$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: 7HqAiKsKQ7qezLg+C1s78JePs3tBCTbWUUNPyHj/glA= Subject key identifier: A4:29:44:D7:D6:96:97:CB:1D:DB:AF:E6:8D:EF:02:C8:34:43:2E:C4 Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 144A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1442 Signing time: Fri 22 Aug 2025 17:02:16 +0000 Manifest this update: Fri 22 Aug 2025 17:02:16 +0000 Manifest next update: Fri 29 Aug 2025 17:02:16 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: DtqI4nZ1M+IuFaXmMl34F4J66YzhoBWfckf+230BAbo=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: IY1KR2STRHWACxUYvedIZffoCYQxTjZXanC5kAZHVDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5194 (0x144a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Aug 22 17:02:16 2025 GMT Not After : Aug 29 17:02:16 2025 GMT Subject: CN=68a8a298-67b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:16:f8:3b:1b:37:c7:65:df:7a:bf:33:af: fa:8d:50:eb:22:ec:8f:19:11:59:85:dd:b1:9e:ae: 8a:3e:78:62:1a:b4:d7:04:d2:64:e4:82:1d:9c:3b: 05:06:e5:7a:b7:e6:e8:25:30:85:48:f1:d3:e3:51: 45:b6:0c:ab:a8:ea:05:a0:45:49:90:7e:87:e4:4f: 42:b5:e6:ff:e6:2f:ce:61:10:1c:c0:87:55:66:21: 93:b0:06:5b:f7:e9:16:79:ba:12:06:23:2f:a2:4f: 49:76:17:26:68:d0:7b:54:0e:8f:f9:36:18:14:ac: 81:4e:ad:67:45:36:88:10:dc:c3:31:d9:57:97:e4: e9:3f:b5:94:06:6c:21:02:78:2f:57:62:fa:73:2f: 09:5c:a8:8a:36:f4:e0:d0:89:05:fa:bf:05:6a:3a: 60:a6:73:30:49:f3:42:79:e8:28:f9:02:65:d9:92: d9:97:d6:ad:20:59:cf:43:17:70:26:a2:f1:93:d0: a7:fd:41:6b:e5:a6:d8:7f:9a:66:15:10:c2:18:7d: 68:06:2b:96:0c:c0:80:15:96:a9:55:96:90:30:81: 58:29:27:c2:dc:f7:85:cd:4f:c4:c9:9c:84:05:df: 76:dd:b3:9e:6b:dc:bb:e8:ed:7b:ad:59:31:38:ab: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:29:44:D7:D6:96:97:CB:1D:DB:AF:E6:8D:EF:02:C8:34:43:2E:C4 X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4e:83:36:51:2b:3e:ce:1b:aa:84:33:47:5c:df:d8:97:66: 06:27:d3:90:50:25:11:8f:68:ef:9a:8f:16:82:4e:0f:81:fd: 04:ee:49:a7:01:f0:ce:66:b4:cb:af:1f:99:71:cb:ee:dd:82: f7:d7:4d:58:8b:dd:0a:47:d0:6e:4b:72:7c:eb:b9:cb:87:2b: dc:67:32:d6:99:a8:84:5a:0a:bb:8c:e0:63:7e:07:54:b2:5a: 46:5e:3e:87:21:88:fe:2a:ff:85:22:34:58:e9:b7:53:77:78: 20:62:04:ec:2e:cb:65:27:d8:c3:6b:4d:a5:61:21:a6:46:45: 5a:f7:1e:2e:73:12:6f:1b:6d:87:5f:d1:25:9a:2d:38:82:95: 4e:b9:6e:50:09:a3:25:1b:c2:a7:da:93:c8:f5:b0:78:14:1d: 5b:43:77:2a:ca:ea:d7:3e:c8:b9:e6:14:1c:d5:eb:01:9a:ff: 2b:40:59:23:72:05:30:11:1b:ca:34:04:11:b0:5a:b1:bb:34: 6a:ef:aa:7b:fd:cf:8e:73:b0:32:88:78:2a:28:45:7f:ea:78: 02:25:6b:61:53:12:68:04:f3:3f:08:18:d7:c9:23:73:5f:91: 20:fe:cf:13:80:61:6a:28:60:56:e5:83:5b:52:32:62:67:ca: 1f:9d:c7:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwODIyMTcwMjE2WhcNMjUwODI5MTcwMjE2WjAYMRYwFAYD VQQDEw02OGE4YTI5OC02N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1MW+DsbN8dl33q/M6/6jVDrIuyPGRFZhd2xnq6KPnhiGrTXBNJk5IIdnDsF BuV6t+boJTCFSPHT41FFtgyrqOoFoEVJkH6H5E9Cteb/5i/OYRAcwIdVZiGTsAZb 9+kWeboSBiMvok9JdhcmaNB7VA6P+TYYFKyBTq1nRTaIENzDMdlXl+TpP7WUBmwh AngvV2L6cy8JXKiKNvTg0IkF+r8FajpgpnMwSfNCeego+QJl2ZLZl9atIFnPQxdw JqLxk9Cn/UFr5abYf5pmFRDCGH1oBiuWDMCAFZapVZaQMIFYKSfC3PeFzU/EyZyE Bd923bOea9y76O17rVkxOKtX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQpRNfW lpfLHduv5o3vAsg0Qy7EMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPToM2USs+zhuqhDNHXN/Yl2YGJ9OQUCURj2jvmo8Wgk4Pgf0E7kmn AfDOZrTLrx+Zccvu3YL3101Yi90KR9BuS3J867nLhyvcZzLWmaiEWgq7jOBjfgdU slpGXj6HIYj+Kv+FIjRY6bdTd3ggYgTsLstlJ9jDa02lYSGmRkVa9x4ucxJvG22H X9Elmi04gpVOuW5QCaMlG8Kn2pPI9bB4FB1bQ3cqyurXPsi55hQc1esBmv8rQFkj cgUwERvKNAQRsFqxuzRq76p7/c+Oc7AyiHgqKEV/6ngCJWthUxJoBPM/CBjXySNz X5Eg/s8TgGFqKGBW5YNbUjJiZ8ofncex -----END CERTIFICATE-----Generated at Sun Aug 24 00:56:54 2025 by rpki-client