$ rpki-client -vvf rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft File: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft (raw, json) Hash identifier: I+oYOk5uI4r+ES0yW2ADzbX01FAV1MtVMA25w9HQc2k= Subject key identifier: EE:E9:DD:E5:49:D7:C5:5F:A0:72:2A:4A:BE:27:4D:0E:6E:18:07:40 Authority key identifier: 9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 Certificate issuer: /CN=A9197501/serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 01:51:42 +0000 Manifest this update: Sat 23 Aug 2025 01:51:41 +0000 Manifest next update: Sat 30 Aug 2025 01:51:41 +0000 Files and hashes: 1: nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl (hash: V+TnMnYnhaMGZ8dXAVOt3F2zhvGFO3JjA4FOLc5zVZM=) 2: 4742083A534E11F08B7C2047C4F9AE02.roa (hash: b9dQAfi252XHiHpqx6+ZSBhpVRiVzjLuF9TZZF1YFe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197501, serialNumber=9F0AAF2E0AFA3E6F8DAE5A46A7E58CCFFA34C127 Validity Not Before: Aug 23 01:51:41 2025 GMT Not After : Aug 30 01:51:41 2025 GMT Subject: CN=68a91ead-0527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:34:18:8f:1e:8b:2b:b8:d1:13:e0:7a:b9: 4d:5e:04:9a:9d:be:7c:5b:cc:50:64:67:e3:c7:dc: 03:80:4e:06:16:2d:8f:d3:0d:7c:3a:c4:8e:04:c9: f8:1f:99:84:0c:c4:50:9b:b0:df:44:af:bb:8d:54: 72:c4:9b:80:03:ac:30:21:fe:74:f2:fc:e7:49:d8: 32:3f:6e:52:ec:5b:c8:f3:5b:ea:99:bf:25:b0:4b: 20:bc:11:a1:05:3c:3e:17:54:e8:df:52:de:2c:88: b8:c0:e0:0e:da:b8:3f:22:13:d9:6e:57:86:06:db: b9:c4:da:a2:83:93:3d:f2:30:d5:cd:03:ed:a5:91: f5:27:13:0c:0e:3f:df:db:52:b3:83:91:ab:78:42: 4d:76:37:88:06:29:12:db:58:1b:c9:05:37:3c:d2: 64:56:56:93:24:cd:6c:4b:42:e5:70:fd:6e:e5:aa: 10:a1:4f:6d:8d:b8:5c:8f:1b:fa:3d:f2:c9:56:a0: 8e:a2:e6:71:1b:8d:b8:1b:11:c7:e6:69:71:9c:97: b2:36:a4:d4:42:a4:f5:e7:d5:4f:e9:e1:98:10:3f: c7:34:3b:24:8f:5b:6e:a1:b8:11:0c:ff:5a:66:f3: 50:d6:a7:8a:82:b2:19:b0:be:03:35:39:76:ae:7f: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E9:DD:E5:49:D7:C5:5F:A0:72:2A:4A:BE:27:4D:0E:6E:18:07:40 X509v3 Authority Key Identifier: keyid:9F:0A:AF:2E:0A:FA:3E:6F:8D:AE:5A:46:A7:E5:8C:CF:FA:34:C1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197501/99B58BB013DB11ED9304C582C4F9AE02/nwqvLgr6Pm-NrlpGp-WMz_o0wSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:38:27:b4:e0:8d:4c:3d:79:a3:80:d6:33:08:97:7b:e3: 10:1c:21:fa:47:0d:4b:a1:10:18:fd:ee:15:9d:c3:c0:d2:3d: ec:a8:28:5d:22:87:7d:ef:c1:79:d9:8b:95:c8:3d:31:3e:69: 8d:fa:64:c1:58:9d:f8:36:b0:7f:e8:8c:fc:10:a1:a8:50:0e: 20:dc:ae:fb:4b:40:1f:5d:ff:bd:b8:d1:d6:26:68:c2:60:17: 5c:2a:3a:96:50:03:11:f4:5f:2b:b9:47:98:06:2d:99:c0:cf: cc:3e:b1:ed:c8:b5:49:1c:5c:9a:7e:20:b0:98:80:bf:bc:ca: a5:4d:4f:11:2a:f5:b2:f4:43:cd:c8:9a:da:6d:bf:02:5a:a2: 37:38:8b:8a:05:3d:7b:4a:df:0a:21:3c:af:26:a4:60:fd:11: ef:ad:51:26:e4:20:ca:01:e7:44:d0:59:5f:0a:e3:ad:ea:6b: 2c:7d:e0:c4:b5:46:4e:63:a4:98:20:db:f5:cf:39:22:48:31: 5f:09:c2:03:15:92:26:26:84:ab:ce:53:06:07:57:06:63:eb: a4:db:81:70:2c:5b:c4:6e:3a:ba:8e:ea:ba:ad:ac:69:56:1f: d5:56:cc:78:d7:43:53:a0:99:57:6d:1f:39:c6:54:e9:72:39: a2:97:0b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1MDExMTAvBgNVBAUTKDlGMEFBRjJFMEFGQTNFNkY4REFFNUE0NkE3RTU4Q0NG RkEzNEMxMjcwHhcNMjUwODIzMDE1MTQxWhcNMjUwODMwMDE1MTQxWjAYMRYwFAYD VQQDEw02OGE5MWVhZC0wNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ig0GI8eiyu40RPgerlNXgSanb58W8xQZGfjx9wDgE4GFi2P0w18OsSOBMn4 H5mEDMRQm7DfRK+7jVRyxJuAA6wwIf508vznSdgyP25S7FvI81vqmb8lsEsgvBGh BTw+F1To31LeLIi4wOAO2rg/IhPZbleGBtu5xNqig5M98jDVzQPtpZH1JxMMDj/f 21Kzg5GreEJNdjeIBikS21gbyQU3PNJkVlaTJM1sS0LlcP1u5aoQoU9tjbhcjxv6 PfLJVqCOouZxG424GxHH5mlxnJeyNqTUQqT159VP6eGYED/HNDskj1tuobgRDP9a ZvNQ1qeKgrIZsL4DNTl2rn9bMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7p3eVJ 18VfoHIqSr4nTQ5uGAdAMB8GA1UdIwQYMBaAFJ8Kry4K+j5vja5aRqfljM/6NMEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzUwMS85OUI1OEJCMDEz REIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBtLU5ybHBHcC1XTXpfbzB3 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253cXZMZ3I2UG0tTnJscEdwLVdNel9vMHdTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzUwMS85OUI1OEJCMDEzREIxMUVEOTMwNEM1ODJDNEY5QUUwMi9ud3F2TGdyNlBt LU5ybHBHcC1XTXpfbzB3U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdDgntOCNTD15o4DWMwiXe+MQHCH6Rw1LoRAY/e4VncPA0j3sqChd Iod978F52YuVyD0xPmmN+mTBWJ34NrB/6Iz8EKGoUA4g3K77S0AfXf+9uNHWJmjC YBdcKjqWUAMR9F8ruUeYBi2ZwM/MPrHtyLVJHFyafiCwmIC/vMqlTU8RKvWy9EPN yJrabb8CWqI3OIuKBT17St8KITyvJqRg/RHvrVEm5CDKAedE0FlfCuOt6mssfeDE tUZOY6SYINv1zzkiSDFfCcIDFZImJoSrzlMGB1cGY+uk24FwLFvEbjq6juq6raxp Vh/VVsx410NToJlXbR85xlTpcjmilwtq -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:51 2025 by rpki-client