$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json) Hash identifier: ccfURsFiPEP3U291BK+4RiwJQJZC+oU1w6Psy395W9k= Subject key identifier: 87:C0:85:7D:88:08:AE:9E:2B:8F:59:31:55:93:B7:C8:BB:CD:EB:B6 Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Certificate serial: 15AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft Manifest number: 15A2 Signing time: Fri 22 Aug 2025 16:53:18 +0000 Manifest this update: Fri 22 Aug 2025 16:53:17 +0000 Manifest next update: Fri 29 Aug 2025 16:53:17 +0000 Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: 0W0KYUvmZPZukTfAP0H0/lZg4g/1jZEeFuWeaPLDOKk=) 2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5546 (0x15aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950 Validity Not Before: Aug 22 16:53:17 2025 GMT Not After : Aug 29 16:53:17 2025 GMT Subject: CN=68a8a07e-a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:78:6b:4a:63:94:86:1d:45:4b:b3:f4:9c:4c: a7:81:3b:9a:6d:2a:59:86:c7:bc:26:4e:92:31:fd: df:74:1a:95:54:79:ed:20:38:27:af:48:1d:b1:b9: c7:a7:dc:55:3c:c8:4f:62:a4:ae:b1:f9:be:56:cb: 32:4b:b1:8b:e8:58:d3:37:ce:25:44:0a:51:59:38: bf:24:31:89:58:42:c0:9c:c3:97:ee:87:ee:1a:60: 6c:43:98:91:90:e4:d0:16:28:e3:52:31:fa:31:e2: 38:09:29:5f:62:2b:33:a9:82:eb:69:f3:4c:ec:86: b5:68:ae:bf:86:f2:59:7f:3e:b1:e0:32:a0:17:5b: 8a:5e:92:a0:7d:68:be:8f:53:27:3d:ac:65:0d:a7: 9b:7d:b7:7d:33:e2:a5:d1:01:de:b2:8f:ce:fa:4c: 18:64:71:c0:08:90:f0:dd:a7:c9:0e:41:2f:02:81: cc:9c:ee:59:1d:52:46:76:ab:2a:0a:20:da:15:06: 97:ac:16:8a:58:49:1a:23:0c:f9:51:bc:1f:92:14: 22:6c:63:8a:6f:da:4d:99:96:0b:22:00:c9:99:3b: 7e:ce:0d:0c:57:cb:41:d5:03:66:bc:ca:ef:7f:cc: 17:a9:0e:be:bc:1e:ba:b2:08:a7:f3:5e:31:40:a8: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:85:7D:88:08:AE:9E:2B:8F:59:31:55:93:B7:C8:BB:CD:EB:B6 X509v3 Authority Key Identifier: keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4d:a6:51:ea:8f:84:12:a4:f7:ae:5e:4c:18:a0:78:ec:6e: f3:fe:b2:91:1f:2b:d4:2e:09:55:da:6d:73:91:60:34:3e:0d: 08:ad:07:c3:b5:a2:52:c9:b2:8e:ff:a6:c1:02:09:4e:d5:d5: 58:8d:29:4c:2f:4a:5d:32:55:0c:81:b1:93:c3:66:1f:25:c1: 85:40:12:02:11:57:d8:09:91:0f:66:81:78:e8:62:e5:35:96: 8e:d1:08:cb:d7:1e:07:e6:42:d4:bf:e2:1d:bd:98:3e:ed:ef: dd:68:eb:61:6b:cd:9b:d2:df:74:c9:18:f4:27:ee:71:96:46: 7a:35:2f:05:d6:ba:ec:45:18:35:89:be:3b:79:0b:de:a4:83: 1b:c8:71:fe:1e:67:4e:e6:98:0b:e9:54:85:85:77:44:23:18: e4:96:6d:36:a0:bb:ad:0d:fc:b4:0d:5e:5c:9a:94:a6:8b:b0: 54:76:08:9e:19:48:90:da:86:53:7e:c8:d4:c6:74:74:6a:69: d5:83:47:4c:f8:c5:4a:d0:15:c1:31:eb:a0:7f:7f:9a:5c:de: bd:f8:54:4a:4f:af:03:31:30:ab:09:63:ec:55:70:d1:46:df: 5d:49:75:2f:0e:47:9e:c4:7a:1d:7f:18:e8:78:5d:3e:bb:df: ac:cc:33:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBMUYxMTAvBgNVBAUTKDM3RTY3ODkyRUJDMkI3QzI0MTAyRTg1MjdFOTA3Q0ZF QUVGNUM5NTAwHhcNMjUwODIyMTY1MzE3WhcNMjUwODI5MTY1MzE3WjAYMRYwFAYD VQQDEw02OGE4YTA3ZS1hNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93hrSmOUhh1FS7P0nEyngTuabSpZhse8Jk6SMf3fdBqVVHntIDgnr0gdsbnH p9xVPMhPYqSusfm+VssyS7GL6FjTN84lRApRWTi/JDGJWELAnMOX7ofuGmBsQ5iR kOTQFijjUjH6MeI4CSlfYiszqYLrafNM7Ia1aK6/hvJZfz6x4DKgF1uKXpKgfWi+ j1MnPaxlDaebfbd9M+Kl0QHeso/O+kwYZHHACJDw3afJDkEvAoHMnO5ZHVJGdqsq CiDaFQaXrBaKWEkaIwz5UbwfkhQibGOKb9pNmZYLIgDJmTt+zg0MV8tB1QNmvMrv f8wXqQ6+vB66sgin814xQKj73QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfAhX2I CK6eK49ZMVWTt8i7zeu2MB8GA1UdIwQYMBaAFDfmeJLrwrfCQQLoUn6QfP6u9clQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REExRi84MUEwNDQ0ODM2 MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4SkJBdWhTZnBCOF9xNzF5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tWjRrdXZDdDhKQkF1aFNmcEI4X3E3MXlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REExRi84MUEwNDQ0ODM2MjcxMUU4QTIxMDhGNzRDNEY5QUUwMi9OLVo0a3V2Q3Q4 SkJBdWhTZnBCOF9xNzF5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZTaZR6o+EEqT3rl5MGKB47G7z/rKRHyvULglV2m1zkWA0Pg0IrQfD taJSybKO/6bBAglO1dVYjSlML0pdMlUMgbGTw2YfJcGFQBICEVfYCZEPZoF46GLl NZaO0QjL1x4H5kLUv+IdvZg+7e/daOtha82b0t90yRj0J+5xlkZ6NS8F1rrsRRg1 ib47eQvepIMbyHH+HmdO5pgL6VSFhXdEIxjklm02oLutDfy0DV5cmpSmi7BUdgie GUiQ2oZTfsjUxnR0amnVg0dM+MVK0BXBMeugf3+aXN69+FRKT68DMTCrCWPsVXDR Rt9dSXUvDkeexHodfxjoeF0+u9+szDPx -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:59 2025 by rpki-client