$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft File: n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft (raw, json) Hash identifier: q/peMP40Q6yrWU0xZb4Xc8ADh/j5LKcp088mhW92XQ4= Subject key identifier: 79:78:F4:6B:00:E3:21:41:CC:36:48:97:8F:38:DB:56:5E:CF:97:F2 Authority key identifier: 9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB Certificate issuer: /CN=A917D958/serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft Manifest number: 90 Signing time: Fri 05 Sep 2025 07:01:14 +0000 Manifest this update: Fri 05 Sep 2025 07:01:14 +0000 Manifest next update: Fri 12 Sep 2025 07:01:14 +0000 Files and hashes: 1: n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl (hash: yu7/05jXUtrcQMo3MGrJYqx/p8Pxuum3sQcA0NMWFEI=) 2: 0AC8BB74B5E211EFBEF4BC5AC4F9AE02.roa (hash: oV9dv3enUEk5QI7ZEWYNcHlwdjoeFV6bdPfVFfihoSE=) 3: 0A581522B5E211EFBEF4BC5AC4F9AE02.roa (hash: PxzOBVWe5yWGLa4iNAyNqYyPaQ/eMXGqSREN7aFVLso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=9F4906C0D4CC9645D9BFD93364A23A5A33EF58DB Validity Not Before: Sep 5 07:01:14 2025 GMT Not After : Sep 12 07:01:14 2025 GMT Subject: CN=68ba8aba-874c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:8b:1d:71:48:a0:01:76:4e:a6:14:cd:18: 99:6b:22:c2:a9:d3:2c:89:a4:7d:a6:fc:66:11:1b: 73:5b:b5:a5:87:33:e8:77:55:4b:0d:f6:70:71:9e: 74:3d:7b:58:0f:17:cf:1e:f4:60:db:8a:d6:52:bc: 5e:b4:67:89:b6:01:bb:69:ef:83:84:ab:3e:a3:a0: ea:69:43:75:53:e7:1c:fc:12:9d:22:98:10:e1:cc: e5:72:27:90:d0:e6:1e:7a:35:90:39:a9:67:81:37: 81:f0:53:7e:48:2b:1a:d2:60:ca:08:ac:44:8f:1e: c0:2f:a7:9a:70:7b:e0:1a:ba:be:49:15:ba:6d:6a: f2:df:f9:87:27:6d:42:ab:2c:79:cf:2c:0d:e4:ad: 92:6f:7e:a5:62:09:4c:3b:52:02:87:93:3f:71:c4: 14:e5:5d:2e:f3:83:67:d0:75:80:fd:ce:d9:9e:85: 7a:4e:66:0a:bd:12:9e:64:80:f1:58:2d:0d:56:4f: c6:1c:e6:6a:b7:9c:ad:ce:e0:37:24:3b:4e:7c:df: 4f:94:2e:0f:d2:32:38:f1:37:7a:a3:d5:75:e2:73: b9:f4:ec:0b:6e:d9:76:0b:87:da:04:33:11:0d:e7: 18:72:6c:c7:b8:a2:e9:fc:64:64:5a:fb:5d:7a:71: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:78:F4:6B:00:E3:21:41:CC:36:48:97:8F:38:DB:56:5E:CF:97:F2 X509v3 Authority Key Identifier: keyid:9F:49:06:C0:D4:CC:96:45:D9:BF:D9:33:64:A2:3A:5A:33:EF:58:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n0kGwNTMlkXZv9kzZKI6WjPvWNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/672DB048B39B11EF80F6435EC4F9AE02/n0kGwNTMlkXZv9kzZKI6WjPvWNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:6a:c1:79:56:52:db:03:7e:85:6c:02:3f:50:21:ec:9f: 