$ rpki-client -vvf rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft File: nN-M6Qv3n4wUjR92H5lNghsknHE.mft (raw, json) Hash identifier: TrgjDIP/UZLwuPvuFsaFDMEKpxKJrwUzC6gS0kZZIB4= Subject key identifier: A3:6F:27:E2:1D:CB:8B:ED:33:9A:34:71:19:90:E8:3A:68:21:F3:E3 Authority key identifier: 9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 Certificate issuer: /CN=A919F450/serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft Manifest number: 047E Signing time: Thu 21 Aug 2025 00:12:30 +0000 Manifest this update: Thu 21 Aug 2025 00:12:29 +0000 Manifest next update: Thu 28 Aug 2025 00:12:29 +0000 Files and hashes: 1: nN-M6Qv3n4wUjR92H5lNghsknHE.crl (hash: hBGNNkd42Ct/W5lY4qF3Y1Oq6Q3V0jycj0NCaYrwL/k=) 2: DDE2BB7C534811EC8FFBDB7CC4F9AE02.roa (hash: 9BjSNtNI0t5KFZOPEwLsrwtwuYFD1A/cyJU1JZKxEKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F450, serialNumber=9CDF8CE90BF79F8C148D1F761F994D821B249C71 Validity Not Before: Aug 21 00:12:29 2025 GMT Not After : Aug 28 00:12:29 2025 GMT Subject: CN=68a6646e-fa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:72:dc:bd:cb:b5:40:c6:1f:47:e7:16:29: 6b:51:a5:c7:cf:9b:5f:2c:87:42:5d:32:3d:30:36: f5:4a:80:b5:e1:43:5a:c9:9e:cd:1e:e1:ce:53:bb: 22:09:d9:f2:5e:02:4d:9a:45:28:35:31:d9:10:43: 45:fd:d0:af:a8:44:66:42:0b:bd:ae:12:47:96:e3: 4d:af:99:d8:8a:85:17:3c:78:20:b1:2c:a9:15:25: d8:27:f8:a5:88:1b:40:68:03:a9:a3:4c:f0:2a:91: 6c:9c:2a:33:3c:5e:8d:9e:11:c3:79:5f:00:66:3e: dc:44:e4:cf:58:9d:2e:d8:51:b6:b5:41:81:fa:11: 6c:a3:f8:82:20:a3:df:bc:80:ac:0f:fc:49:36:9d: 25:12:5c:15:ac:1b:86:c9:e2:d9:6f:a9:2b:97:d5: ae:69:55:e1:14:04:78:57:56:08:91:f3:96:66:54: 6d:dc:21:96:b4:de:91:cd:99:3d:7c:11:ce:4c:05: dc:11:72:c0:d2:7d:72:10:e7:00:59:d5:43:da:19: 09:29:58:5c:17:af:3c:ce:54:3e:84:d2:39:ab:50: 14:f0:22:66:ad:93:b1:b7:15:4c:01:09:59:3d:39: 9e:a1:31:0a:78:e8:62:82:14:37:d3:fc:47:db:f4: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6F:27:E2:1D:CB:8B:ED:33:9A:34:71:19:90:E8:3A:68:21:F3:E3 X509v3 Authority Key Identifier: keyid:9C:DF:8C:E9:0B:F7:9F:8C:14:8D:1F:76:1F:99:4D:82:1B:24:9C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN-M6Qv3n4wUjR92H5lNghsknHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F450/B98171DA534611EC9B90A47BC4F9AE02/nN-M6Qv3n4wUjR92H5lNghsknHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:75:9d:0a:1c:7d:92:1b:5c:43:09:da:93:54:6c:6b:32: