$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: FGaMYku5NrS2fT8Nd2sTeFnx9PpXW48u6MSZ3Hnuq9w= Subject key identifier: 7F:8A:B1:03:C4:A3:47:37:2C:A1:41:3F:9B:26:B1:E4:80:AE:B9:08 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 0763 Signing time: Thu 18 Sep 2025 21:56:41 +0000 Manifest this update: Thu 18 Sep 2025 21:56:40 +0000 Manifest next update: Thu 25 Sep 2025 21:56:40 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: pSWxbi2YCCaeJ1E69n18A9F+KbqMVD4cb2XQX2ktnQ0=) 2: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Sep 18 21:56:40 2025 GMT Not After : Sep 25 21:56:40 2025 GMT Subject: CN=68cc8018-dbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:74:b7:9b:84:7c:ff:87:42:d1:d6:be:2e: d9:63:c2:15:ca:bb:af:14:74:6f:a0:4c:24:a3:6c: be:de:a4:46:0c:93:39:c9:7a:6e:21:63:c3:b5:e5: c2:41:ff:c0:3e:3b:b2:de:a8:32:7c:60:94:b0:d4: 52:02:54:12:ab:94:26:14:b5:0c:b0:60:49:7b:62: fd:e7:0c:7b:e8:eb:7e:4a:d2:fd:b5:eb:11:99:5f: 8a:d6:5f:04:40:3d:f4:02:f8:c4:f7:a5:cd:aa:d4: 9a:d0:60:28:de:ac:0b:66:d1:5b:dc:ee:80:f7:a0: 6c:36:b2:a3:18:fe:4e:44:9a:6c:fb:16:62:bf:29: 6d:19:2b:8a:88:15:3a:14:d6:64:10:8e:be:28:be: 83:d8:c8:30:d9:91:d5:42:12:5b:05:16:da:5b:da: 3f:8c:09:76:f3:54:b3:2a:3f:d0:b8:f7:1f:03:8e: 5d:9b:89:c9:e5:16:80:20:4f:19:f2:c9:fa:bd:7e: 85:5f:35:c4:70:28:5c:31:73:9c:a6:5e:0f:dc:0b: 24:d5:0a:56:88:09:8c:53:48:27:0c:9b:88:a4:ae: ab:b7:d2:6b:0f:bc:d1:1d:1e:89:85:8c:d5:5d:91: 6b:0a:ca:4c:f8:b2:92:7e:62:45:7e:bb:57:f8:b9: f2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8A:B1:03:C4:A3:47:37:2C:A1:41:3F:9B:26:B1:E4:80:AE:B9:08 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:13:3b:0c:76:a4:e1:5c:3b:ed:ee:dd:02:f0:df:3e:44:81: ca:74:a9:12:4b:ff:67:32:7a:57:84:b4:e4:ee:03:cf:86:cd: 98:eb:21:eb:8f:ea:62:3c:23:2f:ea:40:60:a3:a0:77:b2:f1: b3:80:09:bb:0e:c5:d7:1b:34:55:4f:63:bf:af:47:1f:95:d9: be:3c:5d:7a:d6:c1:c1:54:21:94:5a:78:e3:ee:4d:bf:a7:0a: 77:cb:94:ab:a3:13:2b:e3:0c:5a:1a:f2:d0:24:5d:4e:dd:64: 6b:b7:6d:a9:6d:27:d9:d4:09:6b:ad:eb:46:ad:60:76:b1:30: 44:75:fb:4f:6e:66:f8:ba:b9:7d:35:30:42:bb:1c:f7:27:b8: c5:66:81:02:4f:e4:92:a9:8e:5e:e2:08:6d:bb:b5:3b:91:db: 60:9e:13:6c:03:84:4c:d8:7d:4b:8d:45:80:1d:a2:1c:ea:58: a5:56:13:12:78:49:e3:da:5c:69:59:7f:c6:9c:d7:ff:6c:88: be:50:11:9c:d9:5d:fe:87:85:bd:68:50:58:80:72:01:26:c5: 22:20:4b:21:fd:5b:45:bd:36:14:b3:6f:01:ba:61:de:66:44: 1a:32:f4:cc:a2:ee:77:2e:37:d5:5d:76:b9:96:b6:eb:00:42: 90:9b:af:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwOTE4MjE1NjQwWhcNMjUwOTI1MjE1NjQwWjAYMRYwFAYD VQQDEw02OGNjODAxOC1kYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywd0t5uEfP+HQtHWvi7ZY8IVyruvFHRvoEwko2y+3qRGDJM5yXpuIWPDteXC Qf/APjuy3qgyfGCUsNRSAlQSq5QmFLUMsGBJe2L95wx76Ot+StL9tesRmV+K1l8E QD30AvjE96XNqtSa0GAo3qwLZtFb3O6A96BsNrKjGP5ORJps+xZivyltGSuKiBU6 FNZkEI6+KL6D2Mgw2ZHVQhJbBRbaW9o/jAl281SzKj/QuPcfA45dm4nJ5RaAIE8Z 8sn6vX6FXzXEcChcMXOcpl4P3Ask1QpWiAmMU0gnDJuIpK6rt9JrD7zRHR6JhYzV XZFrCspM+LKSfmJFfrtX+Lny6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+KsQPE o0c3LKFBP5smseSArrkIMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABEzsMdqThXDvt7t0C8N8+RIHKdKkSS/9nMnpXhLTk7gPPhs2Y6yHr j+piPCMv6kBgo6B3svGzgAm7DsXXGzRVT2O/r0cfldm+PF161sHBVCGUWnjj7k2/ pwp3y5SroxMr4wxaGvLQJF1O3WRrt22pbSfZ1AlrretGrWB2sTBEdftPbmb4url9 NTBCuxz3J7jFZoECT+SSqY5e4ghtu7U7kdtgnhNsA4RM2H1LjUWAHaIc6lilVhMS eEnj2lxpWX/GnNf/bIi+UBGc2V3+h4W9aFBYgHIBJsUiIEsh/VtFvTYUs28BumHe ZkQaMvTMou53LjfVXXa5lrbrAEKQm69v -----END CERTIFICATE-----Generated at Fri Sep 19 10:42:32 2025 by rpki-client