$ rpki-client -vvf rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft File: n0mgwprfTYMDB3M9LGCp2TEQogg.mft (raw, json) Hash identifier: pa4X6ywDYGl9GnF0j/JbMySoc0MDnLj/OjVt4PLY9a8= Subject key identifier: 9D:96:48:BC:8E:D7:94:DB:4D:2A:E9:AC:7F:00:D0:7D:C0:21:BE:48 Authority key identifier: 9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 Certificate issuer: /CN=A919B393/serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Certificate serial: 0246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft Manifest number: 0243 Signing time: Sat 23 Aug 2025 02:04:12 +0000 Manifest this update: Sat 23 Aug 2025 02:04:11 +0000 Manifest next update: Sat 30 Aug 2025 02:04:11 +0000 Files and hashes: 1: n0mgwprfTYMDB3M9LGCp2TEQogg.crl (hash: 0toWsxbkC8GqtbjJMawhJtVMpsHGQ9NVbH3J8/tnvxg=) 2: 38F69014325B11ED8403A325C4F9AE02.roa (hash: xPxOBcWiHSTAw3zQ7FKJslNCxgd0Xv3rmMHCdbL8JBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 582 (0x246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B393, serialNumber=9F49A0C29ADF4D830307733D2C60A9D93110A208 Validity Not Before: Aug 23 02:04:11 2025 GMT Not After : Aug 30 02:04:11 2025 GMT Subject: CN=68a9219b-fb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:2b:e0:43:2e:92:35:ad:13:58:7a:ec:54: 75:c0:85:60:f5:55:37:3a:10:da:41:75:98:c9:f9: 14:d9:ad:98:ba:7d:64:2c:d0:90:10:02:6f:14:64: c6:51:af:56:36:73:1d:b1:7a:ca:04:64:ed:b8:3a: 03:01:90:32:fb:68:03:ac:f7:97:52:5c:32:76:14: c8:37:aa:5f:1f:8e:e3:ea:49:dd:6c:e7:2c:fc:09: d2:ca:be:ba:31:61:40:9a:b4:75:7c:d2:04:40:f8: ab:88:a6:e8:94:d8:40:3e:e0:3a:84:77:07:4d:bb: 41:d2:55:a4:91:30:6c:bc:8a:b2:0b:ae:bf:f8:ff: fa:de:ce:cc:cd:d5:ee:bc:6c:8a:9f:c2:71:d1:d1: d2:a4:24:c2:b3:0a:2c:51:04:e4:88:6d:fa:f1:b5: 32:eb:78:ef:48:67:5a:b5:a4:6b:00:68:6c:fe:44: b8:b5:70:87:5a:63:fe:a1:73:58:43:a7:20:5d:99: 3a:dc:0b:f9:f1:11:ab:99:68:78:45:6a:73:75:30: 75:51:80:f4:12:be:4c:27:07:db:14:2f:53:3b:fa: 11:18:77:ff:97:c0:e1:e0:c6:76:96:73:a6:96:b4: 35:bd:f1:c2:97:45:13:d5:e7:15:68:e8:8d:a4:af: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:96:48:BC:8E:D7:94:DB:4D:2A:E9:AC:7F:00:D0:7D:C0:21:BE:48 X509v3 Authority Key Identifier: keyid:9F:49:A0:C2:9A:DF:4D:83:03:07:73:3D:2C:60:A9:D9:31:10:A2:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0mgwprfTYMDB3M9LGCp2TEQogg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B393/326CBD58325711EDB88DFC2CC4F9AE02/n0mgwprfTYMDB3M9LGCp2TEQogg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:49:99:00:eb:d6:ca:8d:2b:75:43:98:e6:1e:d9:da:44:21: 