c4:05:d1:e2:49:f5:c9:ea:68:7a:d4:77:b2:87:9f:1a:d6:08: 60:c8:cb:52:32:be:0e:86:ff:b6:e6:6f:b1:da:3f:7b:c4:bc: 6d:b5:b5:8a:8e:78:e9:7a:d8:47:b0:d3:cb:ce:6f:43:02:20: 2a:a2:0a:bf:aa:76:4b:0b:17:5f:58:c7:f1:4b:82:73:c1:b0: d9:89:92:7f:80:98:b0:7b:02:4d:e2:90:ec:e3:15:5c:09:21: e8:e4:47:48:1c:05:17:35:93:0a:48:34:cd:be:a5:56:4f:1f: d5:ce:28:d1:84:62:4d:7f:48:e2:77:2b:34:e1:12:ec:79:8b: fc:61:60:40:70:fa:f3:72:65:34:65:e2:28:3c:9f:94:2d:23: c1:dc:18:50:5a:8d:6a:af:c5:cb:5a:d0:cb:a7:9a:4c:be:3d: 85:ad:d6:47:35:6f:ba:a3:f6:99:0e:2f:88:5c:30:aa:dd:bd: 54:e6:87:2d:d0:84:37:15:67:54:9f:ff:76:e2:b3:78:d3:10: b4:5e:25:06:e2:6d:1c:b6:5e:3d:41:73:17:2d:63:38:b2:b2: a8:dd:64:cb:a7:6b:e3:a5:9a:bf:ac:02:ee:a6:bd:ee:93:d1: d1:83:e1:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY0NTAxMTAvBgNVBAUTKDlDREY4Q0U5MEJGNzlGOEMxNDhEMUY3NjFGOTk0RDgy MUIyNDlDNzEwHhcNMjUwODIxMDAxMjI5WhcNMjUwODI4MDAxMjI5WjAYMRYwFAYD VQQDEw02OGE2NjQ2ZS1mYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUdy3L3LtUDGH0fnFilrUaXHz5tfLIdCXTI9MDb1SoC14UNayZ7NHuHOU7si CdnyXgJNmkUoNTHZEENF/dCvqERmQgu9rhJHluNNr5nYioUXPHggsSypFSXYJ/il iBtAaAOpo0zwKpFsnCozPF6NnhHDeV8AZj7cROTPWJ0u2FG2tUGB+hFso/iCIKPf vICsD/xJNp0lElwVrBuGyeLZb6krl9WuaVXhFAR4V1YIkfOWZlRt3CGWtN6RzZk9 fBHOTAXcEXLA0n1yEOcAWdVD2hkJKVhcF688zlQ+hNI5q1AU8CJmrZOxtxVMAQlZ PTmeoTEKeOhighQ30/xH2/TMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNvJ+Id y4vtM5o0cRmQ6DpoIfPjMB8GA1UdIwQYMBaAFJzfjOkL95+MFI0fdh+ZTYIbJJxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjQ1MC9COTgxNzFEQTUz NDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240d1VqUjkySDVsTmdoc2tu SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25OLU02UXYzbjR3VWpSOTJINWxOZ2hza25IRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjQ1MC9COTgxNzFEQTUzNDYxMUVDOUI5MEE0N0JDNEY5QUUwMi9uTi1NNlF2M240 d1VqUjkySDVsTmdoc2tuSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH8HWdChx9khtcQwnak1RsazLEBdHiSfXJ6mh61Heyh58a1ghgyMtS Mr4Ohv+25m+x2j97xLxttbWKjnjpethHsNPLzm9DAiAqogq/qnZLCxdfWMfxS4Jz wbDZiZJ/gJiwewJN4pDs4xVcCSHo5EdIHAUXNZMKSDTNvqVWTx/VzijRhGJNf0ji dys04RLseYv8YWBAcPrzcmU0ZeIoPJ+ULSPB3BhQWo1qr8XLWtDLp5pMvj2FrdZH NW+6o/aZDi+IXDCq3b1U5oct0IQ3FWdUn/924rN40xC0XiUG4m0ctl49QXMXLWM4 srKo3WTLp2vjpZq/rALupr3uk9HRg+FC -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:15 2025 by rpki-client