$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft File: NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json) Hash identifier: ubNz6XUZi94lLomHbZ7UHmc/+6yFXUJQPBVW4jAYkxc= Subject key identifier: D5:E2:7A:25:9B:FE:FF:3B:AA:69:4C:97:E2:F0:CF:E5:D5:C7:EB:25 Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC Certificate issuer: /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft Manifest number: 22 Signing time: Sat 23 Aug 2025 01:29:20 +0000 Manifest this update: Sat 23 Aug 2025 01:29:19 +0000 Manifest next update: Sat 30 Aug 2025 01:29:19 +0000 Files and hashes: 1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: 0jmP/6T9dppSe7rSsLgOabr+1m3kPod7w2rFPkSydps=) 2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: Krc4hrUxizB7HZBQVnd3e8NynO1iw8BpxC+SzV7uUy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC Validity Not Before: Aug 23 01:29:19 2025 GMT Not After : Aug 30 01:29:19 2025 GMT Subject: CN=68a9196f-9df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:79:5d:10:2e:1b:4f:f2:82:a1:11:0f:c9:8c: d4:2f:4b:9c:68:6b:85:19:8d:54:a0:c4:0f:bb:da: f9:f3:20:2f:89:7e:ab:e3:93:c8:c1:56:41:bf:dc: 96:bb:be:d5:da:fc:39:0d:9e:e4:80:57:51:e0:ae: ed:2b:32:65:d0:aa:77:fc:d2:f8:e3:b9:7d:ba:85: 8e:70:0d:2d:86:c5:99:07:31:80:be:9d:6d:ab:3c: df:a2:83:8c:cb:02:40:92:94:5d:a4:55:b8:db:8e: e9:e6:bc:98:e5:ae:4e:5d:cd:0d:bd:fe:ed:27:eb: a6:0d:38:e4:e4:0c:e0:ba:2a:c9:17:c9:a5:e5:2c: 5b:cc:21:8e:b3:6a:7e:8b:f0:38:2b:cf:a7:7e:82: cc:94:b0:1e:46:ec:ff:43:42:2a:72:21:ec:ab:ad: 01:ec:68:14:79:0b:80:86:31:24:e0:82:78:66:2b: 2a:43:5f:69:94:ba:9b:fb:b3:3b:d4:30:29:d6:7a: c8:b5:f8:57:68:2d:3e:83:d7:d4:e8:2e:70:d6:80: c5:35:3a:3f:fb:33:ae:7f:c7:98:03:11:67:9b:b8: 5d:9e:b4:41:98:bb:47:64:d5:c9:92:72:e0:0d:a6: dc:36:20:93:28:16:d2:2e:03:86:fa:70:ec:8a:a0: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:7A:25:9B:FE:FF:3B:AA:69:4C:97:E2:F0:CF:E5:D5:C7:EB:25 X509v3 Authority Key Identifier: keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:37:ab:5e:0e:e5:b2:e0:18:3a:c3:92:9c:71:98:a2:36:55: d1:95:cf:e8:2f:c1:9d:db:bd:9a:a1:57:4d:e5:65:38:5e:72: 68:3c:ae:5a:58:29:a7:f8:eb:d1:6e:b8:44:b9:5f:e9:20:8e: c9:56:16:a1:e2:37:69:8e:52:5e:9c:da:cc:22:43:ab:e9:c4: 57:87:54:91:b4:7c:49:76:b9:36:10:f2:9e:0d:4c:fb:dc:5b: 83:77:1f:17:d8:15:b5:60:16:38:f8:2d:1a:26:69:49:5b:07: d4:97:d7:9f:ec:e2:d5:94:4b:ca:a6:69:0c:ce:c1:b6:6c:0f: 2d:ae:23:01:3f:ee:dc:82:c2:21:cf:f9:dd:c3:66:0f:e4:bf: f1:9e:98:c2:16:40:e0:8c:cf:87:b9:15:49:3a:40:7c:2d:66: d9:e8:b2:cc:cf:27:d9:d3:6f:99:aa:b4:48:19:7a:d5:27:b8: 0b:b4:48:36:8f:e8:f6:22:38:30:1d:b5:29:ad:91:2f:0e:a6: c4:5c:54:e4:fc:e0:76:3c:0b:49:2e:80:47:e1:ff:4c:1e:81: f2:24:45:49:95:d5:5a:c1:bb:39:d6:dd:dd:1c:81:35:19:db: aa:8d:4d:c6:6c:39:46:dd:f3:d6:e6:03:98:42:68:c5:cd:0f: 1f:06:08:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDQyQTExMC8GA1UEBRMoMzU0RTMyQjlERTBFNTY5QTE5NTFBOTdCOTMyMDE5RjY4 OEEzNTBBQzAeFw0yNTA4MjMwMTI5MTlaFw0yNTA4MzAwMTI5MTlaMBgxFjAUBgNV BAMTDTY4YTkxOTZmLTlkZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpeV0QLhtP8oKhEQ/JjNQvS5xoa4UZjVSgxA+72vnzIC+Jfqvjk8jBVkG/3Ja7 vtXa/DkNnuSAV1Hgru0rMmXQqnf80vjjuX26hY5wDS2GxZkHMYC+nW2rPN+ig4zL AkCSlF2kVbjbjunmvJjlrk5dzQ29/u0n66YNOOTkDOC6KskXyaXlLFvMIY6zan6L 8Dgrz6d+gsyUsB5G7P9DQipyIeyrrQHsaBR5C4CGMSTggnhmKypDX2mUupv7szvU MCnWesi1+FdoLT6D19ToLnDWgMU1Oj/7M65/x5gDEWebuF2etEGYu0dk1cmScuAN ptw2IJMoFtIuA4b6cOyKoPAXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1eJ6JZv+ /zuqaUyX4vDP5dXH6yUwHwYDVR0jBBgwFoAUNU4yud4OVpoZUal7kyAZ9oijUKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBLzU1RUJCODU4NEUz QjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBvWlVhbDdreUFaOW9palVL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTlU0eXVkNE9WcG9aVWFsN2t5QVo5b2lqVUt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 NDJBLzU1RUJCODU4NEUzQjExRjA5QzEyNTU0N0M0RjlBRTAyL05VNHl1ZDRPVnBv WlVhbDdreUFaOW9palVLdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGI3q14O5bLgGDrDkpxxmKI2VdGVz+gvwZ3bvZqhV03lZThecmg8rlpY Kaf469FuuES5X+kgjslWFqHiN2mOUl6c2swiQ6vpxFeHVJG0fEl2uTYQ8p4NTPvc W4N3HxfYFbVgFjj4LRomaUlbB9SX15/s4tWUS8qmaQzOwbZsDy2uIwE/7tyCwiHP +d3DZg/kv/GemMIWQOCMz4e5FUk6QHwtZtnosszPJ9nTb5mqtEgZetUnuAu0SDaP 6PYiODAdtSmtkS8OpsRcVOT84HY8C0kugEfh/0wegfIkRUmV1VrBuznW3d0cgTUZ 26qNTcZsOUbd89bmA5hCaMXNDx8GCN4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:52 2025 by rpki-client