$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft File: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft (raw, json) Hash identifier: o7g/awNJVc+sseYCKUo3tIbUdsQhmFHtpK2Yb65aRfM= Subject key identifier: E6:3E:AC:0C:AF:0F:C7:E0:56:CA:8D:ED:CE:CD:6E:3C:79:93:38:B6 Authority key identifier: 36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 Certificate issuer: /CN=A9150A9C/serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Certificate serial: 0920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft Manifest number: 0918 Signing time: Wed 20 Aug 2025 20:21:21 +0000 Manifest this update: Wed 20 Aug 2025 20:21:21 +0000 Manifest next update: Wed 27 Aug 2025 20:21:21 +0000 Files and hashes: 1: Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl (hash: +gIMtrgT2P0ToNh11BDVTAh7vDL4kLGkP/MCUveaxxw=) 2: E04ADD7CB2E511EAA94E5634C4F9AE02.roa (hash: SDDF+daD6uA45d2pVbzA/cw/2JyMm9s9TzTDlHyfXN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150A9C, serialNumber=367E1FAF752C631FC43D872098240E80321575C7 Validity Not Before: Aug 20 20:21:21 2025 GMT Not After : Aug 27 20:21:21 2025 GMT Subject: CN=68a62e41-b55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:75:93:00:c8:0e:13:69:04:bf:b2:cd:45: 45:c4:59:b7:2d:86:af:d4:05:4e:f1:d5:d9:20:a6: 06:21:bc:3a:69:3f:93:5c:73:19:d5:ec:96:34:6a: 22:4f:9a:fc:0b:35:5d:ad:ae:14:5b:e1:07:33:32: 96:50:5f:e2:28:5f:ba:91:b7:84:59:09:d8:4d:05: ec:91:7d:8d:b2:73:a4:a3:91:fc:54:0d:fe:e0:9c: 6a:23:56:0f:a8:ef:77:3a:1c:61:c3:c3:b9:7b:51: 6f:31:7f:dc:f2:2a:e5:d9:e7:86:59:0b:53:83:17: 03:32:9e:05:96:7c:e4:1e:52:d7:5e:f4:d7:9b:24: d1:14:81:b7:81:7f:55:1c:87:de:91:29:08:e0:85: be:a3:c7:5b:fe:31:9d:8c:21:96:d8:ed:ff:23:11: 34:a9:23:72:4b:51:52:d2:52:2b:60:0b:1b:59:29: ba:46:ae:e2:9e:b4:4e:41:7c:73:e1:7d:7e:02:b3: 0b:14:fe:69:39:e7:a1:24:de:36:8a:69:99:7d:83: d1:da:03:aa:06:26:62:66:d7:b2:f4:1b:66:65:f3: 6e:5a:78:69:5e:4d:af:0c:bb:e5:0c:33:7e:93:d0: b1:52:3a:b4:ac:4f:e5:0c:8f:3c:c3:61:10:d3:2e: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:AC:0C:AF:0F:C7:E0:56:CA:8D:ED:CE:CD:6E:3C:79:93:38:B6 X509v3 Authority Key Identifier: keyid:36:7E:1F:AF:75:2C:63:1F:C4:3D:87:20:98:24:0E:80:32:15:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/Nn4fr3UsYx_EPYcgmCQOgDIVdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ec:46:7a:2e:01:ae:ac:aa:98:2d:4c:58:73:6e:ea:c2:3f: 61:e1:13:c6:df:1a:93:b5:12:f5:15:51:65:83:c0:b0:67:6e: ae:6c:6c:df:c1:94:7e:be:1a:a3:93:51:2f:42:56:49:52:b3: 11:77:3d:dd:36:38:cb:e7:2a:b0:db:5c:a7:31:03:e4:d3:1f: cc:6d:c2:96:bb:e1:d4:01:86:8b:5d:5f:71:a0:c3:54:fb:b9: 9d:9f:b6:03:81:b4:1a:01:76:31:16:5b:eb:de:bf:0b:8c:44: cb:fe:8c:a0:89:98:a1:db:94:f9:f3:20:e4:6a:5d:56:54:6a: 39:3a:ae:16:27:10:d9:a1:0c:3c:d9:ba:7f:74:c2:a0:6a:26: da:eb:2b:83:a1:a8:88:c9:e1:d9:8a:05:7b:60:2f:41:b2:9c: 84:3b:86:a8:76:63:eb:97:14:e6:0c:32:48:d1:c5:42:1c:5b: b8:16:51:5b:ed:c7:23:54:8d:13:bf:1b:db:8e:8c:1f:4e:4d: f3:98:08:b6:6d:b7:b9:da:32:01:6d:6d:5d:9f:04:aa:3a:83: ee:ca:96:c5:b1:02:cc:0d:1e:1e:86:36:2d:d9:76:b6:52:09: e3:b4:b4:ff:32:95:64:b6:a3:81:05:42:7f:04:7a:43:e7:d7: cd:68:32:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBBOUMxMTAvBgNVBAUTKDM2N0UxRkFGNzUyQzYzMUZDNDNEODcyMDk4MjQwRTgw MzIxNTc1QzcwHhcNMjUwODIwMjAyMTIxWhcNMjUwODI3MjAyMTIxWjAYMRYwFAYD VQQDEw02OGE2MmU0MS1iNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHJ1kwDIDhNpBL+yzUVFxFm3LYav1AVO8dXZIKYGIbw6aT+TXHMZ1eyWNGoi T5r8CzVdra4UW+EHMzKWUF/iKF+6kbeEWQnYTQXskX2NsnOko5H8VA3+4JxqI1YP qO93Ohxhw8O5e1FvMX/c8irl2eeGWQtTgxcDMp4FlnzkHlLXXvTXmyTRFIG3gX9V HIfekSkI4IW+o8db/jGdjCGW2O3/IxE0qSNyS1FS0lIrYAsbWSm6Rq7inrROQXxz 4X1+ArMLFP5pOeehJN42immZfYPR2gOqBiZiZtey9BtmZfNuWnhpXk2vDLvlDDN+ k9CxUjq0rE/lDI88w2EQ0y79hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY+rAyv D8fgVsqN7c7Nbjx5kzi2MB8GA1UdIwQYMBaAFDZ+H691LGMfxD2HIJgkDoAyFXXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEE5Qy8yQTI5NDg0Q0FC QTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4X0VQWWNnbUNRT2dESVZk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05uNGZyM1VzWXhfRVBZY2dtQ1FPZ0RJVmRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEE5Qy8yQTI5NDg0Q0FCQTgxMUVBOTVDRTJDMTZDNEY5QUUwMi9ObjRmcjNVc1l4 X0VQWWNnbUNRT2dESVZkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67EZ6LgGurKqYLUxYc27qwj9h4RPG3xqTtRL1FVFlg8CwZ26ubGzf wZR+vhqjk1EvQlZJUrMRdz3dNjjL5yqw21ynMQPk0x/MbcKWu+HUAYaLXV9xoMNU +7mdn7YDgbQaAXYxFlvr3r8LjETL/oygiZih25T58yDkal1WVGo5Oq4WJxDZoQw8 2bp/dMKgaiba6yuDoaiIyeHZigV7YC9BspyEO4aodmPrlxTmDDJI0cVCHFu4FlFb 7ccjVI0TvxvbjowfTk3zmAi2bbe52jIBbW1dnwSqOoPuypbFsQLMDR4ehjYt2Xa2 UgnjtLT/MpVktqOBBUJ/BHpD59fNaDLN -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:46 2025 by rpki-client