$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft File: N0X7n36iweJS0pvv2GphV3YNiMA.mft (raw, json) Hash identifier: zoLtlo0cuwm8xwUJDamp/pXbJio+riAUt09T28pCpq8= Subject key identifier: 04:60:A8:88:B6:2A:06:62:91:BE:65:72:64:37:51:B7:D8:F8:4B:44 Authority key identifier: 37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 Certificate issuer: /CN=A91EEAD3/serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft Manifest number: EA Signing time: Sat 23 Aug 2025 05:31:06 +0000 Manifest this update: Sat 23 Aug 2025 05:31:05 +0000 Manifest next update: Sat 30 Aug 2025 05:31:05 +0000 Files and hashes: 1: N0X7n36iweJS0pvv2GphV3YNiMA.crl (hash: PHoZrF44VtDVrD0tA942J0EA+e/w4DTtFEcuvFesUFo=) 2: E989DE0C1E2E11EFB8D12A2BC4F9AE02.roa (hash: PkN1Jtt374CIHLZsHPqXl9liocYOPeAQiQHQB34mvOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEAD3, serialNumber=3745FB9F7EA2C1E252D29BEFD86A6157760D88C0 Validity Not Before: Aug 23 05:31:05 2025 GMT Not After : Aug 30 05:31:05 2025 GMT Subject: CN=68a9521a-f72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:f3:f3:6b:ce:e6:19:1b:28:00:3f:27:06: bb:2d:82:62:3d:ad:fe:40:98:8c:0b:d4:12:8f:f1: ae:7f:18:52:95:3a:9e:d9:2b:4b:e6:3f:0b:31:87: 66:a0:99:41:23:80:e5:a5:5f:82:73:43:31:fd:e6: 6e:29:90:28:46:2a:22:1f:45:82:1f:6c:31:60:52: ca:d7:02:5f:4b:b6:c3:e5:1a:b0:0a:6a:5a:0e:7b: bd:d0:37:c4:55:9b:80:e3:ad:64:64:69:b9:09:fc: 4e:f5:74:32:21:b3:de:0b:5e:3d:41:d5:82:4f:f1: 0b:41:5c:a5:59:d3:23:75:39:02:1c:28:01:cd:a7: 88:6b:5f:f1:bf:5c:d4:78:55:94:09:05:87:48:94: 3e:c8:2a:24:a0:de:c6:88:fb:7d:16:47:63:94:c5: 40:65:db:c9:f4:a8:0c:14:3e:04:6f:8c:38:48:d2: 46:f7:ff:3d:cc:e6:09:21:cc:1c:76:db:e5:72:ee: 5b:71:bb:0e:62:3e:7f:9d:54:10:cb:f9:4c:7b:34: b7:07:b8:79:47:26:24:98:96:56:bd:b8:87:8d:6a: 58:e7:5b:51:a4:51:1f:ff:66:da:ab:7e:42:1f:61: b8:01:64:7a:fe:5a:01:a5:f5:f5:30:b6:46:c1:d1: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:60:A8:88:B6:2A:06:62:91:BE:65:72:64:37:51:B7:D8:F8:4B:44 X509v3 Authority Key Identifier: keyid:37:45:FB:9F:7E:A2:C1:E2:52:D2:9B:EF:D8:6A:61:57:76:0D:88:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N0X7n36iweJS0pvv2GphV3YNiMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEAD3/D6231A321E2D11EF83D95229C4F9AE02/N0X7n36iweJS0pvv2GphV3YNiMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:ce:d2:ed:6a:e6:80:8e:ab:f7:cc:f4:8e:ef:21:25:49:0e: 