$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: lJyvTLGAIKG+cGcHWPuj+fq8X9fixwR7j8QpScQMMNc= Subject key identifier: CA:8F:57:26:4A:DA:12:24:73:E1:C9:C9:AD:B3:AF:07:32:B4:64:AE Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CA8 Signing time: Sun 24 Aug 2025 18:10:17 +0000 Manifest this update: Sun 24 Aug 2025 18:10:16 +0000 Manifest next update: Sun 31 Aug 2025 18:10:16 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: BbqidX5lSYPk5R3L5DSFCbsDczbZp8FuBYXUOH5dJjE=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Aug 24 18:10:16 2025 GMT Not After : Aug 31 18:10:16 2025 GMT Subject: CN=68ab5588-e8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e1:23:43:23:eb:16:a2:58:29:18:25:5e:d0: 05:54:a5:24:47:c4:52:00:ef:61:97:54:5b:5d:e2: 55:8c:6a:53:1a:3e:80:56:df:0f:f7:4e:8e:30:cf: 65:f9:95:c6:aa:09:cd:a4:37:6a:6b:30:d2:25:99: 45:6c:f4:ef:58:c0:90:b6:c4:54:21:2d:d0:02:1a: 93:1a:88:40:f6:82:ca:a9:a9:d7:ca:fc:c2:ed:71: 1d:f3:76:31:a8:cd:10:4d:53:53:e6:7f:56:80:84: 57:91:33:6f:b7:70:9a:5a:39:ad:a6:71:4d:bd:61: 6f:34:79:df:08:27:b9:c1:1b:60:94:08:20:8b:89: 20:42:63:53:1e:09:2b:9a:31:76:a7:56:d7:14:96: 30:6b:42:9e:a8:39:76:d3:c2:51:87:1b:99:dc:77: 32:7e:ac:ff:bf:7b:b5:ec:4a:f1:6c:7d:07:46:9d: 71:32:32:af:78:33:8f:b1:92:af:ce:72:2a:a0:95: 1b:10:7a:8b:bc:21:17:83:e9:39:cc:f6:36:71:8c: 17:ca:a6:75:f8:23:6a:c1:aa:38:3e:5c:37:b7:5c: e5:19:ab:84:f2:4c:93:7f:2a:53:26:21:c7:f9:4c: 55:88:3c:08:63:db:33:98:c1:7b:14:31:c0:fe:e2: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:57:26:4A:DA:12:24:73:E1:C9:C9:AD:B3:AF:07:32:B4:64:AE X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:55:f2:d5:10:f8:a9:9a:1f:18:bf:53:73:4d:48:6f:f3:a3: 88:fb:de:7d:a0:29:35:c7:13:db:ec:d9:c0:ca:9a:bf:11:42: 8b:3f:a4:f0:9b:b3:56:ab:de:98:bf:ed:7c:a9:ea:4a:ec:35: c9:96:9d:75:7a:9d:1d:0d:f2:f1:a6:f8:fc:1b:2f:d8:4f:42: ef:0e:33:bb:29:93:6d:59:38:00:13:87:f7:ef:77:6e:21:79: 80:bc:3d:71:46:1d:b9:52:6c:ac:5f:df:1a:83:fc:b1:19:59: 1f:3f:7b:16:50:bc:9c:40:ee:c2:69:db:e7:1d:17:af:91:39: 6a:57:83:c2:f7:97:62:e7:44:b8:78:8e:1a:15:68:31:25:ed: 98:2a:72:8e:8f:86:ea:c1:47:79:30:d7:31:67:85:44:19:e6: c6:67:9e:b8:af:ff:fc:79:8b:6f:df:28:2b:f7:e1:f8:44:51: 7e:4f:83:c9:3a:94:c9:49:fb:46:8b:08:96:47:4b:78:90:a9: 12:2b:0a:18:71:d4:ab:2f:b1:da:44:95:ab:f6:b5:3b:d2:90: a6:36:f0:15:29:1b:93:1e:6f:b9:33:8c:ff:bb:7a:c5:df:aa: 4b:2c:3e:82:ec:51:09:97:77:f0:bc:fd:1a:74:98:04:2c:b9: 37:02:8f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUwODI0MTgxMDE2WhcNMjUwODMxMTgxMDE2WjAYMRYwFAYD VQQDEw02OGFiNTU4OC1lOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uEjQyPrFqJYKRglXtAFVKUkR8RSAO9hl1RbXeJVjGpTGj6AVt8P906OMM9l +ZXGqgnNpDdqazDSJZlFbPTvWMCQtsRUIS3QAhqTGohA9oLKqanXyvzC7XEd83Yx qM0QTVNT5n9WgIRXkTNvt3CaWjmtpnFNvWFvNHnfCCe5wRtglAggi4kgQmNTHgkr mjF2p1bXFJYwa0KeqDl208JRhxuZ3Hcyfqz/v3u17ErxbH0HRp1xMjKveDOPsZKv znIqoJUbEHqLvCEXg+k5zPY2cYwXyqZ1+CNqwao4Plw3t1zlGauE8kyTfypTJiHH +UxViDwIY9szmMF7FDHA/uJpjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqPVyZK 2hIkc+HJya2zrwcytGSuMB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVVfLVEPipmh8Yv1NzTUhv86OI+959oCk1xxPb7NnAypq/EUKLP6Tw m7NWq96Yv+18qepK7DXJlp11ep0dDfLxpvj8Gy/YT0LvDjO7KZNtWTgAE4f373du IXmAvD1xRh25UmysX98ag/yxGVkfP3sWULycQO7CadvnHRevkTlqV4PC95di50S4 eI4aFWgxJe2YKnKOj4bqwUd5MNcxZ4VEGebGZ564r//8eYtv3ygr9+H4RFF+T4PJ OpTJSftGiwiWR0t4kKkSKwoYcdSrL7HaRJWr9rU70pCmNvAVKRuTHm+5M4z/u3rF 36pLLD6C7FEJl3fwvP0adJgELLk3Ao/P -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:07 2025 by rpki-client