$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft File: nOkX3Drgxboud8t3WjrZnGhcQGs.mft (raw, json) Hash identifier: pCpmn8VEFVGAuG0pEyknOqnf0hjW2kOqC5MdIFDyUgY= Subject key identifier: 4D:9D:F2:24:31:4D:0A:A5:04:2C:5F:76:83:F6:8B:A1:42:83:28:D8 Authority key identifier: 9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B Certificate issuer: /CN=A9161F3E/serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft Manifest number: 49 Signing time: Sat 23 Aug 2025 07:37:11 +0000 Manifest this update: Sat 23 Aug 2025 07:37:10 +0000 Manifest next update: Sat 30 Aug 2025 07:37:10 +0000 Files and hashes: 1: nOkX3Drgxboud8t3WjrZnGhcQGs.crl (hash: 3MQPNxTTsn1jrAxZGZ1w4pkItIqxeyMhyr7Hsmj1qx8=) 2: 49DEAEDC12A711F099020A73C4F9AE02.roa (hash: ZDuunhoBLIFxkgffUJp6fhz6W2Ysr7yM0HyGKDGLaSU=) 3: 4A3C802012A711F099020A73C4F9AE02.roa (hash: EvMFCkIZLxU/4T9yDv4rTrnplB41rjMOAziWwMgP5hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F3E, serialNumber=9CE917DC3AE0C5BA2E77CB775A3AD99C685C406B Validity Not Before: Aug 23 07:37:10 2025 GMT Not After : Aug 30 07:37:10 2025 GMT Subject: CN=68a96fa7-cfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:57:19:e7:b9:cc:75:a7:af:27:80:cb:33: 04:59:00:e4:e4:7f:c9:34:76:24:75:00:a1:c0:8f: f4:f0:bd:57:c7:16:e5:3d:31:f1:ae:b7:ac:97:f5: e0:ed:05:cf:38:7b:47:6f:d2:51:39:a3:a2:29:1e: 49:63:b1:10:26:75:5f:b8:4b:cf:fd:19:6f:dc:67: 8f:ee:25:0c:d2:a4:a5:16:28:9a:31:00:eb:29:9a: a9:94:74:f9:16:95:dd:c9:4a:43:6c:b2:53:13:4b: ea:2d:87:e4:33:42:df:fd:bf:15:41:8e:52:2f:50: d5:ca:50:a3:73:99:c7:f1:43:9b:9a:27:99:e1:f3: e9:f6:97:21:51:78:1d:68:ba:dc:92:a8:ed:f7:94: d5:f8:50:e3:f6:70:56:61:16:5d:fe:be:88:87:7c: 4b:04:11:f3:68:07:e7:2f:78:f8:ed:b9:09:fc:fe: b2:be:8f:47:50:0b:25:06:fa:67:a1:25:b4:24:49: d4:2e:ba:36:f5:f2:b6:08:b1:84:72:e5:75:c5:04: 9d:c4:89:d9:ab:a7:f4:85:b0:b4:d9:a8:60:97:ff: a8:12:b1:63:58:81:0a:43:01:bb:d3:1f:91:81:f8: e7:7d:4e:bb:a9:3c:44:1f:c0:4d:cb:2c:62:14:36: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:F2:24:31:4D:0A:A5:04:2C:5F:76:83:F6:8B:A1:42:83:28:D8 X509v3 Authority Key Identifier: keyid:9C:E9:17:DC:3A:E0:C5:BA:2E:77:CB:77:5A:3A:D9:9C:68:5C:40:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nOkX3Drgxboud8t3WjrZnGhcQGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F3E/339EDE6810E411F0B75B8166C4F9AE02/nOkX3Drgxboud8t3WjrZnGhcQGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:98:20:1e:30:21:1c:eb:43:2c:4b:a8:14:b2:f2:0f:76: 