$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft File: nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json) Hash identifier: ev6l++REH/PAzX4F9bOH8vCfCrd9RlQAvIgt8SJ40Uw= Subject key identifier: AD:F2:CF:7D:08:45:4C:22:0F:B7:32:73:60:78:82:60:43:DD:66:7B Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 Certificate issuer: /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Certificate serial: 0549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft Manifest number: 0543 Signing time: Fri 22 Aug 2025 23:40:20 +0000 Manifest this update: Fri 22 Aug 2025 23:40:20 +0000 Manifest next update: Fri 29 Aug 2025 23:40:20 +0000 Files and hashes: 1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: O4kyDMCTL6PR8Di/kLVu1bgWk21I6wT5RB4VI+aZtm8=) 2: 06D647D4057811EC8BCE3783C4F9AE02.roa (hash: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1353 (0x549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3 Validity Not Before: Aug 22 23:40:20 2025 GMT Not After : Aug 29 23:40:20 2025 GMT Subject: CN=68a8ffe4-031a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d2:c5:1b:cb:49:44:af:b9:23:b4:a1:62:e9: ef:d0:8f:11:50:f7:af:9c:d3:51:dc:f6:1b:fc:79: 53:f6:45:0a:78:71:a4:5e:bb:0f:ee:bd:7b:42:ae: 43:58:8c:2f:18:3c:57:b0:ca:bf:30:2e:84:ca:02: da:06:9f:1b:6f:7f:ad:72:d4:db:89:92:ab:d0:56: 4d:66:44:bb:a0:05:25:c9:7b:a4:c4:28:88:bf:98: da:86:75:de:f6:81:16:cb:4c:18:e8:17:a1:46:53: c6:97:b1:e9:f5:e9:21:19:dc:59:b7:d6:ec:c5:1d: 99:a5:90:3e:22:83:36:02:fd:e4:2e:47:63:aa:57: 18:97:9c:9f:0e:a6:39:0e:8f:96:78:15:82:79:8e: 86:3b:a6:fa:39:ba:1d:53:c5:0c:ac:80:72:b6:f0: e1:0d:21:25:66:cb:4f:91:d1:26:97:6f:f8:ac:e1: 40:db:0f:7f:c2:f9:38:65:c0:de:4d:54:14:40:de: 35:a5:74:80:03:59:41:c5:74:7f:6b:51:bc:1f:d6: 06:46:bd:59:21:58:f3:7c:4d:c2:07:b4:e3:c5:55: 19:54:60:65:a4:55:8f:8c:39:2d:2c:41:c5:e7:cc: 0b:0a:68:06:bc:e1:3c:70:8f:82:c6:da:72:d5:b0: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F2:CF:7D:08:45:4C:22:0F:B7:32:73:60:78:82:60:43:DD:66:7B X509v3 Authority Key Identifier: keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a1:29:64:ae:ce:98:bf:1f:7e:72:02:3c:7e:6b:72:76:7c: fd:f6:c4:b0:98:51:03:31:8d:0f:5b:c4:e8:33:70:9f:56:b3: 77:f3:7a:56:1a:6c:5a:3b:a6:65:73:44:2e:ed:09:68:b7:a4: 58:99:fd:38:d6:b3:b0:04:55:39:1a:00:80:16:4a:e1:ac:da: f2:b3:ac:52:b9:4d:b7:45:6f:f9:96:f2:f8:57:41:45:df:f6: 12:d7:da:d2:9a:9a:d4:54:fd:90:40:b5:fa:4b:b1:b8:c9:2e: e5:26:f4:fa:79:ff:8e:f5:55:9a:6e:f7:4b:68:fe:a1:c7:3f: 4c:a0:17:36:f0:73:33:aa:6b:fc:e9:26:20:3a:32:93:ae:5b: 71:da:e8:f0:5f:73:db:bf:21:25:cd:d6:34:5f:ea:d5:5d:25: 75:ae:4e:4c:5d:45:4a:be:f7:21:33:cc:e2:7b:97:57:f9:28: b7:a7:c5:0b:b6:20:11:07:50:cc:00:cb:16:32:7e:99:13:6a: e4:55:e8:a1:a4:fa:fb:de:67:84:10:00:b0:0d:00:e1:06:b1: 49:85:95:94:71:2e:45:c3:ed:c0:b9:ed:b1:9f:11:0d:2f:f1: a0:db:4c:2a:0b:48:3f:f6:06:1b:53:c0:81:72:41:b4:2a:e9: 7c:96:52:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0 MzAxMjZGRDMwHhcNMjUwODIyMjM0MDIwWhcNMjUwODI5MjM0MDIwWjAYMRYwFAYD VQQDEw02OGE4ZmZlNC0wMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dLFG8tJRK+5I7ShYunv0I8RUPevnNNR3PYb/HlT9kUKeHGkXrsP7r17Qq5D WIwvGDxXsMq/MC6EygLaBp8bb3+tctTbiZKr0FZNZkS7oAUlyXukxCiIv5jahnXe 9oEWy0wY6BehRlPGl7Hp9ekhGdxZt9bsxR2ZpZA+IoM2Av3kLkdjqlcYl5yfDqY5 Do+WeBWCeY6GO6b6ObodU8UMrIBytvDhDSElZstPkdEml2/4rOFA2w9/wvk4ZcDe TVQUQN41pXSAA1lBxXR/a1G8H9YGRr1ZIVjzfE3CB7TjxVUZVGBlpFWPjDktLEHF 58wLCmgGvOE8cI+Cxtpy1bBpTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3yz30I RUwiD7cyc2B4gmBD3WZ7MB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1 NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUZBQi9FODJEMDZGRTA1NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1o UHBCSXJoQUxTRkZEQVNiOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQoSlkrs6Yvx9+cgI8fmtydnz99sSwmFEDMY0PW8ToM3CfVrN383pW GmxaO6Zlc0Qu7Qlot6RYmf041rOwBFU5GgCAFkrhrNrys6xSuU23RW/5lvL4V0FF 3/YS19rSmprUVP2QQLX6S7G4yS7lJvT6ef+O9VWabvdLaP6hxz9MoBc28HMzqmv8 6SYgOjKTrltx2ujwX3PbvyElzdY0X+rVXSV1rk5MXUVKvvchM8zie5dX+Si3p8UL tiARB1DMAMsWMn6ZE2rkVeihpPr73meEEACwDQDhBrFJhZWUcS5Fw+3Aue2xnxEN L/Gg20wqC0g/9gYbU8CBckG0Kul8llLH -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:17 2025 by rpki-client