$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: yb224waNsQj7EAaDkiKCiNA+Mee5vlJ55suZuZHobjg= Subject key identifier: 9D:A8:D4:67:AE:84:F3:D7:2A:6B:8A:E6:BA:3A:C0:D6:FE:22:B2:18 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 1431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1429 Signing time: Fri 04 Jul 2025 17:11:43 +0000 Manifest this update: Fri 04 Jul 2025 17:11:42 +0000 Manifest next update: Fri 11 Jul 2025 17:11:42 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: MKFVh3WExxQxajspH70QzRzWC89fZunSBIf8k5g7lOk=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5169 (0x1431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Jul 4 17:11:42 2025 GMT Not After : Jul 11 17:11:42 2025 GMT Subject: CN=68680b4e-a761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:fa:6b:79:89:a9:6a:ea:ff:0b:ed:28:05: f7:dc:50:af:5a:b1:1c:21:a8:1c:7d:02:c7:f8:e8: cf:6a:61:5a:fc:40:94:9b:1b:d2:b4:8c:aa:6d:94: a6:8f:55:20:51:65:2c:d1:4c:90:91:a6:55:72:08: bf:14:11:e0:cc:13:72:ef:8f:7c:45:0b:0c:1e:29: d0:21:e2:84:11:f7:c2:21:fb:89:c2:f2:8a:b1:57: f4:ac:d2:84:39:a1:8a:f6:3c:07:f8:48:4a:d5:0a: 26:a1:91:fc:f0:68:69:ab:5b:ab:a1:8b:ac:4b:9b: c5:98:9a:f3:d0:3f:9c:f2:37:a3:e4:f6:2f:d1:a4: 9a:36:cf:a2:df:d1:82:f6:c1:08:39:cc:64:e9:3d: 1c:8a:be:0f:fa:14:20:97:68:77:44:24:1d:50:10: 62:f1:eb:e1:c2:89:c8:38:0d:9d:64:ba:60:48:e8: c7:18:e2:f5:3d:c3:6d:76:17:a4:76:d1:a6:30:b5: db:0b:b5:4a:42:22:ee:30:af:f4:9d:03:83:c3:06: b3:e3:90:92:7a:47:17:77:91:3f:9d:90:a9:c9:ba: c4:27:31:9e:72:f6:f9:a5:31:16:b0:82:49:71:79: 69:2e:7b:a3:eb:de:c7:e1:ca:9e:02:35:f7:37:83: 38:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:D4:67:AE:84:F3:D7:2A:6B:8A:E6:BA:3A:C0:D6:FE:22:B2:18 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b6:94:df:9e:fa:2c:b2:6d:e5:d4:72:44:e9:0e:c9:76:f7: c9:58:f8:a0:11:6b:6d:19:d8:b1:07:6d:d5:23:b6:67:1c:4a: cc:79:c5:b3:48:f3:d6:58:14:08:0b:34:d7:e5:e8:af:8a:77: 36:c5:6b:92:52:91:17:65:ef:ae:48:fd:a7:33:30:eb:f5:19: 3b:47:99:dd:20:f0:87:d5:a6:ef:cf:0c:a2:47:b1:6b:cf:49: 17:92:2d:00:14:27:40:72:36:eb:9b:13:f5:9b:54:b8:ab:28: 3f:a3:5e:47:2f:46:52:d0:3f:37:1d:2d:7e:b3:85:66:80:9f: be:62:75:f6:fb:1b:94:22:05:9c:7d:1f:e0:8c:a5:ae:c3:64: 5f:92:0f:d9:a1:f3:d1:40:8c:09:f7:b7:54:b8:b1:2c:55:a7: ef:56:73:ca:f3:7a:5f:48:20:2c:20:c9:cc:4c:3c:32:c6:05: 17:49:39:07:80:40:b8:80:51:b5:a4:b4:50:d9:1b:fe:17:17: bb:72:92:d9:7e:38:c9:e5:77:57:54:b0:02:77:16:1d:8f:87: c0:53:6b:60:aa:90:a4:d8:35:87:d6:48:26:b7:0e:34:ec:d7: 36:a4:ee:d6:64:a1:a0:1b:ad:cc:ab:8f:98:02:fa:bd:ce:ce: 69:7b:91:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNzA0MTcxMTQyWhcNMjUwNzExMTcxMTQyWjAYMRYwFAYD VQQDEw02ODY4MGI0ZS1hNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dT6a3mJqWrq/wvtKAX33FCvWrEcIagcfQLH+OjPamFa/ECUmxvStIyqbZSm j1UgUWUs0UyQkaZVcgi/FBHgzBNy7498RQsMHinQIeKEEffCIfuJwvKKsVf0rNKE OaGK9jwH+EhK1QomoZH88Ghpq1uroYusS5vFmJrz0D+c8jej5PYv0aSaNs+i39GC 9sEIOcxk6T0cir4P+hQgl2h3RCQdUBBi8evhwonIOA2dZLpgSOjHGOL1PcNtdhek dtGmMLXbC7VKQiLuMK/0nQODwwaz45CSekcXd5E/nZCpybrEJzGecvb5pTEWsIJJ cXlpLnuj697H4cqeAjX3N4M4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2o1Geu hPPXKmuK5ro6wNb+IrIYMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCntpTfnvossm3l1HJE6Q7JdvfJWPigEWttGdixB23VI7ZnHErMecWz SPPWWBQICzTX5eivinc2xWuSUpEXZe+uSP2nMzDr9Rk7R5ndIPCH1abvzwyiR7Fr z0kXki0AFCdAcjbrmxP1m1S4qyg/o15HL0ZS0D83HS1+s4VmgJ++YnX2+xuUIgWc fR/gjKWuw2Rfkg/ZofPRQIwJ97dUuLEsVafvVnPK83pfSCAsIMnMTDwyxgUXSTkH gEC4gFG1pLRQ2Rv+Fxe7cpLZfjjJ5XdXVLACdxYdj4fAU2tgqpCk2DWH1kgmtw40 7Nc2pO7WZKGgG63Mq4+YAvq9zs5pe5HM -----END CERTIFICATE-----Generated at Sat Jul 5 03:40:59 2025 by rpki-client