$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft File: nczQgPBy3iTvhCxqopJJnvE2m_Q.mft (raw, json) Hash identifier: ShQsJZxQswMIyUWWatnCCp/zIlYO/1/jtbtW6QERzrA= Subject key identifier: 39:92:37:F2:60:1C:A8:A7:57:D3:A7:66:F1:A6:14:37:7D:F5:8C:40 Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft Manifest number: 73 Signing time: Sat 23 Aug 2025 07:06:31 +0000 Manifest this update: Sat 23 Aug 2025 07:06:30 +0000 Manifest next update: Sat 30 Aug 2025 07:06:30 +0000 Files and hashes: 1: nczQgPBy3iTvhCxqopJJnvE2m_Q.crl (hash: sskm5GO5R1phsmtwHyaFoifoYAtVZ+f/lKiNFmT0ta4=) 2: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (hash: zhMP8LF5xzC/Q8On0PtHeNnJWxx2k1+qP2f+3qYJ/jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Validity Not Before: Aug 23 07:06:30 2025 GMT Not After : Aug 30 07:06:30 2025 GMT Subject: CN=68a96877-2745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:a1:da:63:52:b7:85:ba:ed:7c:e3:ef:4e: 14:a7:73:da:07:8a:35:14:3d:e6:eb:67:cf:d6:ed: da:75:6f:3c:c4:9a:08:be:18:cf:d6:1c:58:b7:3d: 40:c5:4b:f6:d6:c5:da:9a:d0:05:02:ff:6c:2b:d7: db:31:53:c2:a5:b8:74:75:c2:1e:f4:3b:d6:ff:2d: 80:10:f8:f6:76:04:1d:69:31:6a:9a:32:46:58:14: 2f:f5:87:5c:ee:ba:ca:ea:0d:f4:a0:b3:4e:14:a2: 85:fd:06:ae:0d:6d:1b:54:0c:22:2b:6f:e9:57:de: 0f:ec:8d:80:69:df:f8:27:a9:28:2d:d0:35:d7:b9: 19:c9:5c:e6:71:d2:d8:ae:52:c5:83:b1:fc:a5:79: d0:db:eb:2a:85:9d:ae:9f:aa:ad:bf:c4:9c:cf:5b: 29:42:78:63:03:ff:64:18:75:1a:0e:e9:9a:e3:20: 85:01:6c:91:d3:c3:7e:f3:60:b3:c2:54:9c:5e:59: 96:a4:c9:0f:07:73:f8:1a:af:14:4a:fc:6a:75:66: ce:39:c8:d2:9a:13:b8:ce:a7:0e:51:6a:a4:e6:aa: 4d:f3:5f:a2:d9:45:a3:2e:a8:37:31:dc:5c:9f:da: 9d:dd:ec:b2:60:50:a7:29:8b:58:af:71:f4:ac:20: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:37:F2:60:1C:A8:A7:57:D3:A7:66:F1:A6:14:37:7D:F5:8C:40 X509v3 Authority Key Identifier: keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d1:d7:88:fe:38:af:de:c0:08:d8:81:b3:b5:e0:e3:8e:ce: df:4f:ca:99:0b:42:5e:c8:aa:01:74:fe:fb:be:d8:ea:c5:7b: 0f:5a:7e:27:85:1b:0b:ff:54:e5:0c:28:dd:4b:bf:b4:f9:e3: 6b:90:5b:76:ff:1e:5d:fb:61:90:47:bd:9f:e7:2f:fa:f3:d1: 30:64:b2:f7:aa:b6:6a:45:7f:4a:54:14:62:d8:91:be:9a:1c: e4:fd:8c:37:cc:6d:78:08:ae:6e:68:33:62:e7:06:f7:ab:82: c5:67:ca:39:07:00:91:cb:66:69:83:d4:47:98:45:b7:13:5e: d2:46:c6:15:76:2e:5d:d8:25:94:f0:48:0f:90:a0:7c:4b:d2: fb:93:dd:bb:7e:da:49:91:c9:14:79:05:cb:47:c6:d1:a8:02: 3a:fe:9f:75:e8:09:0e:9c:26:0b:76:be:ac:64:2c:39:68:e9: 05:d3:39:0f:8a:66:db:5e:05:4b:7e:8d:78:c7:b7:ff:5f:54: 20:50:25:23:b2:94:bf:a5:d2:16:53:3f:70:bc:63:15:0a:5f: cc:dc:c0:36:f8:ee:e6:96:5a:e6:35:47:7c:69:e5:6f:56:a8: 3e:11:8a:20:5b:a0:02:b3:9e:15:d2:ff:3c:d4:69:e6:81:4f: a1:13:51:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTUwNDExMC8GA1UEBRMoOURDQ0QwODBGMDcyREUyNEVGODQyQzZBQTI5MjQ5OUVG MTM2OUJGNDAeFw0yNTA4MjMwNzA2MzBaFw0yNTA4MzAwNzA2MzBaMBgxFjAUBgNV BAMTDTY4YTk2ODc3LTI3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+oaHaY1K3hbrtfOPvThSnc9oHijUUPebrZ8/W7dp1bzzEmgi+GM/WHFi3PUDF S/bWxdqa0AUC/2wr19sxU8KluHR1wh70O9b/LYAQ+PZ2BB1pMWqaMkZYFC/1h1zu usrqDfSgs04UooX9Bq4NbRtUDCIrb+lX3g/sjYBp3/gnqSgt0DXXuRnJXOZx0tiu UsWDsfyledDb6yqFna6fqq2/xJzPWylCeGMD/2QYdRoO6ZrjIIUBbJHTw37zYLPC VJxeWZakyQ8Hc/garxRK/Gp1Zs45yNKaE7jOpw5RaqTmqk3zX6LZRaMuqDcx3Fyf 2p3d7LJgUKcpi1ivcfSsIGiFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOZI38mAc qKdX06dm8aYUN331jEAwHwYDVR0jBBgwFoAUnczQgPBy3iTvhCxqopJJnvE2m/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBNTA0LzMyMUJDNDhDRDNB QjExRUY4RUJEMEMyQkM0RjlBRTAyL25jelFnUEJ5M2lUdmhDeHFvcEpKbnZFMm1f US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmN6UWdQQnkzaVR2aEN4cW9wSkpudkUybV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB NTA0LzMyMUJDNDhDRDNBQjExRUY4RUJEMEMyQkM0RjlBRTAyL25jelFnUEJ5M2lU dmhDeHFvcEpKbnZFMm1fUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFnR14j+OK/ewAjYgbO14OOOzt9PypkLQl7IqgF0/vu+2OrFew9afieF Gwv/VOUMKN1Lv7T542uQW3b/Hl37YZBHvZ/nL/rz0TBksveqtmpFf0pUFGLYkb6a HOT9jDfMbXgIrm5oM2LnBvergsVnyjkHAJHLZmmD1EeYRbcTXtJGxhV2Ll3YJZTw SA+QoHxL0vuT3bt+2kmRyRR5BctHxtGoAjr+n3XoCQ6cJgt2vqxkLDlo6QXTOQ+K ZtteBUt+jXjHt/9fVCBQJSOylL+l0hZTP3C8YxUKX8zcwDb47uaWWuY1R3xp5W9W qD4RiiBboAKznhXS/zzUaeaBT6ETUek= -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:11 2025 by rpki-client