35:7e:55:47:b8:57:51:4a:9d:1b:6f:5c:c2:03:92:29:5f:b6: d9:40:af:b6:df:58:69:b1:18:22:b0:eb:96:ca:8c:5e:6b:b9: 34:be:9e:01:6c:bf:9e:78:fd:5a:c5:b8:38:b3:e0:45:fe:f1: df:a6:6a:f9:3e:a0:70:cc:4f:db:25:4c:6f:6b:98:24:07:00: 1d:8f:8e:05:a5:26:96:26:67:a5:04:14:ea:09:48:26:ae:ae: 62:d7:2f:8e:84:cf:aa:1d:97:a6:4f:8a:24:c0:cd:fe:f2:59: a2:5a:01:ad:51:00:f5:f7:9a:ff:a1:79:ec:a9:d4:f7:d4:90: c1:31:31:5f:b0:4d:de:d0:33:65:b5:d9:1b:cd:47:a0:20:70: 39:0b:52:8e:f2:db:18:18:df:51:db:b7:3e:00:e7:1b:dd:2f: 9b:01:af:3a:24:4a:cf:33:eb:75:aa:9d:a1:27:45:3c:4e:57: 44:d6:66:7e:7c:e6:dc:98:c6:fa:39:75:ba:34:2c:61:0c:d6: 93:9e:ff:06:a0:d6:9c:53:05:21:d5:46:ab:09:7e:c6:57:99: 53:f9:64:8f:80:ef:cc:cf:58:dc:97:1c:b1:d6:94:bf:01:4b: b6:0f:a3:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzOTMxMTAvBgNVBAUTKDlGNDlBMEMyOUFERjREODMwMzA3NzMzRDJDNjBBOUQ5 MzExMEEyMDgwHhcNMjUwODIzMDIwNDExWhcNMjUwODMwMDIwNDExWjAYMRYwFAYD VQQDEw02OGE5MjE5Yi1mYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zwr4EMukjWtE1h67FR1wIVg9VU3OhDaQXWYyfkU2a2Yun1kLNCQEAJvFGTG Ua9WNnMdsXrKBGTtuDoDAZAy+2gDrPeXUlwydhTIN6pfH47j6kndbOcs/AnSyr66 MWFAmrR1fNIEQPiriKbolNhAPuA6hHcHTbtB0lWkkTBsvIqyC66/+P/63s7MzdXu vGyKn8Jx0dHSpCTCswosUQTkiG368bUy63jvSGdataRrAGhs/kS4tXCHWmP+oXNY Q6cgXZk63Av58RGrmWh4RWpzdTB1UYD0Er5MJwfbFC9TO/oRGHf/l8Dh4MZ2lnOm lrQ1vfHCl0UT1ecVaOiNpK/ZlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2WSLyO 15TbTSrprH8A0H3AIb5IMB8GA1UdIwQYMBaAFJ9JoMKa302DAwdzPSxgqdkxEKII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjM5My8zMjZDQkQ1ODMy NTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZTURCM005TEdDcDJURVFv Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24wbWd3cHJmVFlNREIzTTlMR0NwMlRFUW9nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjM5My8zMjZDQkQ1ODMyNTcxMUVEQjg4REZDMkNDNEY5QUUwMi9uMG1nd3ByZlRZ TURCM005TEdDcDJURVFvZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUSZkA69bKjSt1Q5jmHtnaRCE1flVHuFdRSp0bb1zCA5IpX7bZQK+2 31hpsRgisOuWyoxea7k0vp4BbL+eeP1axbg4s+BF/vHfpmr5PqBwzE/bJUxva5gk BwAdj44FpSaWJmelBBTqCUgmrq5i1y+OhM+qHZemT4okwM3+8lmiWgGtUQD195r/ oXnsqdT31JDBMTFfsE3e0DNltdkbzUegIHA5C1KO8tsYGN9R27c+AOcb3S+bAa86 JErPM+t1qp2hJ0U8TldE1mZ+fObcmMb6OXW6NCxhDNaTnv8GoNacUwUh1UarCX7G V5lT+WSPgO/Mz1jclxyx1pS/AUu2D6PG -----END CERTIFICATE-----Generated at Sat Aug 23 07:10:28 2025 by rpki-client