$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft File: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft (raw, json) Hash identifier: NSYkTCBmyg1zRSesVOaPdaRm0c29GFnNKgm2nAmChG4= Subject key identifier: 88:9D:C0:67:28:41:F5:76:EF:D4:28:F6:5E:EC:F6:18:B3:94:37:AD Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Certificate serial: 1DFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft Manifest number: 1DF1 Signing time: Fri 22 Aug 2025 16:09:48 +0000 Manifest this update: Fri 22 Aug 2025 16:09:47 +0000 Manifest next update: Fri 29 Aug 2025 16:09:47 +0000 Files and hashes: 1: NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl (hash: 2n0GXbEAUUaGvs+d0haPaIDqzIe7wlEfIoP9JYZIPd4=) 2: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (hash: UCPIk7PqTNU3ro9Psv5YDODZfhBpvATekxfIDIhqyNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7679 (0x1dff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3 Validity Not Before: Aug 22 16:09:47 2025 GMT Not After : Aug 29 16:09:47 2025 GMT Subject: CN=68a8964c-e801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:23:47:16:34:fc:47:ed:76:0e:10:20:4b: 38:8b:9c:cd:a9:51:ba:1a:9a:3c:af:4c:53:8c:9e: f5:bc:4b:56:d0:5b:90:3e:ce:9f:91:f4:01:80:b0: cd:59:e5:82:43:e4:12:e7:cf:2b:78:36:a7:9c:e3: e2:28:4f:15:a9:8b:07:45:c2:e4:90:48:d1:53:86: 27:4a:05:b5:37:34:c5:7b:9c:95:3f:57:10:28:07: 8b:52:dc:3a:a3:f0:8a:47:48:d6:13:60:82:52:3e: b4:82:69:27:a6:33:54:91:21:67:94:b6:6e:1b:51: 63:3b:de:48:86:43:4b:ba:6b:0c:0c:72:c2:fa:d1: 0b:32:3f:39:f9:6c:4a:3f:fb:b1:61:fb:75:f7:82: 96:4f:01:09:94:47:96:78:5d:9c:1e:2c:59:3b:2d: 4a:dc:0b:2e:35:60:c3:87:4b:c4:f8:7b:38:aa:f8: 58:b2:69:b5:68:c2:28:f3:c8:62:f7:84:7a:0f:80: 2a:d2:66:86:e8:3f:cb:f6:e1:82:98:a7:eb:6d:ae: fb:79:3e:8b:dd:dd:ba:46:7f:38:3e:ba:c3:39:9f: 68:4c:fd:aa:ad:5f:f9:6b:f8:70:98:57:2c:48:9d: d8:41:62:2f:94:62:2f:67:b2:9e:a1:93:ee:dd:9e: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9D:C0:67:28:41:F5:76:EF:D4:28:F6:5E:EC:F6:18:B3:94:37:AD X509v3 Authority Key Identifier: keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:cc:db:a3:66:01:36:c7:f9:de:3b:05:7a:31:87:c7:c1:59: e5:8e:04:e2:f3:e1:2c:c1:3d:d0:34:be:b4:06:cc:56:ce:27: 23:59:76:ae:dd:2a:b9:c0:fe:bb:03:af:68:55:c7:46:d8:ff: e9:5b:c7:c2:d4:7e:6d:37:c0:c2:6a:09:90:f8:9f:67:ab:a8: a2:2a:dc:04:72:85:27:d1:e8:2d:bd:84:7f:56:d8:e1:06:52: e6:fd:dc:a1:7b:e1:f3:3e:ea:8f:5b:2e:7a:e0:a1:68:c0:70: 97:9c:0a:46:1d:fe:34:cf:83:15:37:ba:96:86:18:38:58:f7: 92:ac:62:ac:1e:82:0e:17:fd:01:28:dd:b8:e4:73:56:25:37: 52:b9:77:6c:c9:1d:b3:35:0f:a1:0d:00:d4:82:1e:f9:34:fe: 1d:5f:8a:42:8e:8c:55:0b:72:61:4f:67:03:69:05:c5:cc:2c: 33:4a:10:03:22:a3:cc:7c:ae:cb:0b:6c:9b:74:94:9b:b1:3f: 82:4a:ee:a7:7f:46:45:a7:56:ab:96:4c:88:98:2e:e4:87:b2: 63:a1:22:23:17:bf:a1:72:d3:c6:fd:47:bd:c3:e1:d3:f2:d0: 88:ec:99:c8:ed:59:cc:5d:92:eb:d0:01:9f:b1:d8:a9:45:38: 65:34:79:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC Rjg2NEE2QzMwHhcNMjUwODIyMTYwOTQ3WhcNMjUwODI5MTYwOTQ3WjAYMRYwFAYD VQQDEw02OGE4OTY0Yy1lODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+YjRxY0/Eftdg4QIEs4i5zNqVG6Gpo8r0xTjJ71vEtW0FuQPs6fkfQBgLDN WeWCQ+QS588reDannOPiKE8VqYsHRcLkkEjRU4YnSgW1NzTFe5yVP1cQKAeLUtw6 o/CKR0jWE2CCUj60gmknpjNUkSFnlLZuG1FjO95IhkNLumsMDHLC+tELMj85+WxK P/uxYft194KWTwEJlEeWeF2cHixZOy1K3AsuNWDDh0vE+Hs4qvhYsmm1aMIo88hi 94R6D4Aq0maG6D/L9uGCmKfrba77eT6L3d26Rn84PrrDOZ9oTP2qrV/5a/hwmFcs SJ3YQWIvlGIvZ7KeoZPu3Z5YKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIidwGco QfV279Qo9l7s9hizlDetMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1 Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkFCOS85MzhBNzBFNDk1Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1 TTFrVmMxejVjcUdfaGtwc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxzNujZgE2x/neOwV6MYfHwVnljgTi8+EswT3QNL60BsxWzicjWXau 3Sq5wP67A69oVcdG2P/pW8fC1H5tN8DCagmQ+J9nq6iiKtwEcoUn0egtvYR/Vtjh BlLm/dyhe+HzPuqPWy564KFowHCXnApGHf40z4MVN7qWhhg4WPeSrGKsHoIOF/0B KN245HNWJTdSuXdsyR2zNQ+hDQDUgh75NP4dX4pCjoxVC3JhT2cDaQXFzCwzShAD IqPMfK7LC2ybdJSbsT+CSu6nf0ZFp1arlkyImC7kh7JjoSIjF7+hctPG/Ue9w+HT 8tCI7JnI7VnMXZLr0AGfsdipRThlNHkU -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:54 2025 by rpki-client