$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft File: m0_NHtBqHkuhxL6fHRCylF6SjBk.mft (raw, json) Hash identifier: XF6atVHIWWPPl4WReuANJEY8l6ZS9a/8I3UwIHHcMDw= Subject key identifier: 1D:EB:21:8C:85:5C:70:8B:77:B7:78:66:A2:ED:99:A0:9A:17:DD:1C Authority key identifier: 9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 Certificate issuer: /CN=A9196780/serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft Manifest number: 20 Signing time: Sat 23 Aug 2025 08:05:35 +0000 Manifest this update: Sat 23 Aug 2025 08:05:35 +0000 Manifest next update: Sat 30 Aug 2025 08:05:35 +0000 Files and hashes: 1: m0_NHtBqHkuhxL6fHRCylF6SjBk.crl (hash: ndEgI4OL5JUHPaH6Bg14dulx9rgTP9uPjzSruwughk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9B4FCD1ED06A1E4BA1C4BE9F1D10B2945E928C19 Validity Not Before: Aug 23 08:05:35 2025 GMT Not After : Aug 30 08:05:35 2025 GMT Subject: CN=68a9764f-b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:4f:0c:44:fc:09:b5:0e:44:ac:c1:24:c1: 5a:4e:0d:83:1c:1e:36:37:1d:1b:a2:51:d5:56:68: c4:cb:99:df:d4:b7:fc:21:1f:8a:5d:97:34:64:ec: 4b:aa:f2:bb:ed:1b:1f:75:a6:06:f4:11:83:84:a2: 3d:c0:64:66:a3:26:86:ed:a2:19:e6:86:11:5f:36: 8b:33:62:bc:9c:63:e3:9e:6e:96:48:bb:13:39:0d: 5e:c3:dc:76:c0:74:10:3f:ab:b0:9e:97:2f:ba:d3: f5:fc:52:28:64:2f:a0:c0:00:a2:99:9f:ca:3c:fd: 79:79:aa:77:4e:c2:ed:24:c0:34:e6:02:7c:2f:00: 7c:ce:69:05:87:42:3c:a0:3f:38:fb:60:c5:6e:5e: 2c:44:f9:d0:9a:fe:7c:49:01:f6:e9:14:5e:6e:d7: c9:2f:1a:8b:99:2b:f6:f8:bd:3d:e4:bd:ea:7a:54: 1c:5b:fa:c3:71:9e:06:2d:aa:77:d8:20:07:68:b8: ef:05:a0:56:5c:0b:68:25:39:63:0b:47:32:65:3f: fe:13:c2:9c:18:0c:cc:53:c9:78:cf:86:ca:bf:9e: 97:22:cf:a1:ac:97:cf:0f:6d:e9:aa:68:50:d2:b1: cc:fa:32:56:70:31:32:92:62:41:a3:4d:e5:9a:ec: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EB:21:8C:85:5C:70:8B:77:B7:78:66:A2:ED:99:A0:9A:17:DD:1C X509v3 Authority Key Identifier: keyid:9B:4F:CD:1E:D0:6A:1E:4B:A1:C4:BE:9F:1D:10:B2:94:5E:92:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0_NHtBqHkuhxL6fHRCylF6SjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/EF17C3D6525B11F0A8362240C4F9AE02/m0_NHtBqHkuhxL6fHRCylF6SjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:14:10:e6:0c:5c:e6:91:4d:b2:0d:76:56:8c:64:77:f8:ad: 4d:db:a6:81:ff:bf:bd:a8:25:a9:00:5c:10:55:67:ed:f6:8d: fb:5f:18:8f:24:81:cf:6b:87:5f:b9:74:fe:86:10:2e:3b:d6: 51:fe:86:be:90:94:58:85:2b:12:63:e7:8b:fe:d0:d6:7d:5e: ca:03:7c:3f:63:30:0d:7d:52:fd:5a:a1:1c:69:b0:3b:41:e8: 2e:25:ce:be:f7:dd:95:1c:f5:3d:ef:40:f6:54:fc:cd:c3:3e: b9:0b:76:c5:7e:e1:d9:42:0b:25:1a:87:3f:4a:c4:7f:f7:35: 37:ee:25:68:3d:de:42:f7:26:e9:52:ad:2a:3e:36:54:84:fa: 3a:36:9e:18:d0:69:0b:a1:b9:ee:37:e1:4d:27:25:b9:0d:ec: 3f:15:c7:b4:4c:06:09:bc:fc:63:0f:c2:c6:36:4d:1b:6d:a3: 2f:0d:b0:c4:5f:d6:9c:a4:a1:92:5c:3a:66:0a:85:38:fb:d7: e6:f3:82:e4:cd:a8:03:bc:ef:40:73:fa:6d:0f:a1:42:8c:7c: ea:57:59:47:00:ee:8e:0e:79:ff:5f:41:62:28:74:bc:ee:5a: f4:5d:f2:fc:b2:8b:8e:f8:e1:86:8d:3c:be:15:19:e7:4a:f2: 98:34:e6:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUI0RkNEMUVEMDZBMUU0QkExQzRCRTlGMUQxMEIyOTQ1 RTkyOEMxOTAeFw0yNTA4MjMwODA1MzVaFw0yNTA4MzAwODA1MzVaMBgxFjAUBgNV BAMTDTY4YTk3NjRmLWI2ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpUk8MRPwJtQ5ErMEkwVpODYMcHjY3HRuiUdVWaMTLmd/Ut/whH4pdlzRk7Euq 8rvtGx91pgb0EYOEoj3AZGajJobtohnmhhFfNoszYrycY+OebpZIuxM5DV7D3HbA dBA/q7Cely+60/X8UihkL6DAAKKZn8o8/Xl5qndOwu0kwDTmAnwvAHzOaQWHQjyg Pzj7YMVuXixE+dCa/nxJAfbpFF5u18kvGouZK/b4vT3kvep6VBxb+sNxngYtqnfY IAdouO8FoFZcC2glOWMLRzJlP/4TwpwYDMxTyXjPhsq/npciz6Gsl88PbemqaFDS scz6MlZwMTKSYkGjTeWa7FoRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHeshjIVc cIt3t3hmou2ZoJoX3RwwHwYDVR0jBBgwFoAUm0/NHtBqHkuhxL6fHRCylF6SjBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0VGMTdDM0Q2NTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1aHhMNmZIUkN5bEY2U2pC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTBfTkh0QnFIa3VoeEw2ZkhSQ3lsRjZTakJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0VGMTdDM0Q2NTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL20wX05IdEJxSGt1 aHhMNmZIUkN5bEY2U2pCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkUEOYMXOaRTbINdlaMZHf4rU3bpoH/v72oJakAXBBVZ+32jftfGI8k gc9rh1+5dP6GEC471lH+hr6QlFiFKxJj54v+0NZ9XsoDfD9jMA19Uv1aoRxpsDtB 6C4lzr733ZUc9T3vQPZU/M3DPrkLdsV+4dlCCyUahz9KxH/3NTfuJWg93kL3JulS rSo+NlSE+jo2nhjQaQuhue434U0nJbkN7D8Vx7RMBgm8/GMPwsY2TRttoy8NsMRf 1pykoZJcOmYKhTj71+bzguTNqAO870Bz+m0PoUKMfOpXWUcA7o4Oef9fQWIodLzu WvRd8vyyi4744YaNPL4VGedK8pg05pU= -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:24 2025 by rpki-client