$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft File: N1NyjlTwmkhRPf_S-nGARBH82yA.mft (raw, json) Hash identifier: moDw6JecrSqQl9EoMkGrT/NZNHA+VrtMMQIe32NONao= Subject key identifier: C2:39:36:61:43:CC:5E:0F:D4:B7:9B:23:D0:B1:C2:6C:A2:ED:41:BC Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft Manifest number: 0CA7 Signing time: Fri 22 Aug 2025 18:19:22 +0000 Manifest this update: Fri 22 Aug 2025 18:19:21 +0000 Manifest next update: Fri 29 Aug 2025 18:19:21 +0000 Files and hashes: 1: N1NyjlTwmkhRPf_S-nGARBH82yA.crl (hash: hRtOgsyKCSryaBFN+N9ebvCSawHSmKk5FhwhIO4UEtA=) 2: CA39F7F0FB6311E999847F4DC4F9AE02.roa (hash: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=) 3: B647F704090C11EFB666C967C4F9AE02.roa (hash: C/GK3qZr1DIfgcq87pT0/h+xz6IT2+9Jo03Tvm4UR1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20 Validity Not Before: Aug 22 18:19:21 2025 GMT Not After : Aug 29 18:19:21 2025 GMT Subject: CN=68a8b4a9-d461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:3c:80:0c:ef:7e:10:23:8b:dd:33:02:5f: d4:61:9a:f3:f2:94:55:2b:21:69:0f:4c:ed:a1:b0: 76:c2:f0:57:d1:64:c6:ee:03:82:0c:64:7a:89:27: f7:d9:68:6d:ef:71:54:c0:7f:9c:b8:0d:d5:92:9c: 30:f4:a8:2a:85:58:aa:b5:9f:c4:bf:61:7d:9d:38: 3e:19:0e:78:6a:d8:88:4b:aa:07:52:c0:10:2f:8a: cd:ac:5b:b7:b1:f1:ab:9f:68:71:2e:c7:8f:98:31: 46:8a:d3:da:29:d4:92:9f:e5:b9:39:ca:f9:ba:28: c2:11:92:a6:9b:02:2a:6d:14:80:da:26:29:8e:16: 05:cd:47:43:8e:e2:4f:95:76:16:d2:1e:65:bd:e5: 40:90:ef:9d:b8:74:25:7a:b9:f5:6a:ed:f2:9b:c2: cd:16:a0:36:7d:52:5e:38:ef:03:7d:f8:0d:d3:2e: 53:35:20:86:f0:cf:f6:19:08:2c:07:58:ac:de:b5: b3:0e:a8:78:18:66:7c:55:6a:43:e3:b6:c3:0e:60: 2a:d7:e9:d4:2b:a1:76:74:f4:05:23:77:60:c8:81: 20:ce:5b:20:b3:cf:e1:94:07:6a:5c:af:d7:c2:db: 0e:6e:d8:0c:48:9d:eb:1d:00:92:44:56:a0:e3:d1: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:39:36:61:43:CC:5E:0F:D4:B7:9B:23:D0:B1:C2:6C:A2:ED:41:BC X509v3 Authority Key Identifier: keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c8:39:43:52:94:2e:e2:84:18:6d:93:ce:2e:bd:3d:d6:4d: d6:9d:e3:3e:56:40:35:f6:d8:86:2e:8f:56:4e:ed:38:ca:7b: dc:c7:56:ff:e1:9b:67:b3:15:c6:e7:8c:2e:d3:48:06:28:42: af:fe:9c:d6:fe:20:bc:39:39:a5:73:3e:30:9e:87:5e:f7:79: b9:da:b2:0f:d9:db:ca:4e:fd:a5:f5:9e:b9:ea:b8:06:ec:06: b7:77:65:b1:0e:e9:f9:20:b8:be:f7:68:fc:77:8d:2f:40:42: 6a:26:cb:52:69:4c:4d:73:62:e2:7f:f9:d4:75:46:b1:2f:52: 99:bc:3a:9f:86:f6:c8:0d:ee:3a:4a:5a:e6:66:c2:45:33:96: ae:39:d1:59:62:8a:a9:b1:47:29:0b:54:f4:40:e2:c4:33:02: 22:78:9c:7c:b8:46:7c:19:5e:63:8e:dc:af:8f:c8:73:1c:7d: 33:dc:de:ee:1a:ed:78:ea:90:fc:4a:ba:94:9c:bc:79:88:c9: 1f:8e:e4:98:eb:8e:cd:59:3a:0e:00:62:75:66:d3:43:06:5f: 52:ad:73:b4:f5:79:9a:de:78:c5:17:a0:18:61:db:3b:bd:c9: e8:51:6c:3e:63:6c:13:b9:8d:ff:66:d5:87:d2:3f:f8:dc:85: 7a:e3:e7:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2QkIxMTAvBgNVBAUTKDM3NTM3MjhFNTRGMDlBNDg1MTNERkZEMkZBNzE4MDQ0 MTFGQ0RCMjAwHhcNMjUwODIyMTgxOTIxWhcNMjUwODI5MTgxOTIxWjAYMRYwFAYD VQQDEw02OGE4YjRhOS1kNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC48gAzvfhAji90zAl/UYZrz8pRVKyFpD0ztobB2wvBX0WTG7gOCDGR6iSf3 2Wht73FUwH+cuA3Vkpww9KgqhViqtZ/Ev2F9nTg+GQ54atiIS6oHUsAQL4rNrFu3 sfGrn2hxLsePmDFGitPaKdSSn+W5Ocr5uijCEZKmmwIqbRSA2iYpjhYFzUdDjuJP lXYW0h5lveVAkO+duHQlern1au3ym8LNFqA2fVJeOO8DffgN0y5TNSCG8M/2GQgs B1is3rWzDqh4GGZ8VWpD47bDDmAq1+nUK6F2dPQFI3dgyIEgzlsgs8/hlAdqXK/X wtsObtgMSJ3rHQCSRFag49EVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI5NmFD zF4P1LebI9Cxwmyi7UG8MB8GA1UdIwQYMBaAFDdTco5U8JpIUT3/0vpxgEQR/Nsg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZCQi8zQUIwRjc2QUZC NjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21raFJQZl9TLW5HQVJCSDgy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04xTnlqbFR3bWtoUlBmX1MtbkdBUkJIODJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZCQi8zQUIwRjc2QUZCNjIxMUU5QTgyQjM5NEFDNEY5QUUwMi9OMU55amxUd21r aFJQZl9TLW5HQVJCSDgyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXyDlDUpQu4oQYbZPOLr091k3WneM+VkA19tiGLo9WTu04ynvcx1b/ 4ZtnsxXG54wu00gGKEKv/pzW/iC8OTmlcz4wnode93m52rIP2dvKTv2l9Z656rgG 7Aa3d2WxDun5ILi+92j8d40vQEJqJstSaUxNc2Lif/nUdUaxL1KZvDqfhvbIDe46 SlrmZsJFM5auOdFZYoqpsUcpC1T0QOLEMwIieJx8uEZ8GV5jjtyvj8hzHH0z3N7u Gu146pD8SrqUnLx5iMkfjuSY647NWToOAGJ1ZtNDBl9SrXO09Xma3njFF6AYYds7 vcnoUWw+Y2wTuY3/ZtWH0j/43IV64+fR -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:32 2025 by rpki-client