$ rpki-client -vvf rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft File: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft (raw, json) Hash identifier: a7aalYResg21CYE6WI4Q/P4gXwFS6rK+PLjhW9iqh6s= Subject key identifier: 91:58:15:A3:E0:55:68:B4:42:FD:3F:95:09:8A:3F:C3:86:D7:B6:DC Authority key identifier: 9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 Certificate issuer: /CN=A9131579/serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft Manifest number: 0C21 Signing time: Fri 22 Aug 2025 18:49:30 +0000 Manifest this update: Fri 22 Aug 2025 18:49:30 +0000 Manifest next update: Fri 29 Aug 2025 18:49:30 +0000 Files and hashes: 1: nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl (hash: TqEaNWiF8Nd1DSQHU5WViRlA1jd7EZjVZeY80hgVew4=) 2: 7E565BCC02EB11F084618D33C4F9AE02.roa (hash: AZHVgAf1kSXl8BI/BQ5H295EutsYIoNTNb8l2dBtz+M=) 3: 702B683202E911F097290F2EC4F9AE02.roa (hash: K+XoaDEFz5EZQGsqk/BrrsJpJvi+KU83oJ9JVUv/YSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131579, serialNumber=9F0C15208D7EE62E80CB975CFE4CEC9CBF1D2756 Validity Not Before: Aug 22 18:49:30 2025 GMT Not After : Aug 29 18:49:30 2025 GMT Subject: CN=68a8bbba-e834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:fd:e5:e1:27:6e:ff:79:90:b9:a0:79:9c: 28:9d:a6:6a:3c:37:34:c5:0e:6f:bc:df:06:b1:84: 80:4a:7b:c8:60:47:0b:d8:00:c6:4b:e0:62:6b:eb: bd:9c:2d:c5:ea:b3:12:2e:6f:fb:1e:eb:51:bf:b9: ad:ee:d0:47:5e:58:4f:7b:64:a9:35:a4:19:bc:f2: d5:80:6d:0d:d9:4b:6d:1d:48:a7:53:c4:29:85:d0: 87:31:f0:70:2e:5f:c8:ce:59:63:32:c1:b4:f3:80: bd:16:10:a2:32:13:7c:f9:4a:b2:50:3a:c3:5a:77: 46:77:9f:56:81:d7:3f:ce:96:50:3c:00:40:ba:76: b6:11:c2:df:00:7f:a2:a9:f9:ad:18:9f:85:8e:62: e7:8e:82:ce:82:b6:3b:2e:bd:d4:d7:eb:2d:b6:5f: b8:6f:bb:e5:74:50:42:39:3a:c0:9b:c2:f2:6f:55: a2:70:f8:93:c3:00:0b:1d:c1:1c:23:23:68:6e:45: 2d:f0:94:cc:fb:12:96:3c:d0:23:a5:b0:b8:9e:cc: b6:25:f3:b3:48:67:5b:b8:df:a2:05:81:99:93:47: b4:88:99:e5:6d:7a:88:02:38:09:ba:fb:fd:09:dc: 59:b2:13:d5:79:80:d7:fd:81:d8:3b:f7:32:9b:51: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:15:A3:E0:55:68:B4:42:FD:3F:95:09:8A:3F:C3:86:D7:B6:DC X509v3 Authority Key Identifier: keyid:9F:0C:15:20:8D:7E:E6:2E:80:CB:97:5C:FE:4C:EC:9C:BF:1D:27:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131579/2D2F437414E611EA929BBC45C4F9AE02/nwwVII1-5i6Ay5dc_kzsnL8dJ1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:af:e6:1e:7f:57:cc:56:a7:c1:4f:b5:4b:b8:f3:be:c6: