$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: Y/8Ls5j4ZLMEJSXcSO6lFN23MtqMGPOJKQLY7TJvzJc= Subject key identifier: 70:25:28:56:3F:6A:02:CC:C3:71:E9:67:CF:20:25:D8:37:09:76:B5 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 67 Signing time: Sat 23 Aug 2025 07:13:40 +0000 Manifest this update: Sat 23 Aug 2025 07:13:39 +0000 Manifest next update: Sat 30 Aug 2025 07:13:39 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: D8qXhhTVfbxJYETpgbMGoRfYv/yjo/hKpkSfZSjUBqA=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: vcq+JOCdxjFG1D5wGuVH3+pI9poPc4zyyjKKMXsqhWE=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Aug 23 07:13:39 2025 GMT Not After : Aug 30 07:13:39 2025 GMT Subject: CN=68a96a24-1813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:4a:ec:6f:ee:3c:ec:04:a8:d3:71:d5:55: 7c:18:0f:2a:c6:a6:1c:4b:e7:f6:cd:e3:9b:69:3c: 1b:da:99:bd:49:9e:e2:3e:d5:b7:44:a8:15:56:b7: 27:e8:8c:84:b8:6c:d7:0c:ed:b6:f3:2a:bc:06:be: 45:f7:98:39:67:b3:a7:8e:dc:df:9f:36:ea:4b:5c: 94:21:fa:23:85:de:42:19:2d:0f:ff:60:11:e7:1e: 51:81:a3:ce:a9:62:b4:f3:c5:f5:4f:24:6d:7f:d4: 9a:81:e4:87:99:d6:c8:da:ee:15:14:07:d7:c6:e3: 6e:9f:f3:13:0b:d8:3d:ac:72:c4:ec:02:c4:8a:f1: 5f:e0:24:20:ce:e4:ea:8b:fd:f2:2c:af:71:9a:a8: 59:9f:9d:e0:61:08:8f:77:ca:94:e1:69:99:ca:fd: 46:77:c3:08:37:d6:51:5e:e5:be:4d:cf:06:b6:a9: 37:08:7e:6e:b2:3d:a5:53:56:75:3f:1e:b7:47:41: 08:0f:8b:be:26:de:87:6c:e1:e8:08:30:17:e6:74: c1:e1:21:ca:da:09:7c:81:51:40:6f:a5:28:e8:23: e6:7b:c1:e0:45:71:8b:df:b5:2c:19:13:54:a3:28: a1:ec:28:37:cf:e4:0a:ff:a0:9f:88:76:91:8a:45: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:25:28:56:3F:6A:02:CC:C3:71:E9:67:CF:20:25:D8:37:09:76:B5 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:12:b5:a2:bb:3f:8f:5d:da:3a:df:77:d1:6a:d0:9a:1e:3a: 87:18:09:58:e7:f5:a1:a7:a4:80:26:ca:b3:43:2d:a3:cd:bc: c4:2f:ff:f1:78:f6:9b:ce:55:5b:f2:1c:c8:60:81:eb:7f:e1: dc:f8:9d:ec:8b:08:ae:4a:af:e1:df:77:f3:d7:27:de:18:49: 88:df:68:9e:1b:3f:14:b7:b7:3b:87:14:7a:b0:56:62:27:be: fb:6f:8b:c8:8c:89:b3:6b:1b:77:87:b1:f0:00:47:c0:ee:1b: 99:6d:0d:95:76:56:84:3d:21:cb:32:bd:9d:54:43:c7:88:a8: 5a:ac:f9:b4:28:50:71:ee:c4:1c:97:3f:df:65:87:ec:2d:4b: fc:a0:0e:d5:c1:98:00:22:a0:52:d5:d0:69:bb:c4:a2:02:67: 07:c6:bf:8b:8f:34:27:94:fb:e2:c7:c5:25:b5:bd:58:79:0a: 05:72:6a:df:69:68:28:28:29:64:28:94:e9:8e:02:04:fd:22: c7:ca:5e:66:b8:cc:8f:f8:74:86:fc:6a:67:16:c6:e7:63:25: ea:3a:ce:06:0d:9e:e7:e6:1f:83:1c:06:91:58:3d:90:d4:72: f5:7d:7a:0a:b8:29:db:59:8c:fb:ce:aa:b7:1e:5f:3a:ff:63: 38:17:7f:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjAzNzExMC8GA1UEBRMoMzc2MTIxMkExNjcwQTU3MTlBQjcxRkEyMDNCOTJFQzY4 NkYyMTE3NzAeFw0yNTA4MjMwNzEzMzlaFw0yNTA4MzAwNzEzMzlaMBgxFjAUBgNV BAMTDTY4YTk2YTI0LTE4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+TUrsb+487ASo03HVVXwYDyrGphxL5/bN45tpPBvamb1JnuI+1bdEqBVWtyfo jIS4bNcM7bbzKrwGvkX3mDlns6eO3N+fNupLXJQh+iOF3kIZLQ//YBHnHlGBo86p YrTzxfVPJG1/1JqB5IeZ1sja7hUUB9fG426f8xML2D2scsTsAsSK8V/gJCDO5OqL /fIsr3GaqFmfneBhCI93ypThaZnK/UZ3wwg31lFe5b5Nzwa2qTcIfm6yPaVTVnU/ HrdHQQgPi74m3ods4egIMBfmdMHhIcraCXyBUUBvpSjoI+Z7weBFcYvftSwZE1Sj KKHsKDfP5Ar/oJ+IdpGKReGHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcCUoVj9q AszDcelnzyAl2DcJdrUwHwYDVR0jBBgwFoAUN2EhKhZwpXGatx+iA7kuxobyEXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMDM3LzVDMDVDMEM4RTQx NzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjJFaEtoWndwWEdhdHgtaUE3a3V4b2J5RVhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MDM3LzVDMDVDMEM4RTQxNzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhH YXR4LWlBN2t1eG9ieUVYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUStaK7P49d2jrfd9Fq0JoeOocYCVjn9aGnpIAmyrNDLaPNvMQv//F4 9pvOVVvyHMhgget/4dz4neyLCK5Kr+Hfd/PXJ94YSYjfaJ4bPxS3tzuHFHqwVmIn vvtvi8iMibNrG3eHsfAAR8DuG5ltDZV2VoQ9IcsyvZ1UQ8eIqFqs+bQoUHHuxByX P99lh+wtS/ygDtXBmAAioFLV0Gm7xKICZwfGv4uPNCeU++LHxSW1vVh5CgVyat9p aCgoKWQolOmOAgT9IsfKXma4zI/4dIb8amcWxudjJeo6zgYNnufmH4McBpFYPZDU cvV9egq4KdtZjPvOqrceXzr/YzgXf/4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:45 2025 by rpki-client