$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: qWv0Gw06hoX0hvN3jzX5unb5Hx3RbhRin5D2N3Y8XPQ= Subject key identifier: B4:A2:F3:85:35:03:74:39:00:6D:42:D6:E0:AC:1D:43:C7:B0:87:0A Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 1591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 1589 Signing time: Fri 04 Jul 2025 17:03:21 +0000 Manifest this update: Fri 04 Jul 2025 17:03:21 +0000 Manifest next update: Fri 11 Jul 2025 17:03:21 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: zoQ+Ue0aPFA4oaV1D4eqEpyuSnL1Tiqt1p66+9BB2Ew=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5521 (0x1591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Jul 4 17:03:21 2025 GMT Not After : Jul 11 17:03:21 2025 GMT Subject: CN=68680959-84d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:24:28:ed:e1:7b:2d:fd:f3:4b:62:ab:a3: 7b:d0:3f:f5:c4:95:98:1c:e8:ad:d1:3c:49:ae:2d: 5c:25:1a:c1:aa:0b:02:5a:48:c5:12:f3:99:c0:1f: 2d:7c:d7:a4:55:0e:06:54:ce:57:a9:0e:6c:f5:a9: 78:a7:33:08:e8:3d:52:59:7b:26:78:82:51:ff:d2: af:44:58:5f:31:1e:ae:0b:f8:1c:da:57:af:77:1a: 66:d6:22:06:80:db:0d:61:d4:65:73:60:bb:7a:7e: 69:7d:6c:d9:09:71:6e:af:6c:2b:68:f4:ea:c3:45: 40:f9:c3:fe:f7:d5:ba:6a:9d:10:d7:61:61:16:3d: 4f:18:1b:8b:c6:ce:f5:a2:1e:cd:f6:eb:64:f0:18: fd:4a:df:a2:63:a6:66:48:e5:a9:c5:33:b0:1a:99: 0b:48:c5:51:1e:ca:88:17:a9:a3:aa:6c:c3:d5:49: a6:f1:1b:78:36:c2:3b:a6:ad:7f:0c:ca:db:1c:40: d7:3b:f0:4d:4a:90:74:25:e1:06:03:57:ec:60:1f: 5d:cd:00:49:1d:0b:34:05:bc:d5:b4:2c:fd:ca:46: 7b:76:fc:83:c8:cc:e4:82:38:e1:9b:98:4d:4d:82: 24:b6:8f:de:2f:47:a1:ec:d0:2c:47:25:e3:ba:0f: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A2:F3:85:35:03:74:39:00:6D:42:D6:E0:AC:1D:43:C7:B0:87:0A X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:19:32:e1:9f:25:58:f9:96:d5:26:9d:00:7a:82:e0:a3:64: a0:c1:0f:91:88:79:00:2c:b8:5c:cb:81:0a:d4:fe:cb:60:93: 9c:4d:79:99:84:1a:72:59:bc:43:98:74:0f:ed:a8:97:c0:aa: 85:be:3c:79:45:46:7e:af:1a:2d:fc:a5:8d:4f:46:ed:5e:35: 51:99:4d:f0:b2:3e:7f:c5:a2:b8:3e:8a:4e:d2:99:65:14:36: 3c:07:15:88:c9:14:de:83:51:4d:9b:99:1f:f0:7c:8a:0e:79: 7b:25:bb:31:db:e5:ac:12:5d:8b:fe:29:b3:2a:a4:d4:a4:22: 78:05:59:a3:3b:7e:8a:37:76:a1:13:ee:8b:a4:d0:36:cb:c6: c2:e4:22:1d:c1:69:ec:b4:0a:a4:2d:31:18:d9:64:fc:85:68: d7:c3:30:92:af:69:56:0c:e5:d2:f5:3f:98:59:2d:88:df:c5: 4c:a4:07:05:d7:0a:14:13:7f:f7:76:0e:36:4c:b1:72:c4:8a: fa:c5:de:e3:c0:99:7b:b4:2f:c9:28:31:dc:0d:77:6d:fb:46: a2:7e:04:23:31:c9:96:0a:3d:a1:a0:71:d5:33:32:b3:82:b9: 5d:9e:de:74:b5:d1:2c:33:1a:9c:bd:13:34:5e:a8:96:7e:5c: 56:e7:8a:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwNzA0MTcwMzIxWhcNMjUwNzExMTcwMzIxWjAYMRYwFAYD VQQDEw02ODY4MDk1OS04NGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRskKO3hey3980tiq6N70D/1xJWYHOit0TxJri1cJRrBqgsCWkjFEvOZwB8t fNekVQ4GVM5XqQ5s9al4pzMI6D1SWXsmeIJR/9KvRFhfMR6uC/gc2levdxpm1iIG gNsNYdRlc2C7en5pfWzZCXFur2wraPTqw0VA+cP+99W6ap0Q12FhFj1PGBuLxs71 oh7N9utk8Bj9St+iY6ZmSOWpxTOwGpkLSMVRHsqIF6mjqmzD1Umm8Rt4NsI7pq1/ DMrbHEDXO/BNSpB0JeEGA1fsYB9dzQBJHQs0BbzVtCz9ykZ7dvyDyMzkgjjhm5hN TYIkto/eL0eh7NAsRyXjug8kCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSi84U1 A3Q5AG1C1uCsHUPHsIcKMB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKGTLhnyVY+ZbVJp0AeoLgo2SgwQ+RiHkALLhcy4EK1P7LYJOcTXmZ hBpyWbxDmHQP7aiXwKqFvjx5RUZ+rxot/KWNT0btXjVRmU3wsj5/xaK4PopO0pll FDY8BxWIyRTeg1FNm5kf8HyKDnl7Jbsx2+WsEl2L/imzKqTUpCJ4BVmjO36KN3ah E+6LpNA2y8bC5CIdwWnstAqkLTEY2WT8hWjXwzCSr2lWDOXS9T+YWS2I38VMpAcF 1woUE3/3dg42TLFyxIr6xd7jwJl7tC/JKDHcDXdt+0aifgQjMcmWCj2hoHHVMzKz grldnt50tdEsMxqcvRM0XqiWflxW54qN -----END CERTIFICATE-----Generated at Sun Jul 6 00:45:12 2025 by rpki-client