d6:c7:21:b5:ed:e5:d8:4d:9b:a0:0a:80:7a:8f:b6:ea:37:48: 39:71:73:0e:64:fd:de:e1:ed:fc:e4:7f:a2:d5:ca:25:a4:1b: a6:c7:fb:78:7f:76:9e:d2:25:d8:13:1d:aa:4b:3c:de:62:f3: ac:0e:52:19:fe:33:f1:dd:28:c9:b9:5b:08:f1:4a:91:5f:5d: a0:c3:70:49:5e:b4:52:1a:a6:90:21:6b:8b:32:14:a8:47:f3: 04:1d:89:f7:36:cb:9c:e5:1b:11:5c:f5:29:6d:f4:35:b5:50: cd:40:f9:74:02:90:9f:f7:a2:a4:31:1c:d3:84:1c:65:c7:7c: 3d:c5:45:3d:be:5d:6d:45:28:69:e2:ec:6c:5a:5d:54:7c:9e: a9:a9:a0:38:13:73:14:7f:88:e6:43:c9:56:09:d8:c6:20:57: e5:8d:aa:4d:8b:81:5b:cc:6a:8a:1d:9d:27:da:81:fc:c7:07: 7b:ba:28:69:4a:3f:e3:42:15:1d:e9:91:49:c0:c8:82:e7:41: 87:28:21:2d:78:4f:e3:37:e9:14:d9:f8:ac:6e:e9:aa:de:86: 4e:43:b8:19:69:15:90:ee:db:fd:f5:f4:eb:d9:cb:d0:50:b4: 36:95:84:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1NzkxMTAvBgNVBAUTKDlGMEMxNTIwOEQ3RUU2MkU4MENCOTc1Q0ZFNENFQzlD QkYxRDI3NTYwHhcNMjUwODIyMTg0OTMwWhcNMjUwODI5MTg0OTMwWjAYMRYwFAYD VQQDEw02OGE4YmJiYS1lODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDf95eEnbv95kLmgeZwonaZqPDc0xQ5vvN8GsYSASnvIYEcL2ADGS+Bia+u9 nC3F6rMSLm/7HutRv7mt7tBHXlhPe2SpNaQZvPLVgG0N2UttHUinU8QphdCHMfBw Ll/IzlljMsG084C9FhCiMhN8+UqyUDrDWndGd59Wgdc/zpZQPABAuna2EcLfAH+i qfmtGJ+FjmLnjoLOgrY7Lr3U1+sttl+4b7vldFBCOTrAm8Lyb1WicPiTwwALHcEc IyNobkUt8JTM+xKWPNAjpbC4nsy2JfOzSGdbuN+iBYGZk0e0iJnlbXqIAjgJuvv9 CdxZshPVeYDX/YHYO/cym1F9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFYFaPg VWi0Qv0/lQmKP8OG17bcMB8GA1UdIwQYMBaAFJ8MFSCNfuYugMuXXP5M7Jy/HSdW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU3OS8yRDJGNDM3NDE0 RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVpNkF5NWRjX2t6c25MOGRK MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253d1ZJSTEtNWk2QXk1ZGNfa3pzbkw4ZEoxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU3OS8yRDJGNDM3NDE0RTYxMUVBOTI5QkJDNDVDNEY5QUUwMi9ud3dWSUkxLTVp NkF5NWRjX2t6c25MOGRKMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5y6/mHn9XzFanwU+1S7jzvsbWxyG17eXYTZugCoB6j7bqN0g5cXMO ZP3e4e385H+i1colpBumx/t4f3ae0iXYEx2qSzzeYvOsDlIZ/jPx3SjJuVsI8UqR X12gw3BJXrRSGqaQIWuLMhSoR/MEHYn3Nsuc5RsRXPUpbfQ1tVDNQPl0ApCf96Kk MRzThBxlx3w9xUU9vl1tRShp4uxsWl1UfJ6pqaA4E3MUf4jmQ8lWCdjGIFfljapN i4FbzGqKHZ0n2oH8xwd7uihpSj/jQhUd6ZFJwMiC50GHKCEteE/jN+kU2fisbumq 3oZOQ7gZaRWQ7tv99fTr2cvQULQ2lYSo -----END CERTIFICATE-----Generated at Sun Aug 24 00:55:52 2025 by rpki-client