$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: 6ogZj633SJQ2xUFQNbAvzA6N6f6h6Ybjqr9MNmTVnvE= Subject key identifier: 14:DE:B3:CD:5D:B1:C6:4A:9D:EF:6F:D6:C9:5E:C9:7D:E8:FE:60:67 Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: CA Signing time: Sat 19 Jul 2025 05:54:18 +0000 Manifest this update: Sat 19 Jul 2025 05:54:18 +0000 Manifest next update: Sat 26 Jul 2025 05:54:18 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 6h1VkbDUGV99hcIKLijS9/A1EBlRzmHtyIb+tN3uEX0=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Jul 19 05:54:18 2025 GMT Not After : Jul 26 05:54:18 2025 GMT Subject: CN=687b330a-9f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:5e:79:73:d9:19:f5:d2:c6:96:cf:8f:37: ed:12:01:fc:fa:81:6b:9b:d4:b3:00:1f:2c:79:ca: bb:98:19:a5:d1:be:c2:4a:09:c8:5e:d6:c9:92:69: c5:51:c9:98:ef:dd:14:c9:89:71:c4:c5:e7:7f:1c: 20:f6:93:d4:20:60:9b:f4:75:e8:dd:b8:58:38:00: 05:37:27:60:28:d1:8c:40:65:90:08:ef:27:44:e8: 99:93:7a:16:78:64:c8:6d:64:44:a6:d8:09:46:28: d5:ae:e9:a0:9e:0c:69:5c:e7:47:28:31:bc:02:d2: ac:64:3d:4e:da:92:68:78:f2:9c:ea:a7:72:23:79: b6:1e:b0:93:54:ad:10:57:e5:10:94:e0:6f:59:6d: 64:73:ce:45:ff:7c:b0:9b:bf:60:e6:5c:4a:d6:54: c1:41:04:99:c2:2c:be:a0:5d:00:59:a9:77:96:0c: b6:fc:e2:f4:bc:09:0e:cc:6a:55:95:e7:2b:fa:33: 92:96:61:3a:d7:31:cd:2f:e5:ee:26:da:2a:1b:1c: 8b:59:44:a2:4e:bc:6f:43:0a:29:0e:93:00:41:69: f6:9e:66:d7:94:ca:4f:ab:e7:01:0f:c0:57:b8:ba: fc:07:65:81:0a:14:e0:44:61:08:1c:d7:ae:31:35: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:B3:CD:5D:B1:C6:4A:9D:EF:6F:D6:C9:5E:C9:7D:E8:FE:60:67 X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:38:9b:cf:f7:9e:06:dd:63:5c:8b:38:2a:2b:95:94:22:16: 2d:bc:62:b2:22:48:cd:33:92:eb:4c:dd:5e:0e:0f:84:d2:cd: 88:f1:26:72:18:94:af:39:21:a4:35:4d:76:b3:8e:25:1a:14: 59:42:e0:40:20:3f:aa:bf:5d:ea:18:ca:9b:a3:87:69:3f:da: 24:36:10:15:22:ea:14:43:a3:65:ab:b5:14:eb:de:70:46:5b: 80:7d:91:4a:89:02:e0:bc:b0:3c:b8:67:36:3e:4f:48:d0:1b: c9:20:0e:a5:37:75:48:71:90:41:3c:3b:ae:a4:2a:35:45:29: 6e:e5:2a:49:cb:c2:52:88:0e:c9:13:c9:5c:39:6a:29:67:37: f8:51:32:f8:83:51:18:a8:75:8b:be:1b:95:39:40:fc:59:5e: ec:a6:9b:f7:51:5f:45:25:9c:c6:00:25:89:20:14:4b:ff:23: 97:6a:ac:75:57:49:a0:57:98:ee:ce:1a:72:7d:d5:21:40:8f: 50:53:32:42:86:34:9a:e4:e8:88:8d:fc:f2:07:75:2d:ac:3c: bd:7e:7b:af:35:50:14:a9:65:5f:ad:cd:70:35:11:1b:b4:da: 48:b4:a2:b8:f0:77:98:f9:35:81:ea:9c:6a:e7:be:1f:e1:71: 40:b1:3a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwNzE5MDU1NDE4WhcNMjUwNzI2MDU1NDE4WjAYMRYwFAYD VQQDEw02ODdiMzMwYS05ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYNeeXPZGfXSxpbPjzftEgH8+oFrm9SzAB8secq7mBml0b7CSgnIXtbJkmnF UcmY790UyYlxxMXnfxwg9pPUIGCb9HXo3bhYOAAFNydgKNGMQGWQCO8nROiZk3oW eGTIbWREptgJRijVrumgngxpXOdHKDG8AtKsZD1O2pJoePKc6qdyI3m2HrCTVK0Q V+UQlOBvWW1kc85F/3ywm79g5lxK1lTBQQSZwiy+oF0AWal3lgy2/OL0vAkOzGpV lecr+jOSlmE61zHNL+XuJtoqGxyLWUSiTrxvQwopDpMAQWn2nmbXlMpPq+cBD8BX uLr8B2WBChTgRGEIHNeuMTUAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTes81d scZKne9v1sleyX3o/mBnMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACOJvP954G3WNcizgqK5WUIhYtvGKyIkjNM5LrTN1eDg+E0s2I8SZy GJSvOSGkNU12s44lGhRZQuBAID+qv13qGMqbo4dpP9okNhAVIuoUQ6Nlq7UU695w RluAfZFKiQLgvLA8uGc2Pk9I0BvJIA6lN3VIcZBBPDuupCo1RSlu5SpJy8JSiA7J E8lcOWopZzf4UTL4g1EYqHWLvhuVOUD8WV7sppv3UV9FJZzGACWJIBRL/yOXaqx1 V0mgV5juzhpyfdUhQI9QUzJChjSa5OiIjfzyB3UtrDy9fnuvNVAUqWVfrc1wNREb tNpItKK48HeY+TWB6pxq574f4XFAsTqS -----END CERTIFICATE-----Generated at Mon Jul 21 05:48:12 2025 by rpki-client