$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft File: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft (raw, json) Hash identifier: Xmt8nesXHUSxcOzVzX2BuAPiRRHAuZM1e3m51ujp9Hw= Subject key identifier: 5D:EB:F5:6C:40:76:9E:9C:70:81:47:31:2A:DE:18:7D:23:9F:E2:B9 Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft Manifest number: 08B1 Signing time: Fri 22 Aug 2025 21:31:30 +0000 Manifest this update: Fri 22 Aug 2025 21:31:30 +0000 Manifest next update: Fri 29 Aug 2025 21:31:30 +0000 Files and hashes: 1: nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl (hash: MXT3lkjCMpar5QWM4zJlywLrbDMvBrlIA3FuBey34rw=) 2: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (hash: wNb7wt9LoL43jcA+mUQT30ztE8Bu/gprmUrfQ7394SE=) 3: 287F42E4018011EF92ADDC7FC4F9AE02.roa (hash: 7M2chMpcVVj4sQX6rJTcJqzZcUzfUszkZnNqnDdp46Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162 Validity Not Before: Aug 22 21:31:30 2025 GMT Not After : Aug 29 21:31:30 2025 GMT Subject: CN=68a8e1b2-8220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:8f:6e:52:02:12:68:cc:56:88:54:72:01: bb:56:c1:bb:94:9f:f8:86:b7:bf:96:a5:0a:6d:5e: fe:0e:f5:a9:d6:62:a2:e0:5d:50:0f:6f:a6:14:8d: f8:e8:e9:7d:f2:59:b0:e2:4a:94:2e:e2:de:75:af: e3:77:d6:45:1e:e9:d9:5e:72:22:c4:25:b0:81:c8: 9c:9d:c7:94:49:8b:2a:83:ec:32:c7:f9:84:39:95: ea:ac:05:6f:fd:54:51:c8:85:b3:9d:11:88:2d:14: 5d:c5:fd:3f:de:ce:0b:0a:2d:8b:8c:6a:79:87:c9: dd:a7:14:c9:0c:40:dd:1f:ce:a4:a6:61:44:a8:24: a6:55:0e:e5:b9:23:e7:16:1d:a2:b3:7b:f1:ea:44: 3d:01:a8:49:fb:63:d2:b5:92:db:71:ee:8e:39:c5: 9e:ed:7c:aa:38:71:de:fd:f2:28:40:f4:c5:a4:c1: 33:17:8a:bb:4a:ef:4f:07:41:64:35:a7:54:ca:4e: 67:d7:f5:a8:ec:10:1a:ca:83:41:a6:3d:4c:d0:29: 29:a0:30:c0:6d:46:62:cf:13:b6:75:c6:9c:0c:1a: 59:b1:9e:7d:14:b1:05:d4:86:cd:8b:68:50:18:0f: 98:06:72:d9:ca:95:7e:6c:46:3e:b6:53:59:f2:d5: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:F5:6C:40:76:9E:9C:70:81:47:31:2A:DE:18:7D:23:9F:E2:B9 X509v3 Authority Key Identifier: keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:53:11:ad:d8:f0:4a:57:d8:ba:96:f8:5e:a2:b2:5c:44: 08:b9:17:8e:62:39:8e:7a:48:c5:e4:71:42:32:0c:8c:34:03: c8:6a:e9:3a:75:8d:db:b9:85:8f:85:66:ea:5b:b5:34:d7:d8: 56:bb:e1:c6:2a:09:5d:50:d4:f0:21:36:8e:53:02:a1:39:6d: af:ea:d6:a1:8e:fe:44:dc:d4:85:b0:a8:1e:dc:c6:9c:92:af: 6f:32:50:a9:9e:82:8a:91:58:7d:74:1a:50:d4:62:e0:ba:70: 0b:ae:a4:4b:41:89:89:db:9a:e7:2d:ca:b8:0f:4d:5d:33:0c: fd:83:6a:cf:07:36:21:a1:9d:dd:2b:9a:12:d4:04:6a:d6:28: d9:68:27:f2:47:66:24:b2:46:f1:3f:c0:d6:5f:ba:4a:5c:ee: 3d:03:6f:82:f2:97:d1:e1:ff:fb:b9:3d:cb:b9:a2:fe:6d:51: 50:43:76:35:7e:bd:1c:f6:39:e9:6f:fa:61:37:51:92:0e:3c: 53:78:01:3b:41:8c:42:32:d4:b1:e7:79:5d:f5:67:77:f2:d9: 0a:f4:b9:d0:32:25:7e:1d:8e:15:22:c5:e8:f6:21:4b:4e:fd: 16:d4:c9:f9:73:b5:bd:7b:75:61:b0:9b:d8:fb:28:89:9c:32: ac:9a:1a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0 OTQ5OTcxNjIwHhcNMjUwODIyMjEzMTMwWhcNMjUwODI5MjEzMTMwWjAYMRYwFAYD VQQDEw02OGE4ZTFiMi04MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49uPblICEmjMVohUcgG7VsG7lJ/4hre/lqUKbV7+DvWp1mKi4F1QD2+mFI34 6Ol98lmw4kqULuLeda/jd9ZFHunZXnIixCWwgcicnceUSYsqg+wyx/mEOZXqrAVv /VRRyIWznRGILRRdxf0/3s4LCi2LjGp5h8ndpxTJDEDdH86kpmFEqCSmVQ7luSPn Fh2is3vx6kQ9AahJ+2PStZLbce6OOcWe7XyqOHHe/fIoQPTFpMEzF4q7Su9PB0Fk NadUyk5n1/Wo7BAayoNBpj1M0CkpoDDAbUZizxO2dcacDBpZsZ59FLEF1IbNi2hQ GA+YBnLZypV+bEY+tlNZ8tVp+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3r9WxA dp6ccIFHMSreGH0jn+K5MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDA0RS9CQzAzMEM3NkYxREExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFE S0Q4TXEwUGkzR0ZKU1pjV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOMlMRrdjwSlfYupb4XqKyXEQIuReOYjmOekjF5HFCMgyMNAPIauk6 dY3buYWPhWbqW7U019hWu+HGKgldUNTwITaOUwKhOW2v6tahjv5E3NSFsKge3Mac kq9vMlCpnoKKkVh9dBpQ1GLgunALrqRLQYmJ25rnLcq4D01dMwz9g2rPBzYhoZ3d K5oS1ARq1ijZaCfyR2YkskbxP8DWX7pKXO49A2+C8pfR4f/7uT3LuaL+bVFQQ3Y1 fr0c9jnpb/phN1GSDjxTeAE7QYxCMtSx53ld9Wd38tkK9LnQMiV+HY4VIsXo9iFL Tv0W1Mn5c7W9e3VhsJvY+yiJnDKsmhrF -----END CERTIFICATE-----Generated at Sat Aug 23 17:49:29 2025 by rpki-client