$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft File: NmIvmQC0aq380FRk8Q1CsTBiUXY.mft (raw, json) Hash identifier: xi6i54Dj2ljIDytHgrjfFpO5ly0JuCQFEVYOfN3tv0E= Subject key identifier: 9C:F6:D7:82:A0:D4:57:72:81:F4:F1:87:44:E1:B8:7C:30:DB:67:0E Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:15:26 +0000 Manifest this update: Sat 23 Aug 2025 08:15:25 +0000 Manifest next update: Sat 30 Aug 2025 08:15:25 +0000 Files and hashes: 1: NmIvmQC0aq380FRk8Q1CsTBiUXY.crl (hash: WJ7mo1wVP/Ax0EJfFExlZo1kAqwGecSwuEfiUDSTkJw=) 2: 2518C04062E011F08D04F42EC4F9AE02.roa (hash: YXoQ9r4tej6CnG1FdK26UeZMqNkqakqvZSbUkeab5Z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Aug 23 08:15:25 2025 GMT Not After : Aug 30 08:15:25 2025 GMT Subject: CN=68a9789d-e518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:35:4c:56:3f:60:a2:50:6e:4a:6b:41:b8: 01:7a:31:70:9a:e7:aa:d3:df:d1:b7:80:7f:db:02: 6f:2f:b9:bc:dd:8f:99:03:ee:2f:b7:8f:19:31:3f: 0c:d8:ca:8a:14:87:17:bc:1a:b3:f0:6e:18:ea:bf: 38:56:fb:b2:ed:44:aa:a3:bd:45:59:51:9e:ed:da: 32:ea:82:91:6a:e6:81:db:3d:26:5e:d3:01:b2:a6: 83:09:01:19:81:0c:93:bf:d5:14:66:ae:77:84:1b: 1a:5b:1c:89:16:3c:06:38:73:ab:0b:8d:48:00:1e: ab:f1:e2:9b:5f:1e:5b:ba:60:11:37:4e:49:11:7c: de:aa:0a:e9:59:ef:62:61:a9:e1:64:2e:67:25:c4: 1b:ed:a3:d3:5d:7a:7d:1f:20:96:a1:c2:7c:f5:70: ec:89:06:60:44:a0:ee:30:e0:4e:3f:6b:eb:ee:92: 2e:9d:df:ce:f6:16:46:4f:6d:e9:da:4c:13:97:d2: 73:50:53:5e:40:57:89:55:6c:be:a1:c1:47:5c:ca: 9b:94:91:a4:e5:b6:c2:83:4a:3a:be:3d:61:cf:d5: 31:41:4b:2c:f0:cc:e7:70:7a:30:3d:f6:26:7a:ee: 44:df:83:be:2c:a3:93:fe:d3:22:67:39:c1:35:fd: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:D7:82:A0:D4:57:72:81:F4:F1:87:44:E1:B8:7C:30:DB:67:0E X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ac:85:7f:bf:85:d5:da:c8:58:dc:a1:5b:ce:3a:80:58:e4: d6:e4:c6:57:05:9a:cc:59:8f:43:35:1e:bc:1b:49:7e:45:64: ec:ec:f8:28:76:a8:d8:19:e2:b4:1e:d8:90:bb:50:e2:a5:de: d7:3c:c4:2d:06:7d:c4:48:6d:22:75:2c:b0:1a:a7:be:e9:26: ca:0a:57:d7:b8:f7:dc:36:ab:0b:0f:29:40:46:ef:be:a8:2a: 31:3d:18:c6:60:55:6d:a7:59:ff:76:de:98:49:72:8b:a5:ca: 72:54:4b:e6:c9:d7:09:38:db:9d:b4:15:3a:68:96:a3:f1:60: 8d:1f:c6:0a:16:50:2d:0f:22:06:09:a0:00:dc:86:71:3f:7f: 4e:59:56:0f:4c:30:ec:90:39:53:5a:59:e5:d6:fa:88:34:11: 90:82:c0:c9:3f:1b:db:1c:ed:00:e5:9b:b4:92:f5:c7:9d:b7: 92:00:03:6d:a8:50:44:fa:5c:57:50:7f:62:9b:d4:48:64:21: 13:b3:a6:f3:c6:d9:7f:e9:62:d9:e2:d3:91:fa:9c:26:2b:02: 71:f8:84:b8:2f:c7:97:91:e1:1a:83:f5:88:6c:16:09:13:a9: c9:ff:c4:93:b1:a0:20:0a:c5:85:bf:98:3a:50:bd:cc:69:79: 4e:24:4a:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMzY2MjJGOTkwMEI0NkFBREZDRDA1NDY0RjEwRDQyQjEz MDYyNTE3NjAeFw0yNTA4MjMwODE1MjVaFw0yNTA4MzAwODE1MjVaMBgxFjAUBgNV BAMTDTY4YTk3ODlkLWU1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCenDVMVj9golBuSmtBuAF6MXCa56rT39G3gH/bAm8vubzdj5kD7i+3jxkxPwzY yooUhxe8GrPwbhjqvzhW+7LtRKqjvUVZUZ7t2jLqgpFq5oHbPSZe0wGypoMJARmB DJO/1RRmrneEGxpbHIkWPAY4c6sLjUgAHqvx4ptfHlu6YBE3TkkRfN6qCulZ72Jh qeFkLmclxBvto9Nden0fIJahwnz1cOyJBmBEoO4w4E4/a+vuki6d3872FkZPbena TBOX0nNQU15AV4lVbL6hwUdcypuUkaTltsKDSjq+PWHP1TFBSyzwzOdwejA99iZ6 7kTfg74so5P+0yJnOcE1/X/zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnPbXgqDU V3KB9PGHROG4fDDbZw4wHwYDVR0jBBgwFoAUNmIvmQC0aq380FRk8Q1CsTBiUXYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0I1NDhEQkUyNjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVY WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTm1Jdm1RQzBhcTM4MEZSazhRMUNzVEJpVVhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD RTFEL0I1NDhEQkUyNjJERjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEz ODBGUms4UTFDc1RCaVVYWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWshX+/hdXayFjcoVvOOoBY5NbkxlcFmsxZj0M1HrwbSX5FZOzs+Ch2 qNgZ4rQe2JC7UOKl3tc8xC0GfcRIbSJ1LLAap77pJsoKV9e499w2qwsPKUBG776o KjE9GMZgVW2nWf923phJcoulynJUS+bJ1wk42520FTpolqPxYI0fxgoWUC0PIgYJ oADchnE/f05ZVg9MMOyQOVNaWeXW+og0EZCCwMk/G9sc7QDlm7SS9cedt5IAA22o UET6XFdQf2Kb1EhkIROzpvPG2X/pYtni05H6nCYrAnH4hLgvx5eR4RqD9YhsFgkT qcn/xJOxoCAKxYW/mDpQvcxpeU4kSt4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:22 2025 by rpki-client