15:ca:1d:45:09:1c:05:f1:3c:47:c2:43:d9:a1:59:c7:b6:35: 17:9c:21:28:58:0e:2f:7b:5e:df:79:c3:50:21:57:44:3a:4b: 02:98:1a:f1:df:b9:37:62:33:5c:99:6b:ee:f3:6c:76:05:84: 16:a7:61:0a:3a:98:e2:da:f3:25:52:54:ec:23:c3:1f:e6:00: 16:52:6e:33:c1:73:e2:4d:76:69:03:9e:75:c1:a3:33:40:d0: b1:ea:12:37:e3:b9:0d:50:92:80:b6:04:24:b6:c9:d1:ef:7c: 1b:6d:e2:c6:1f:8b:48:8c:e9:20:1c:e7:ba:1e:f7:7f:7e:4c: a2:92:4d:bd:3b:eb:fa:2f:6d:c8:e4:a2:c3:9a:b8:16:f1:75: 94:e4:e2:ff:5c:70:c6:38:48:2b:3c:ef:aa:6b:98:5b:ac:b9: 25:18:09:99:ba:28:32:4d:c2:7c:4d:ff:50:83:9f:7f:a8:8a: f8:42:60:ac:93:5c:19:24:9e:43:4e:86:f9:1a:36:0e:e2:58: 4c:e7:e1:c6:54:37:de:a7:87:a6:02:8f:6e:ed:60:ad:ce:3e: 65:b4:1c:54:e2:65:03:55:e2:19:86:74:29:ba:71:73:f3:dd: 65:d0:19:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUYzRTExMC8GA1UEBRMoOUNFOTE3REMzQUUwQzVCQTJFNzdDQjc3NUEzQUQ5OUM2 ODVDNDA2QjAeFw0yNTA4MjMwNzM3MTBaFw0yNTA4MzAwNzM3MTBaMBgxFjAUBgNV BAMTDTY4YTk2ZmE3LWNmZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrVVcZ57nMdaevJ4DLMwRZAOTkf8k0diR1AKHAj/TwvVfHFuU9MfGut6yX9eDt Bc84e0dv0lE5o6IpHkljsRAmdV+4S8/9GW/cZ4/uJQzSpKUWKJoxAOspmqmUdPkW ld3JSkNsslMTS+oth+QzQt/9vxVBjlIvUNXKUKNzmcfxQ5uaJ5nh8+n2lyFReB1o utySqO33lNX4UOP2cFZhFl3+voiHfEsEEfNoB+cvePjtuQn8/rK+j0dQCyUG+meh JbQkSdQuujb18rYIsYRy5XXFBJ3Eidmrp/SFsLTZqGCX/6gSsWNYgQpDAbvTH5GB +Od9TrupPEQfwE3LLGIUNrb5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTZ3yJDFN CqUELF92g/aLoUKDKNgwHwYDVR0jBBgwFoAUnOkX3Drgxboud8t3WjrZnGhcQGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxRjNFLzMzOUVERTY4MTBF NDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJvdWQ4dDNXanJabkdoY1FH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbk9rWDNEcmd4Ym91ZDh0M1dqclpuR2hjUUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx RjNFLzMzOUVERTY4MTBFNDExRjBCNzVCODE2NkM0RjlBRTAyL25Pa1gzRHJneGJv dWQ4dDNXanJabkdoY1FHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVKmCAeMCEc60MsS6gUsvIPdhXKHUUJHAXxPEfCQ9mhWce2NRecIShY Di97Xt95w1AhV0Q6SwKYGvHfuTdiM1yZa+7zbHYFhBanYQo6mOLa8yVSVOwjwx/m ABZSbjPBc+JNdmkDnnXBozNA0LHqEjfjuQ1QkoC2BCS2ydHvfBtt4sYfi0iM6SAc 57oe939+TKKSTb076/ovbcjkosOauBbxdZTk4v9ccMY4SCs876prmFusuSUYCZm6 KDJNwnxN/1CDn3+oivhCYKyTXBkknkNOhvkaNg7iWEzn4cZUN96nh6YCj27tYK3O PmW0HFTiZQNV4hmGdCm6cXPz3WXQGb0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:05:22 2025 by rpki-client