:dc:b3:98:e2:c5:c8:54:a4:9a:b5:24:7f:f7: a3:33:8a:30:d3:ac:77:df:8b:b2:81:8c:cd:e3:31:7a:e4:f1: d3:0f:75:d3:d5:e1:df:ca:0d:04:8d:05:68:5a:23:01:36:9e: 94:78:90:71:29:aa:93:9c:e3:30:a3:1f:e7:50:40:3f:54:f2: d0:c8:f5:78:14:87:38:2c:72:e7:b8:bd:9a:4c:4e:5b:93:7d: 56:ce:1f:73:ad:93:fd:51:f0:fe:16:43:c8:25:11:8d:df:db: 27:1a:da:23:fc:42:2b:af:77:09:8f:d1:b0:9f:c1:6e:ef:c3: 04:a7:a9:19:b8:80:63:e0:4a:0d:25:0e:da:a3:6b:71:89:14: 58:03:2f:5a:2e:11:7e:5e:bb:6d:66:09:88:f6:f8:4b:24:0f: 02:92:ee:67:fb:62:0f:36:be:e2:43:ca:9b:56:42:87:9a:ce: 39:82:06:f5:e1:c3:50:bb:e3:cd:8a:35:ef:c1:ab:af:19:bb: 33:47:6d:67:ef:1c:74:9d:78:39:34:87:ac:bb:4b:2f:21:58: 30:01:8c:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwNzIyMTUzNzQ1WhcNMjUwNzI5MTUzNzQ1WjAYMRYwFAYD VQQDEw02ODdmYjA0OS1lZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHlK5x0pPE0eUubBOcJDS4MUW+mC+Okywk+V8usxk9nlTK2vYUGpMuDHgYuV ziZXrfiupmAjKn5nER1n0J60/azJ+fh1QolHihJ6jQlANHvpSZUA4k9GH4W9M8Kr t4PIWKDwLzBf0O1XUf3fH996qn4pw7zqGWppLdT+nU/dfSdECyozlDg4JwQcNbq5 wqE2bT0iLaGB06WRIlmBleRLidvIGCN9cEzVdP8laFYeiEDdKRa3nhb5S7skYB/N HZtwhd8eDbo5SLZGz9SouvEsQIEYAXQJWpAnVXkJr5ccmxPShpQREibhEMHRz4Dj za5S5bnR+nTQqww3vsSlD4xWIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA2SbDY dR3k1thp5eiOsHzUQgghMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA6Tzj1DG6Yyoi2A1+tjCPCyUmE43dIhbqP/7lbMNuYfJeMvp9QdnB L9yzmOLFyFSkmrUkf/ejM4ow06x334uygYzN4zF65PHTD3XT1eHfyg0EjQVoWiMB Np6UeJBxKaqTnOMwox/nUEA/VPLQyPV4FIc4LHLnuL2aTE5bk31Wzh9zrZP9UfD+ FkPIJRGN39snGtoj/EIrr3cJj9Gwn8Fu78MEp6kZuIBj4EoNJQ7ao2txiRRYAy9a LhF+XrttZgmI9vhLJA8Cku5n+2IPNr7iQ8qbVkKHms45ggb14cNQu+PNijXvwauv GbszR21n7xx0nXg5NIesu0svIVgwAYw4 -----END CERTIFICATE-----Generated at Wed Jul 23 12:52:22 2025 by rpki-client