$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft File: nwZsuF9biPgjeA1flmJfQ4VIG78.mft (raw, json) Hash identifier: N05BzRDlMuD9FSn2Ow7eHsjcnzRjTSFvONJmXI09oU8= Subject key identifier: 89:F4:E1:BB:02:29:F3:EE:2D:8B:0B:55:D3:21:D4:23:0D:12:B1:28 Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF Certificate issuer: /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Certificate serial: 075F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft Manifest number: 0752 Signing time: Fri 22 Aug 2025 21:52:21 +0000 Manifest this update: Fri 22 Aug 2025 21:52:21 +0000 Manifest next update: Fri 29 Aug 2025 21:52:21 +0000 Files and hashes: 1: nwZsuF9biPgjeA1flmJfQ4VIG78.crl (hash: FfqA3DsVHgKNU4rqd6vt/NnwIatbcQVpRWejePDxSOo=) 2: 788169BE3AAC11EBBEE1E81AC4F9AE02.roa (hash: t/R4fAlXQzy9ztNMWRdnB87GayGaEVACHRV/q2Z5jVE=) 3: 026A84FC4C3211ECB9639932C4F9AE02.roa (hash: uBkySuw/pyK9tvxApltYqkUVTPyi7oX70MF7KU+NjE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF Validity Not Before: Aug 22 21:52:21 2025 GMT Not After : Aug 29 21:52:21 2025 GMT Subject: CN=68a8e695-f98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:32:3b:b2:f4:92:da:75:3f:30:6b:83:1f:88: c1:e3:16:c8:41:19:e3:94:cf:a6:ab:59:2d:ac:eb: 80:8f:85:0f:2a:25:23:5a:b5:fe:8b:56:f4:bd:1c: cc:47:80:83:37:d1:8b:69:d2:4f:cb:5f:99:c7:7f: 8c:0e:94:44:43:e3:f3:cb:e0:15:57:c2:24:a4:d4: bb:e2:96:bc:53:3d:50:ba:60:64:f0:cf:f9:e8:bb: 8a:14:c5:02:14:e0:ff:3f:a3:e5:cd:33:10:f7:5a: db:c6:64:a9:91:87:76:5b:e9:d3:90:2b:3e:43:8f: ae:18:76:da:40:ee:5c:94:2f:82:93:db:0c:d2:32: 3f:33:ff:f2:39:43:99:06:c6:af:b1:f3:a7:5d:72: 65:e0:cd:b1:d4:bd:f1:dc:cd:f1:b0:12:60:05:42: a2:92:46:40:06:f1:0f:d0:c2:1b:b1:e5:1d:fa:0d: f4:51:cd:3b:2d:9f:1f:dd:56:5f:b8:7b:71:93:2d: 4a:6a:10:3b:93:51:67:80:f2:8c:1e:49:4a:82:c3: 22:a5:b6:31:1e:bb:e9:ca:bc:52:e7:1a:9f:07:90: 88:d5:82:35:43:a2:ea:09:c5:71:05:ff:bc:6d:d1: ec:9d:9f:3f:67:f7:c0:f5:fc:92:db:40:28:4c:8c: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:E1:BB:02:29:F3:EE:2D:8B:0B:55:D3:21:D4:23:0D:12:B1:28 X509v3 Authority Key Identifier: keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b3:7a:04:01:48:36:78:1a:31:b1:68:61:5f:05:f7:d6:7f: 7f:5e:31:71:a3:55:cc:6e:eb:c7:5d:66:99:03:48:98:a3:0e: b7:9f:f9:65:f9:a8:44:eb:41:3c:7e:40:3f:c8:43:44:53:04: b2:8e:94:bf:5e:6b:67:e7:8d:4e:46:a6:b0:69:d6:e7:e7:c7: 2b:14:7f:e7:fb:eb:23:e3:93:9a:1e:45:fd:62:52:ad:bd:64: ef:de:e5:7a:a7:d7:d1:ea:93:ca:c1:89:bb:84:b0:e2:ab:28: 1e:f1:e2:a7:06:18:03:24:3e:29:c9:91:df:99:65:7a:c4:9f: 21:49:d7:b1:69:ea:6d:ec:9f:ba:d6:9a:9a:e0:41:87:83:ac: e0:9a:2b:4d:b5:6b:d6:3c:9b:fa:2b:67:81:4a:70:70:7d:d0: 58:7c:09:44:0b:61:cb:93:e5:eb:9c:8c:87:84:32:00:7f:c2: 70:0b:d0:07:1f:95:5b:1c:1c:d2:37:95:d2:27:bc:ad:b8:06: 12:52:78:ce:be:f7:05:80:b0:63:15:8d:d5:b5:08:db:35:8c: b0:8c:71:5f:14:24:1c:7b:13:46:da:05:3d:02:de:1d:3c:bb: f8:07:1e:5e:2c:04:1c:1b:f3:09:9e:fd:55:20:2f:f9:c2:10: 2f:d2:35:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURENDQxMTAvBgNVBAUTKDlGMDY2Q0I4NUY1Qjg4RjgyMzc4MEQ1Rjk2NjI1RjQz ODU0ODFCQkYwHhcNMjUwODIyMjE1MjIxWhcNMjUwODI5MjE1MjIxWjAYMRYwFAYD VQQDEw02OGE4ZTY5NS1mOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TI7svSS2nU/MGuDH4jB4xbIQRnjlM+mq1ktrOuAj4UPKiUjWrX+i1b0vRzM R4CDN9GLadJPy1+Zx3+MDpREQ+Pzy+AVV8IkpNS74pa8Uz1QumBk8M/56LuKFMUC FOD/P6PlzTMQ91rbxmSpkYd2W+nTkCs+Q4+uGHbaQO5clC+Ck9sM0jI/M//yOUOZ BsavsfOnXXJl4M2x1L3x3M3xsBJgBUKikkZABvEP0MIbseUd+g30Uc07LZ8f3VZf uHtxky1KahA7k1FngPKMHklKgsMipbYxHrvpyrxS5xqfB5CI1YI1Q6LqCcVxBf+8 bdHsnZ8/Z/fA9fyS20AoTIxKrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIn04bsC KfPuLYsLVdMh1CMNErEoMB8GA1UdIwQYMBaAFJ8GbLhfW4j4I3gNX5ZiX0OFSBu/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQ0NC9EOEUzMUU3NjNB MUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQZ2plQTFmbG1KZlE0VklH NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL253WnN1RjliaVBnamVBMWZsbUpmUTRWSUc3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQ0NC9EOEUzMUU3NjNBMUUxMUVCQUU0RUQ0MUFDNEY5QUUwMi9ud1pzdUY5YmlQ Z2plQTFmbG1KZlE0VklHNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCas3oEAUg2eBoxsWhhXwX31n9/XjFxo1XMbuvHXWaZA0iYow63n/ll +ahE60E8fkA/yENEUwSyjpS/Xmtn541ORqawadbn58crFH/n++sj45OaHkX9YlKt vWTv3uV6p9fR6pPKwYm7hLDiqyge8eKnBhgDJD4pyZHfmWV6xJ8hSdexaept7J+6 1pqa4EGHg6zgmitNtWvWPJv6K2eBSnBwfdBYfAlEC2HLk+XrnIyHhDIAf8JwC9AH H5VbHBzSN5XSJ7ytuAYSUnjOvvcFgLBjFY3VtQjbNYywjHFfFCQcexNG2gU9At4d PLv4Bx5eLAQcG/MJnv1VIC/5whAv0jUg -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:05 2025 by rpki-client