$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: yY7bMF5R5YXDzcaYr45/zmC/9bneFHgoULT52x/6hvA= Subject key identifier: EE:64:E3:7E:41:7B:01:D1:00:86:F0:E2:48:01:73:F6:EC:11:79:55 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 01C9 Signing time: Fri 25 Jul 2025 03:03:39 +0000 Manifest this update: Fri 25 Jul 2025 03:03:39 +0000 Manifest next update: Fri 01 Aug 2025 03:03:39 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: HDNdO/AAjkWsEBeJKZy1wG5M9m2ijN0gqmfWRBC4tag=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 03:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Jul 25 03:03:39 2025 GMT Not After : Aug 1 03:03:39 2025 GMT Subject: CN=6882f40b-5f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b2:8d:9f:0e:21:81:6a:ec:8e:e1:4d:0a:45: aa:8c:fd:10:1d:4e:97:b2:0c:e4:d8:b0:f6:f8:f7: f8:ad:83:e5:fd:51:01:23:34:77:a9:6e:4a:65:2b: f5:f5:95:cf:7e:ab:01:87:c8:d2:52:76:08:2b:52: 61:92:72:f3:b3:b2:d0:26:e7:62:bb:79:47:dd:a3: 17:5c:29:8a:4f:9c:c9:dc:3c:47:8b:29:c4:f9:a9: e6:dc:1d:c5:4f:e8:3f:78:95:84:0b:8a:aa:e4:ee: 1f:85:e0:99:51:a2:cf:00:44:df:e1:cd:35:a2:2d: 01:bc:e9:17:d5:a4:b4:e9:f3:ed:7c:3c:e2:a6:f2: dd:c8:e8:b7:53:ac:8c:1d:f8:05:a4:eb:1a:ef:9f: 38:57:6f:1b:83:fd:5a:7a:38:a7:d4:6c:fb:7f:e6: 25:8f:2b:f9:21:8c:71:e8:c2:84:4f:86:19:99:36: 66:be:03:e4:bb:9c:8b:36:ad:7a:ac:65:04:b4:dc: 63:fc:4d:de:ca:cc:71:5f:84:93:d7:56:bb:d4:35: 64:c3:00:55:91:99:e6:6c:b1:73:21:c1:7e:9b:21: 51:a2:69:6d:16:8a:8e:0a:9b:85:86:c1:72:cf:01: 99:3a:15:9a:40:f2:28:dc:a9:8a:5a:59:2b:5d:4c: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:64:E3:7E:41:7B:01:D1:00:86:F0:E2:48:01:73:F6:EC:11:79:55 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:20:4e:9a:b8:5d:16:9a:cc:a4:9d:36:21:74:69:19:74:5c: 08:71:d3:95:96:31:10:22:62:a5:67:6d:e9:75:d2:95:df:b7: 9c:8d:c1:f3:52:df:9b:6b:de:76:12:02:7b:6c:dd:f1:dc:01: 69:12:81:d7:30:1d:db:9c:01:c5:c6:fa:9f:9f:25:89:47:bd: 95:62:57:9b:96:97:3b:79:b0:58:66:ea:2f:f0:6f:40:02:a7: 28:51:33:bf:89:63:fe:67:30:ce:85:a2:2e:b3:4d:ba:39:97: d9:0f:03:9c:77:36:32:68:d4:60:da:04:15:6b:fe:3f:2b:85: 41:8e:b0:2a:e5:69:9d:ae:89:f5:08:b0:07:c0:71:5c:95:96: 5e:99:ab:48:b8:bc:42:0b:f9:e6:4a:99:72:9e:ac:f4:50:cc: 3a:02:68:3f:9d:36:50:73:6c:38:e5:2d:89:f5:a9:96:8a:3f: b6:2f:43:1b:db:26:7b:6b:50:01:aa:37:71:86:88:56:9b:66: 0b:e2:15:69:5f:df:19:96:1a:89:25:ab:8f:df:a8:f0:0e:7c: 87:82:a4:33:d7:94:73:c2:c2:f3:6a:e9:aa:bf:bf:a1:f1:b9: 0f:15:cf:13:53:dd:1b:5f:4c:b2:c9:e0:04:98:ec:98:a6:54: d7:f3:25:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUwNzI1MDMwMzM5WhcNMjUwODAxMDMwMzM5WjAYMRYwFAYD VQQDEw02ODgyZjQwYi01ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LKNnw4hgWrsjuFNCkWqjP0QHU6Xsgzk2LD2+Pf4rYPl/VEBIzR3qW5KZSv1 9ZXPfqsBh8jSUnYIK1JhknLzs7LQJudiu3lH3aMXXCmKT5zJ3DxHiynE+anm3B3F T+g/eJWEC4qq5O4fheCZUaLPAETf4c01oi0BvOkX1aS06fPtfDzipvLdyOi3U6yM HfgFpOsa7584V28bg/1aejin1Gz7f+Yljyv5IYxx6MKET4YZmTZmvgPku5yLNq16 rGUEtNxj/E3eysxxX4ST11a71DVkwwBVkZnmbLFzIcF+myFRomltFoqOCpuFhsFy zwGZOhWaQPIo3KmKWlkrXUziVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5k435B ewHRAIbw4kgBc/bsEXlVMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQIE6auF0WmsyknTYhdGkZdFwIcdOVljEQImKlZ23pddKV37ecjcHz Ut+ba952EgJ7bN3x3AFpEoHXMB3bnAHFxvqfnyWJR72VYleblpc7ebBYZuov8G9A AqcoUTO/iWP+ZzDOhaIus026OZfZDwOcdzYyaNRg2gQVa/4/K4VBjrAq5Wmdron1 CLAHwHFclZZematIuLxCC/nmSplynqz0UMw6Amg/nTZQc2w45S2J9amWij+2L0Mb 2yZ7a1ABqjdxhohWm2YL4hVpX98ZlhqJJauP36jwDnyHgqQz15RzwsLzaumqv7+h 8bkPFc8TU90bX0yyyeAEmOyYplTX8yUK -----END CERTIFICATE-----Generated at Fri Jul 25 11:15:04 2025 by rpki-client