$ rpki-client -vvf rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft File: nPapYQAMl2lHu76x0XPCPpCflUQ.mft (raw, json) Hash identifier: a/wFwTJ8OnkC9gZmtkbN5rr1KhvhrhfMhpBB8iXa8Vw= Subject key identifier: 23:31:00:6D:3F:81:6F:51:B3:87:74:9A:50:ED:5F:FF:E5:68:21:FE Authority key identifier: 9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 Certificate issuer: /CN=A912FA65/serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Certificate serial: 06D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft Manifest number: 06D4 Signing time: Fri 22 Aug 2025 22:12:35 +0000 Manifest this update: Fri 22 Aug 2025 22:12:35 +0000 Manifest next update: Fri 29 Aug 2025 22:12:35 +0000 Files and hashes: 1: nPapYQAMl2lHu76x0XPCPpCflUQ.crl (hash: ITGTNqmGenVvTcOPBNYzZEGHmy02zcke12o6eLQZW3A=) 2: E14DB058662411EBADFEB364C4F9AE02.roa (hash: AGJnIVMVxGCqhPBai/J+rGCznBK2uUe21t16AbPm6pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FA65, serialNumber=9CF6A961000C976947BBBEB1D173C23E909F9544 Validity Not Before: Aug 22 22:12:35 2025 GMT Not After : Aug 29 22:12:35 2025 GMT Subject: CN=68a8eb53-35e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:7a:fe:33:86:9d:23:38:dc:b4:ee:d0:ea: 84:6b:e5:98:22:c9:34:8b:33:e0:53:1b:34:17:b2: 74:8d:3c:91:5f:0b:8f:90:7b:8e:1b:6a:92:50:7e: dd:54:0f:d9:10:c7:c4:9f:9e:e0:2a:40:85:e0:a4: 36:fb:f4:9e:b3:08:b9:fa:3a:4d:78:5c:36:54:18: bf:fc:57:7d:66:71:4a:1f:a4:16:69:e9:64:96:00: 46:6e:17:68:43:52:26:42:d1:bb:42:8e:0b:de:e0: b8:31:2d:99:68:01:91:9f:8a:56:ec:98:14:8d:10: af:91:25:e9:c2:bd:04:75:53:fc:f8:26:9a:da:48: a2:d9:cc:d7:aa:12:f0:da:38:e5:7b:9c:65:91:88: 04:ea:e1:7e:41:42:97:09:e4:d0:25:36:02:cc:27: f7:1c:e5:b2:67:96:a4:9a:95:55:9d:13:9e:52:da: f1:4c:4a:30:9f:02:9c:d5:57:3a:e3:6a:82:31:be: fe:d5:aa:91:2b:5d:d2:d8:dd:94:bd:35:ad:f7:ce: d9:18:be:89:d5:54:2d:67:15:5c:b4:dc:e1:2a:e6: 2d:f9:60:f3:5d:31:7a:57:01:6b:18:01:0b:cc:fc: 78:58:83:d3:22:e5:b4:87:6a:2e:79:27:4f:d3:79: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:31:00:6D:3F:81:6F:51:B3:87:74:9A:50:ED:5F:FF:E5:68:21:FE X509v3 Authority Key Identifier: keyid:9C:F6:A9:61:00:0C:97:69:47:BB:BE:B1:D1:73:C2:3E:90:9F:95:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPapYQAMl2lHu76x0XPCPpCflUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FA65/935DCFBE662311EBAA11D563C4F9AE02/nPapYQAMl2lHu76x0XPCPpCflUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a4:05:85:3c:23:4c:8a:11:d8:93:92:20:ee:be:71:ae:b0: 