$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: l1ExLoqZf8wka0+xs9IJox0V9v+JhEZ1JObeKnlfKkA= Subject key identifier: 0F:EB:5F:85:11:DC:A4:25:01:81:92:48:59:B7:11:CA:EA:37:9C:45 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 15AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 15A3 Signing time: Sun 24 Aug 2025 16:45:11 +0000 Manifest this update: Sun 24 Aug 2025 16:45:11 +0000 Manifest next update: Sun 31 Aug 2025 16:45:10 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: JML8lNOQw3g0Vl4qTOeslbAw1JcNWP1dyV68mYOvKi0=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5547 (0x15ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Aug 24 16:45:11 2025 GMT Not After : Aug 31 16:45:10 2025 GMT Subject: CN=68ab4197-2489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:bc:4a:88:e4:e3:83:89:cb:cf:fd:ce:3e: 07:e9:96:d4:d8:fd:1e:3d:cb:7f:76:bc:9a:bd:05: be:29:37:ff:3a:a3:b6:66:08:85:6a:55:03:cc:cc: 7e:bd:4c:ef:e6:d9:30:99:cb:db:48:be:d6:e1:75: 64:06:ec:7b:65:d6:ab:68:3d:9c:d3:2f:cc:9e:d3: 61:f5:9b:eb:3d:31:2e:0e:77:01:99:9c:76:57:64: f7:3a:50:a0:bf:bf:b4:93:2d:c6:d8:72:62:d1:a8: 8c:43:d1:b7:17:c6:9e:7a:a9:0a:67:49:b6:57:f6: 3b:ca:0d:ba:65:85:d6:eb:a9:5f:94:6a:6f:95:a8: 68:c8:06:f8:79:1d:c7:7a:07:eb:20:f9:d9:27:ae: 8f:62:fc:7d:f1:41:5d:2d:5c:05:2d:26:e9:90:c4: 93:b5:97:82:38:a2:11:e2:9b:80:91:9b:96:25:60: 2c:25:9f:85:29:90:88:cc:a4:80:10:08:e8:ce:35: 8d:36:ab:21:11:29:41:e1:fe:33:61:88:4f:1b:f3: 5c:5e:84:23:b5:13:30:d6:e4:6b:2c:68:87:4a:af: ba:02:1f:ad:97:e3:97:44:74:72:35:26:6c:11:4f: d1:46:67:9e:5d:3d:0f:26:29:78:cd:1c:39:0e:4b: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:5F:85:11:DC:A4:25:01:81:92:48:59:B7:11:CA:EA:37:9C:45 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2d:79:3b:97:6c:d3:d7:be:8d:fe:ae:ca:31:78:d7:21:59: 52:76:3c:d0:f0:c5:a0:a3:53:28:f4:70:db:fa:4f:55:8d:d5: 79:46:23:12:ad:48:77:09:c0:0c:cb:4b:08:d8:4f:8a:d4:6d: b1:65:08:6e:d3:30:1c:37:9f:e8:a0:60:2a:8e:8c:a7:31:19: 9e:10:14:1d:15:3e:73:f4:93:a3:89:c4:1c:27:df:53:a7:1b: de:d3:f1:d8:3e:66:cd:2d:df:3b:19:d7:be:88:e1:15:9d:e5: e3:0b:04:cf:17:20:35:5b:06:9c:5d:bc:ba:c1:22:a9:95:43: 0f:5c:63:0f:d6:d9:fa:14:4e:b4:b4:e3:57:d1:2c:b1:70:41: 9f:f3:c3:22:b5:4c:f6:8d:a8:9c:cd:dd:44:e4:82:b9:2a:1f: 53:b2:88:eb:07:91:88:16:e6:e7:25:26:b3:61:dc:6d:fe:41: c1:d5:a3:4b:f6:38:cc:45:45:c0:7c:7c:2f:54:41:81:02:f7: 2c:89:71:43:86:dc:23:6d:e9:7a:42:5e:e3:64:64:54:a4:bf: d9:b1:75:67:6c:ad:98:a7:3d:52:c3:61:f0:81:a1:07:7c:7a: 02:3a:79:30:92:0b:b7:00:62:a0:81:07:2c:3d:88:fc:b1:64: a8:ae:ba:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwODI0MTY0NTExWhcNMjUwODMxMTY0NTEwWjAYMRYwFAYD VQQDEw02OGFiNDE5Ny0yNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuq8Sojk44OJy8/9zj4H6ZbU2P0ePct/dryavQW+KTf/OqO2ZgiFalUDzMx+ vUzv5tkwmcvbSL7W4XVkBux7ZdaraD2c0y/MntNh9ZvrPTEuDncBmZx2V2T3OlCg v7+0ky3G2HJi0aiMQ9G3F8aeeqkKZ0m2V/Y7yg26ZYXW66lflGpvlahoyAb4eR3H egfrIPnZJ66PYvx98UFdLVwFLSbpkMSTtZeCOKIR4puAkZuWJWAsJZ+FKZCIzKSA EAjozjWNNqshESlB4f4zYYhPG/NcXoQjtRMw1uRrLGiHSq+6Ah+tl+OXRHRyNSZs EU/RRmeeXT0PJil4zRw5DktS1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/rX4UR 3KQlAYGSSFm3EcrqN5xFMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASLXk7l2zT176N/q7KMXjXIVlSdjzQ8MWgo1Mo9HDb+k9VjdV5RiMS rUh3CcAMy0sI2E+K1G2xZQhu0zAcN5/ooGAqjoynMRmeEBQdFT5z9JOjicQcJ99T pxve0/HYPmbNLd87Gde+iOEVneXjCwTPFyA1WwacXby6wSKplUMPXGMP1tn6FE60 tONX0SyxcEGf88MitUz2jaiczd1E5IK5Kh9TsojrB5GIFubnJSazYdxt/kHB1aNL 9jjMRUXAfHwvVEGBAvcsiXFDhtwjbel6Ql7jZGRUpL/ZsXVnbK2Ypz1Sw2HwgaEH fHoCOnkwkgu3AGKggQcsPYj8sWSorrp/ -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:25 2025 by rpki-client