$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json) Hash identifier: DelW8WC9Ufswalfdk9+ONGpStZreXyJsc+cpv6AylSU= Subject key identifier: 72:F4:12:C9:89:F1:47:68:87:5D:68:5A:9E:88:58:E2:BF:BD:55:D1 Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft Manifest number: 0AE3 Signing time: Fri 22 Aug 2025 19:32:01 +0000 Manifest this update: Fri 22 Aug 2025 19:32:01 +0000 Manifest next update: Fri 29 Aug 2025 19:32:01 +0000 Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: 42K6uJJqWTxTMtLOUjqu3xCg2L/dPoWe9IAKhIBgONU=) 2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2794 (0xaea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: Aug 22 19:32:01 2025 GMT Not After : Aug 29 19:32:01 2025 GMT Subject: CN=68a8c5b1-d017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:fe:4b:69:56:dd:a2:ed:c7:9a:9e:b6:08: d6:6b:45:72:32:75:8d:c5:6b:41:cd:1c:97:39:75: 4c:b2:07:27:f6:af:7e:82:6d:f6:81:49:b5:7e:2f: 44:ec:b5:1f:4b:fb:82:da:0c:3f:71:03:3e:c4:05: 9b:70:80:13:01:1a:42:5c:bb:9a:39:c7:56:ab:ab: 9d:92:3a:94:e0:aa:f7:03:15:56:85:b3:4b:ff:5e: 6d:db:22:91:d5:5e:07:ba:c8:22:d4:56:84:53:48: c4:a2:3b:10:59:ea:3f:6b:fc:2f:b8:fc:37:fa:04: 5a:1c:0d:32:7f:07:ba:32:93:95:a1:c1:bd:70:99: 52:8f:a9:51:6d:16:b3:c9:c0:85:80:32:a9:9a:6d: e5:f1:34:1d:76:1e:4e:87:0b:9b:0b:52:98:15:39: a7:e9:af:97:c9:92:0d:a7:f8:4d:7d:63:ce:37:f4: 1c:59:a9:01:eb:94:ba:a1:02:57:46:21:5b:c4:26: c7:b9:07:4f:34:a7:93:84:a4:e9:e2:03:e5:93:58: 06:53:91:72:fd:64:b8:c9:6d:1e:45:1d:14:13:f6: 7e:a5:c2:c9:05:92:27:e3:22:87:04:da:06:9a:f9: df:1b:92:82:a7:85:89:09:ab:5a:d6:c5:6f:ec:c9: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:12:C9:89:F1:47:68:87:5D:68:5A:9E:88:58:E2:BF:BD:55:D1 X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:a2:83:53:12:50:f2:3e:58:62:37:f5:31:59:b9:a5:e9: c4:24:47:88:03:a6:ae:45:30:7d:93:a9:36:66:46:02:85:a7: ee:32:f6:3d:f0:d1:64:11:ce:ca:9e:c6:ed:6a:de:8e:a8:06: fa:c0:5f:3c:ac:91:80:1b:b7:cb:96:40:da:b8:c6:cd:ee:11: 8c:5a:1c:18:3c:c6:7a:4f:b3:00:0f:92:cc:ed:8b:50:98:bd: ce:9f:d3:dc:c6:ff:50:a5:9a:6f:5b:67:ee:c5:70:f2:76:82: d8:b1:b5:08:8f:d6:ee:f6:af:df:66:cd:93:e4:9f:bc:17:17: c4:31:61:70:76:27:e6:27:d8:a2:1e:69:c1:c2:9b:d2:0d:a0: 5b:86:7d:9f:af:9c:e8:7d:7e:4d:e7:41:3e:c7:27:02:d2:f7: f8:6a:33:04:59:1d:33:fa:b5:9a:7e:bd:34:22:b4:b8:26:b4: 96:84:91:55:2b:52:73:42:1a:66:d3:31:25:5a:03:6f:02:9c: 62:37:a7:a0:ca:53:c0:28:62:c9:c5:a0:cd:21:80:4f:6f:13: a8:5f:16:ee:cd:cc:4f:a6:46:f4:5e:7c:03:3b:1e:f9:93:6c: d4:3d:6f:64:c8:59:a2:37:13:dc:42:a9:ee:51:16:44:2e:ae: 4e:f4:43:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjUwODIyMTkzMjAxWhcNMjUwODI5MTkzMjAxWjAYMRYwFAYD VQQDEw02OGE4YzViMS1kMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FP+S2lW3aLtx5qetgjWa0VyMnWNxWtBzRyXOXVMsgcn9q9+gm32gUm1fi9E 7LUfS/uC2gw/cQM+xAWbcIATARpCXLuaOcdWq6udkjqU4Kr3AxVWhbNL/15t2yKR 1V4Husgi1FaEU0jEojsQWeo/a/wvuPw3+gRaHA0yfwe6MpOVocG9cJlSj6lRbRaz ycCFgDKpmm3l8TQddh5OhwubC1KYFTmn6a+XyZINp/hNfWPON/QcWakB65S6oQJX RiFbxCbHuQdPNKeThKTp4gPlk1gGU5Fy/WS4yW0eRR0UE/Z+pcLJBZIn4yKHBNoG mvnfG5KCp4WJCata1sVv7MkCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL0EsmJ 8Udoh11oWp6IWOK/vVXRMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs bGh0NV9oSkdsQmNvY2djN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4qKDUxJQ8j5YYjf1MVm5penEJEeIA6auRTB9k6k2ZkYChafuMvY9 8NFkEc7Knsbtat6OqAb6wF88rJGAG7fLlkDauMbN7hGMWhwYPMZ6T7MAD5LM7YtQ mL3On9Pcxv9QpZpvW2fuxXDydoLYsbUIj9bu9q/fZs2T5J+8FxfEMWFwdifmJ9ii HmnBwpvSDaBbhn2fr5zofX5N50E+xycC0vf4ajMEWR0z+rWafr00IrS4JrSWhJFV K1JzQhpm0zElWgNvApxiN6egylPAKGLJxaDNIYBPbxOoXxbuzcxPpkb0XnwDOx75 k2zUPW9kyFmiNxPcQqnuURZELq5O9EMT -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:24 2025 by rpki-client