$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft File: nPqGncMGNX16wwkuT__QTKUCd14.mft (raw, json) Hash identifier: +SRtZHLRPoTwVvHkFMz0e+oLB9sZV5kqR/C38MN+xzM= Subject key identifier: F9:3C:B5:9B:5B:DD:B7:C5:01:00:04:EC:5E:9B:2F:99:AF:20:92:C7 Authority key identifier: 9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E Certificate issuer: /CN=A917FFBF/serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft Manifest number: 0359 Signing time: Sat 23 Aug 2025 01:12:08 +0000 Manifest this update: Sat 23 Aug 2025 01:12:08 +0000 Manifest next update: Sat 30 Aug 2025 01:12:08 +0000 Files and hashes: 1: nPqGncMGNX16wwkuT__QTKUCd14.crl (hash: VjOf7kYz5EXPrXzhD/vvHefhBw5xPEvXbY4QIzPdPbc=) 2: 6AE91888C5FC11EC9127557EC4F9AE02.roa (hash: Upjs7verB9kHZN2eaB1a6dX0s9sFshQhi4VCB4ap3GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFBF, serialNumber=9CFA869DC306357D7AC3092E4FFFD04CA502775E Validity Not Before: Aug 23 01:12:08 2025 GMT Not After : Aug 30 01:12:08 2025 GMT Subject: CN=68a91568-c773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:c0:a7:63:d8:29:51:fb:05:31:cb:34:06: 52:dc:87:67:c9:ae:aa:8f:66:d4:3e:b0:34:f4:78: 8b:01:1c:c6:ab:c4:b2:5d:ec:53:01:e8:08:e5:ed: ac:59:5c:53:3a:15:f7:ee:11:a2:b4:7c:52:9f:77: 04:ba:a1:ec:67:eb:6c:89:3a:4b:9e:00:32:3f:16: 7c:1d:d7:99:7e:80:c1:eb:66:69:69:23:18:86:e8: c1:01:9b:11:fa:20:13:84:9d:37:7e:dc:4d:15:21: 93:a9:8f:9c:5b:fd:41:6b:d5:f9:c9:c5:1e:33:38: 25:f8:cc:81:ce:58:7d:26:a1:02:8a:10:2f:d3:6d: 16:fc:2a:ac:d2:6d:09:a0:47:f7:ef:f1:b6:7f:17: 90:e2:38:0c:1f:f9:8f:a1:95:75:16:ad:95:da:04: a2:b6:6e:55:c7:5d:a6:51:09:57:53:05:59:0d:13: 49:5a:71:6e:6b:d6:49:16:bd:f6:f5:34:17:28:29: 68:dd:d3:f4:7f:ef:6a:23:38:95:ae:6f:b2:bb:c2: 86:2c:46:ca:e6:99:a8:20:1f:ab:06:1a:da:7d:2e: bc:c9:3b:17:47:bf:4c:9e:36:59:e6:2f:95:67:38: 31:fb:61:44:02:04:f6:b0:31:3e:7d:be:78:44:5f: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3C:B5:9B:5B:DD:B7:C5:01:00:04:EC:5E:9B:2F:99:AF:20:92:C7 X509v3 Authority Key Identifier: keyid:9C:FA:86:9D:C3:06:35:7D:7A:C3:09:2E:4F:FF:D0:4C:A5:02:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPqGncMGNX16wwkuT__QTKUCd14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFBF/ED52F030C5F411EC8E80D886C4F9AE02/nPqGncMGNX16wwkuT__QTKUCd14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:55:7e:0e:1c:89:b9:81:a5:c6:d3:79:36:98:f3:6d:c3:21: 