36:0a:28:d6:84:12:7e:3e:7d:00:b8:9a:6f:3f:8f:6d:67:44: 8a:36:1a:d1:a3:65:15:21:b8:c6:8c:fc:d4:4f:35:9a:9b:ed: 45:4e:45:ba:a3:f9:6d:d7:b4:8f:35:9b:d8:d6:92:e3:87:9b: 41:33:3b:8a:d6:e7:4e:ba:ac:02:ad:02:b9:73:61:73:44:12: 24:77:80:c5:b0:ec:82:ce:7f:54:49:c2:67:95:2e:87:73:79: f4:35:b7:cb:f2:4d:16:b3:a3:49:16:48:22:47:c7:0a:47:46: 2f:a0:06:09:96:df:e2:57:19:01:27:9a:98:99:43:45:6f:c6: bb:4b:28:53:e9:3d:7b:93:a8:f9:d3:ff:d3:dc:6b:29:d6:34: 2f:c1:a6:e8:58:be:86:50:46:31:b8:f4:39:d5:57:47:50:c2: 64:5a:3b:b9:21:74:bf:96:01:cd:bf:c1:a7:a9:ed:fb:ad:02: 64:72:63:fd:7d:91:b5:ae:2b:08:b6:ca:82:ac:d8:cd:95:8e: 84:70:04:23:da:c4:13:a9:5c:4a:fb:65:d0:35:80:78:59:50: 9f:d7:3d:a3:91:98:ab:23:ce:48:62:1d:4b:b8:16:7c:52:b4: 21:fb:2c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDlGNDkwNkMwRDRDQzk2NDVEOUJGRDkzMzY0QTIzQTVB MzNFRjU4REIwHhcNMjUwOTA1MDcwMTE0WhcNMjUwOTEyMDcwMTE0WjAYMRYwFAYD VQQDEw02OGJhOGFiYS04NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+6LHXFIoAF2TqYUzRiZayLCqdMsiaR9pvxmERtzW7WlhzPod1VLDfZwcZ50 PXtYDxfPHvRg24rWUrxetGeJtgG7ae+DhKs+o6DqaUN1U+cc/BKdIpgQ4czlcieQ 0OYeejWQOalngTeB8FN+SCsa0mDKCKxEjx7AL6eacHvgGrq+SRW6bWry3/mHJ21C qyx5zywN5K2Sb36lYglMO1ICh5M/ccQU5V0u84Nn0HWA/c7ZnoV6TmYKvRKeZIDx WC0NVk/GHOZqt5ytzuA3JDtOfN9PlC4P0jI48Td6o9V14nO59OwLbtl2C4faBDMR DecYcmzHuKLp/GRkWvtdenGW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHl49GsA 4yFBzDZIl48421Zez5fyMB8GA1UdIwQYMBaAFJ9JBsDUzJZF2b/ZM2SiOloz71jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82NzJEQjA0OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxrWFp2OWt6WktJNldqUHZX TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24wa0d3TlRNbGtYWnY5a3paS0k2V2pQdldOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82NzJEQjA0OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9uMGtHd05UTWxr WFp2OWt6WktJNldqUHZXTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBzGrBeVZS2wN+hWwCP1Ah7J82CijWhBJ+Pn0AuJpvP49tZ0SKNhrR o2UVIbjGjPzUTzWam+1FTkW6o/lt17SPNZvY1pLjh5tBMzuK1udOuqwCrQK5c2Fz RBIkd4DFsOyCzn9UScJnlS6Hc3n0NbfL8k0Ws6NJFkgiR8cKR0YvoAYJlt/iVxkB J5qYmUNFb8a7SyhT6T17k6j50//T3Gsp1jQvwaboWL6GUEYxuPQ51VdHUMJkWju5 IXS/lgHNv8Gnqe37rQJkcmP9fZG1risItsqCrNjNlY6EcAQj2sQTqVxK+2XQNYB4 WVCf1z2jkZirI85IYh1LuBZ8UrQh+yy3 -----END CERTIFICATE-----Generated at Sat Sep 6 06:31:24 2025 by rpki-client