$ rpki-client -vvf rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft File: Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft (raw, json) Hash identifier: QeKYgbga4CWB0xHiOux0cbkdQi9R78rRgHrwjwd8sew= Subject key identifier: 51:0F:50:B3:96:AA:AF:E2:51:24:77:DE:C6:E8:61:C9:65:49:CF:6C Authority key identifier: 36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F Certificate issuer: /CN=A919D656/serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft Manifest number: 0203 Signing time: Thu 21 Aug 2025 02:23:38 +0000 Manifest this update: Thu 21 Aug 2025 02:23:37 +0000 Manifest next update: Thu 28 Aug 2025 02:23:37 +0000 Files and hashes: 1: Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl (hash: Pe9RBunuk/kuxUnX9Xqe8cTM1MH8B8DxZRQXoZBv6DY=) 2: 00FFAB766ACF11EDBCC28E3CC4F9AE02.roa (hash: XpTSLigO4HKKd3j+0vvg/u/YVC83XW6OinlRQSFc3LQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D656, serialNumber=361BBA9408FA19B5E97D82CDDBFFB2E79BBBA33F Validity Not Before: Aug 21 02:23:37 2025 GMT Not After : Aug 28 02:23:37 2025 GMT Subject: CN=68a6832a-aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:76:f4:ab:f0:ec:17:68:03:eb:da:87:d3: 13:8d:9d:10:0e:b6:a7:e4:2a:5e:a2:a5:4d:62:40: ae:42:ca:69:0d:60:aa:ff:38:c4:e3:37:ed:39:b4: a1:5c:60:22:03:56:ca:8f:88:4e:6f:91:4d:3f:de: b4:11:91:fb:0a:87:91:ab:bd:0f:1b:e2:c2:71:fc: ac:cc:1d:50:e0:25:52:8c:f7:60:b0:55:75:1e:17: 4d:cf:94:86:7b:b3:b8:d8:a3:d6:01:d8:9a:c1:ce: b1:3f:e7:fd:d5:ee:8e:86:ea:27:09:c3:a5:36:67: cb:72:4a:01:6d:d1:e6:4f:4f:1c:11:6b:a4:af:4b: bf:37:4b:10:7d:ec:26:1a:a6:ea:73:a5:19:37:c3: ef:c4:df:6f:12:52:d4:e4:72:2b:07:41:84:35:1a: 3a:26:74:47:94:da:40:3d:ec:25:a0:ac:54:57:83: dc:da:5d:29:75:9e:70:3f:be:c9:59:49:b0:79:fa: bd:18:dc:3b:6c:5b:08:eb:5c:85:d2:5f:d2:fe:2d: 7e:c4:8e:03:3e:ba:38:01:17:04:a4:d6:e4:50:3d: ed:59:f1:21:0a:08:29:82:98:a5:94:95:7e:1c:84: dc:60:ae:7c:59:b9:f7:05:3d:e9:ea:86:6b:86:46: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0F:50:B3:96:AA:AF:E2:51:24:77:DE:C6:E8:61:C9:65:49:CF:6C X509v3 Authority Key Identifier: keyid:36:1B:BA:94:08:FA:19:B5:E9:7D:82:CD:DB:FF:B2:E7:9B:BB:A3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nhu6lAj6GbXpfYLN2_-y55u7oz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D656/93CB77AE6ACB11ED9B633B39C4F9AE02/Nhu6lAj6GbXpfYLN2_-y55u7oz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e1:b0:c2:f2:12:1e:ec:e4:d9:81:22:79:64:00:ce:3a:49: 84:fb:35:41:db:34:f4:3f:4f:50:e5:31:4e:e4:45:13:c6:29: 37:71:16:ac:05:13:38:3a:82:f9:7a:59:8c:5f:32:2c:e5:76: d9:22:29:5e:8b:4a:2a:f2:77:50:e5:93:05:21:a4:87:69:aa: 98:c1:bf:d6:aa:a7:48:49:f3:3c:bf:e0:3f:a7:27:fc:fe:14: 21:52:50:eb:62:d4:a0:4b:42:e1:77:4a:04:4f:e7:dc:82:36: b7:bf:6e:69:ec:76:1f:1d:0c:f2:7a:83:64:d2:e0:4b:62:1f: 41:fa:e9:f8:52:0d:a0:40:12:ce:5a:9a:69:ed:32:8c:9b:ae: 47:46:f2:c8:ac:ba:52:dc:58:e7:4b:dc:51:eb:02:6c:b4:a9: 3b:c0:1f:11:e0:80:63:01:e6:81:c1:7f:44:01:c7:cf:26:fa: 69:dc:85:11:5d:5d:43:b7:d1:ad:01:7b:e6:fd:f5:00:fd:42: d2:bd:3f:a6:a9:50:41:e2:a8:11:74:2b:15:ac:d6:ea:13:60: fc:db:a9:64:8f:03:f3:dc:e7:a4:3f:ba:14:fa:65:ce:e1:26: 92:b5:d5:f9:84:da:d3:ba:01:8c:fc:41:60:c8:37:94:e1:6d: 96:43:79:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NTYxMTAvBgNVBAUTKDM2MUJCQTk0MDhGQTE5QjVFOTdEODJDRERCRkZCMkU3 OUJCQkEzM0YwHhcNMjUwODIxMDIyMzM3WhcNMjUwODI4MDIyMzM3WjAYMRYwFAYD VQQDEw02OGE2ODMyYS1hYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBZ29Kvw7BdoA+vah9MTjZ0QDran5CpeoqVNYkCuQsppDWCq/zjE4zftObSh XGAiA1bKj4hOb5FNP960EZH7CoeRq70PG+LCcfyszB1Q4CVSjPdgsFV1HhdNz5SG e7O42KPWAdiawc6xP+f91e6OhuonCcOlNmfLckoBbdHmT08cEWukr0u/N0sQfewm Gqbqc6UZN8PvxN9vElLU5HIrB0GENRo6JnRHlNpAPewloKxUV4Pc2l0pdZ5wP77J WUmwefq9GNw7bFsI61yF0l/S/i1+xI4DPro4ARcEpNbkUD3tWfEhCggpgpillJV+ HITcYK58Wbn3BT3p6oZrhkbKSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEPULOW qq/iUSR33sboYcllSc9sMB8GA1UdIwQYMBaAFDYbupQI+hm16X2Czdv/suebu6M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY1Ni85M0NCNzdBRTZB Q0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdiWHBmWUxOMl8teTU1dTdv ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05odTZsQWo2R2JYcGZZTE4yXy15NTV1N296OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY1Ni85M0NCNzdBRTZBQ0IxMUVEOUI2MzNCMzlDNEY5QUUwMi9OaHU2bEFqNkdi WHBmWUxOMl8teTU1dTdvejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV4bDC8hIe7OTZgSJ5ZADOOkmE+zVB2zT0P09Q5TFO5EUTxik3cRas BRM4OoL5elmMXzIs5XbZIilei0oq8ndQ5ZMFIaSHaaqYwb/WqqdISfM8v+A/pyf8 /hQhUlDrYtSgS0Lhd0oET+fcgja3v25p7HYfHQzyeoNk0uBLYh9B+un4Ug2gQBLO Wppp7TKMm65HRvLIrLpS3FjnS9xR6wJstKk7wB8R4IBjAeaBwX9EAcfPJvpp3IUR XV1Dt9GtAXvm/fUA/ULSvT+mqVBB4qgRdCsVrNbqE2D826lkjwPz3OekP7oU+mXO 4SaStdX5hNrTugGM/EFgyDeU4W2WQ3l0 -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:16 2025 by rpki-client