9d:e5:08:1c:84:ba:d3:16:b5:b2:b7:92:ab:19:29:ef:9f:b8: b2:a1:96:be:b5:8c:88:f1:52:7b:d2:3c:70:9a:72:a0:35:95: b9:c1:7e:31:da:2d:ac:b9:1d:e7:fa:da:67:5e:d1:1d:01:04: c8:12:1c:2b:53:eb:23:75:cf:92:ac:b6:88:06:8f:59:c4:5e: 4c:fa:9b:ac:b3:9b:a5:3c:3b:0e:25:e8:6b:fc:ec:55:cc:52: 87:af:f0:8b:38:3c:28:49:06:5c:d4:01:d0:fd:0e:3e:3a:b0: 22:b3:75:3e:9f:d3:ed:b2:b5:d9:57:bc:27:e7:8f:44:01:ca: fb:cf:19:74:35:37:aa:7f:cd:e0:df:4d:67:fb:f8:18:7a:8a: 49:0c:a9:4a:44:88:f3:31:42:dc:26:d0:f5:13:b2:5c:02:7f: 9e:35:73:ca:04:6f:db:71:4a:d8:af:22:db:af:6c:66:bc:2e: fa:cb:35:86:a7:f7:35:04:58:9d:6c:bb:7c:85:7b:01:ac:6d: 8f:94:6c:ea:74:f8:59:0f:cb:fb:76:56:61:c7:9f:c6:1f:66: ed:f7:13:18:03:49:6c:eb:5c:a1:99:1f:29:28:f9:2e:f6:92: d6:93:53:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQkYxMTAvBgNVBAUTKDlDRkE4NjlEQzMwNjM1N0Q3QUMzMDkyRTRGRkZEMDRD QTUwMjc3NUUwHhcNMjUwODIzMDExMjA4WhcNMjUwODMwMDExMjA4WjAYMRYwFAYD VQQDEw02OGE5MTU2OC1jNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGLAp2PYKVH7BTHLNAZS3Idnya6qj2bUPrA09HiLARzGq8SyXexTAegI5e2s WVxTOhX37hGitHxSn3cEuqHsZ+tsiTpLngAyPxZ8HdeZfoDB62ZpaSMYhujBAZsR +iAThJ03ftxNFSGTqY+cW/1Ba9X5ycUeMzgl+MyBzlh9JqECihAv020W/Cqs0m0J oEf37/G2fxeQ4jgMH/mPoZV1Fq2V2gSitm5Vx12mUQlXUwVZDRNJWnFua9ZJFr32 9TQXKClo3dP0f+9qIziVrm+yu8KGLEbK5pmoIB+rBhrafS68yTsXR79MnjZZ5i+V Zzgx+2FEAgT2sDE+fb54RF+kIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk8tZtb 3bfFAQAE7F6bL5mvIJLHMB8GA1UdIwQYMBaAFJz6hp3DBjV9esMJLk//0EylAnde MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCRi9FRDUyRjAzMEM1 RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05YMTZ3d2t1VF9fUVRLVUNk MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QcUduY01HTlgxNnd3a3VUX19RVEtVQ2QxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCRi9FRDUyRjAzMEM1RjQxMUVDOEU4MEQ4ODZDNEY5QUUwMi9uUHFHbmNNR05Y MTZ3d2t1VF9fUVRLVUNkMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCVX4OHIm5gaXG03k2mPNtwyGd5QgchLrTFrWyt5KrGSnvn7iyoZa+ tYyI8VJ70jxwmnKgNZW5wX4x2i2suR3n+tpnXtEdAQTIEhwrU+sjdc+SrLaIBo9Z xF5M+puss5ulPDsOJehr/OxVzFKHr/CLODwoSQZc1AHQ/Q4+OrAis3U+n9PtsrXZ V7wn549EAcr7zxl0NTeqf83g301n+/gYeopJDKlKRIjzMULcJtD1E7JcAn+eNXPK BG/bcUrYryLbr2xmvC76yzWGp/c1BFidbLt8hXsBrG2PlGzqdPhZD8v7dlZhx5/G H2bt9xMYA0ls61yhmR8pKPku9pLWk1No -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:51 2025 by rpki-client