64:ae:26:3e:ff:79:24:30:d7:34:8e:8c:3c:72:f6:11:94:e8: ac:4d:86:05:eb:99:91:67:3c:5d:0f:85:32:13:3c:73:96:9d: d2:10:a2:69:15:ae:49:5c:6d:24:15:98:c4:d1:ce:7e:94:64: 3e:85:47:8e:c4:b7:bf:98:e9:12:6f:8e:e9:1d:e9:ba:7e:e1: 05:d5:30:fa:c5:6a:68:92:36:88:43:06:e0:3e:39:e7:38:38: e0:00:24:60:d1:b2:59:96:cf:ed:76:4d:1c:d6:02:fd:21:75: 36:86:c7:50:8c:e0:97:05:42:4f:33:70:12:f9:32:4b:fe:d5: 7f:c7:ab:89:0c:05:aa:32:5c:88:0a:f8:f9:68:77:88:4e:b0: b0:23:4e:10:b8:c7:ba:2d:5e:dd:47:90:e9:7a:51:93:64:89: eb:27:f6:28:90:42:c7:9d:af:43:af:4b:6f:b1:93:a7:e6:75: ab:f4:52:f5:58:1a:ba:b5:11:d2:26:d1:9e:e5:65:91:ac:00: 68:6f:51:30:b1:c8:c8:4c:1f:19:52:bf:ac:0c:30:c8:61:38: 55:0a:32:ba:1f:2d:69:e6:33:aa:c1:be:79:4e:7a:b4:e6:b3: 5b:b2:5c:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBNjUxMTAvBgNVBAUTKDlDRjZBOTYxMDAwQzk3Njk0N0JCQkVCMUQxNzNDMjNF OTA5Rjk1NDQwHhcNMjUwODIyMjIxMjM1WhcNMjUwODI5MjIxMjM1WjAYMRYwFAYD VQQDEw02OGE4ZWI1My0zNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRZ6/jOGnSM43LTu0OqEa+WYIsk0izPgUxs0F7J0jTyRXwuPkHuOG2qSUH7d VA/ZEMfEn57gKkCF4KQ2+/Seswi5+jpNeFw2VBi//Fd9ZnFKH6QWaelklgBGbhdo Q1ImQtG7Qo4L3uC4MS2ZaAGRn4pW7JgUjRCvkSXpwr0EdVP8+Caa2kii2czXqhLw 2jjle5xlkYgE6uF+QUKXCeTQJTYCzCf3HOWyZ5akmpVVnROeUtrxTEownwKc1Vc6 42qCMb7+1aqRK13S2N2UvTWt987ZGL6J1VQtZxVctNzhKuYt+WDzXTF6VwFrGAEL zPx4WIPTIuW0h2oueSdP03nbeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMxAG0/ gW9Rs4d0mlDtX//laCH+MB8GA1UdIwQYMBaAFJz2qWEADJdpR7u+sdFzwj6Qn5VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkE2NS85MzVEQ0ZCRTY2 MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwybEh1NzZ4MFhQQ1BwQ2Zs VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QYXBZUUFNbDJsSHU3NngwWFBDUHBDZmxVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkE2NS85MzVEQ0ZCRTY2MjMxMUVCQUExMUQ1NjNDNEY5QUUwMi9uUGFwWVFBTWwy bEh1NzZ4MFhQQ1BwQ2ZsVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1pAWFPCNMihHYk5Ig7r5xrrBkriY+/3kkMNc0jow8cvYRlOisTYYF 65mRZzxdD4UyEzxzlp3SEKJpFa5JXG0kFZjE0c5+lGQ+hUeOxLe/mOkSb47pHem6 fuEF1TD6xWpokjaIQwbgPjnnODjgACRg0bJZls/tdk0c1gL9IXU2hsdQjOCXBUJP M3AS+TJL/tV/x6uJDAWqMlyICvj5aHeITrCwI04QuMe6LV7dR5DpelGTZInrJ/Yo kELHna9Dr0tvsZOn5nWr9FL1WBq6tRHSJtGe5WWRrABob1EwscjITB8ZUr+sDDDI YThVCjK6Hy1p5jOqwb55Tnq05rNbslzU -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:37 2025 by rpki-client