27:4e:88:68:a4:e0:d5:9c:9b:27:ee:5a:9c:aa:d8:d3:bd:c1: 29:95:2d:9c:ea:e1:a0:13:5d:d2:4d:cb:58:50:db:aa:cb:19: 5c:4f:a8:f9:1e:fd:c3:f8:d6:8e:d2:f9:8f:c4:5c:f9:21:52: f0:c5:aa:3a:be:9d:c1:26:51:26:02:89:6a:57:5c:dd:31:47: 0c:7e:30:89:24:37:84:7a:98:d4:9e:cc:75:fb:34:63:2e:41: 5d:89:57:7b:41:b1:e1:42:2f:32:a9:a3:2c:eb:98:7a:bc:cb: ba:a4:71:c3:16:51:88:9b:9e:73:6b:c1:f4:0d:51:4e:0d:c1: fe:dd:55:a4:95:b4:29:e1:b5:b3:c2:3b:23:c8:33:29:5c:86: e1:b5:a6:19:4f:0c:4a:ec:69:14:8c:1f:a1:0c:fc:cb:59:fe: 3d:de:7d:38:95:39:76:bf:85:7a:87:9a:9e:13:93:a5:e2:ae: 34:d4:36:f1:00:f5:f9:bf:b1:81:72:c2:4a:9f:aa:ea:cd:81: a4:fa:08:f8:94:91:4b:e0:52:41:e4:3d:ca:d6:1f:ea:44:f4: 7e:45:21:ea:97:5c:7c:13:3a:e8:c2:5d:29:33:a1:f9:8a:d1: f6:8a:74:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBRDMxMTAvBgNVBAUTKDM3NDVGQjlGN0VBMkMxRTI1MkQyOUJFRkQ4NkE2MTU3 NzYwRDg4QzAwHhcNMjUwODIzMDUzMTA1WhcNMjUwODMwMDUzMTA1WjAYMRYwFAYD VQQDEw02OGE5NTIxYS1mNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MLz82vO5hkbKAA/Jwa7LYJiPa3+QJiMC9QSj/GufxhSlTqe2StL5j8LMYdm oJlBI4DlpV+Cc0Mx/eZuKZAoRioiH0WCH2wxYFLK1wJfS7bD5RqwCmpaDnu90DfE VZuA461kZGm5CfxO9XQyIbPeC149QdWCT/ELQVylWdMjdTkCHCgBzaeIa1/xv1zU eFWUCQWHSJQ+yCokoN7GiPt9FkdjlMVAZdvJ9KgMFD4Eb4w4SNJG9/89zOYJIcwc dtvlcu5bcbsOYj5/nVQQy/lMezS3B7h5RyYkmJZWvbiHjWpY51tRpFEf/2baq35C H2G4AWR6/loBpfX1MLZGwdHzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARgqIi2 KgZikb5lcmQ3UbfY+EtEMB8GA1UdIwQYMBaAFDdF+59+osHiUtKb79hqYVd2DYjA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUFEMy9ENjIzMUEzMjFF MkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdlSlMwcHZ2MkdwaFYzWU5p TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wWDduMzZpd2VKUzBwdnYyR3BoVjNZTmlNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUFEMy9ENjIzMUEzMjFFMkQxMUVGODNEOTUyMjlDNEY5QUUwMi9OMFg3bjM2aXdl SlMwcHZ2MkdwaFYzWU5pTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoztLtauaAjqv3zPSO7yElSQ4nTohopODVnJsn7lqcqtjTvcEplS2c 6uGgE13STctYUNuqyxlcT6j5Hv3D+NaO0vmPxFz5IVLwxao6vp3BJlEmAolqV1zd MUcMfjCJJDeEepjUnsx1+zRjLkFdiVd7QbHhQi8yqaMs65h6vMu6pHHDFlGIm55z a8H0DVFODcH+3VWklbQp4bWzwjsjyDMpXIbhtaYZTwxK7GkUjB+hDPzLWf493n04 lTl2v4V6h5qeE5Ol4q401DbxAPX5v7GBcsJKn6rqzYGk+gj4lJFL4FJB5D3K1h/q RPR+RSHql1x8Ezrowl0pM6H5itH2inRK -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:09 2025 by rpki-client