$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: yEew0RC1UPakl0Q0YTAg63n8ANhhldtb1GBD8qbtO8Q= Subject key identifier: BC:D2:00:68:82:B8:0D:BD:2F:49:28:8E:C7:EF:AF:95:BE:25:4B:76 Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:34:08 +0000 Manifest this update: Sat 19 Jul 2025 06:34:08 +0000 Manifest next update: Sat 26 Jul 2025 06:34:08 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: obaDCIg09t5JjXqE3+JusFHDOEFBnhym093I7h/YdDo=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Jul 19 06:34:08 2025 GMT Not After : Jul 26 06:34:08 2025 GMT Subject: CN=687b3c60-6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:65:30:48:8b:89:c1:c6:3d:f4:41:e8:f1: b3:9b:62:af:a0:49:e4:46:5c:93:3a:5a:b2:5c:bc: 2f:76:28:0f:86:a1:2f:cd:91:65:6a:9d:a8:62:aa: 05:a7:ea:4b:1f:0c:c5:e0:93:41:0f:22:fd:07:cb: ca:f3:ac:95:f1:c7:03:01:79:f9:57:0c:b6:8f:8a: 34:18:a2:be:aa:49:00:52:b8:c0:9a:0e:34:05:ac: 13:0c:75:bf:04:bc:0e:19:77:53:c7:d5:12:10:0d: 9b:1c:d9:5d:4b:bf:ae:64:b5:08:e4:d2:93:45:ea: 3c:55:6d:69:cd:b7:b5:13:9d:9e:8c:48:5d:38:ed: 94:fc:f5:e2:b9:53:7f:eb:09:77:3b:34:e1:b2:62: 17:d5:77:8e:2b:14:97:10:07:aa:ab:3f:c3:84:d6: 70:f2:8e:39:2f:4b:df:64:69:87:97:30:14:6e:21: 16:aa:b7:b3:55:f6:14:20:b1:6e:d8:2c:cf:9e:36: a9:66:c6:c8:e2:88:65:8a:1f:30:fc:55:32:e4:8a: 4e:74:54:d1:51:b2:70:81:42:75:ba:79:0a:6c:10: dc:36:6a:6d:77:e4:ed:15:51:d5:5b:01:ee:08:e8: 48:01:2a:00:97:56:78:53:9e:4d:6c:14:08:f3:78: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:00:68:82:B8:0D:BD:2F:49:28:8E:C7:EF:AF:95:BE:25:4B:76 X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:b3:5e:62:2e:0d:e8:59:3c:cc:b5:4f:a4:39:5e:85:c1: d5:03:56:a2:04:12:fb:97:9e:8b:f6:b0:d4:04:ed:1d:20:ba: 83:21:57:d5:82:79:1c:7b:01:46:72:c2:00:a0:d1:73:4c:97: 30:87:02:4a:91:29:24:3c:60:4c:e5:91:5a:e7:24:aa:58:a3: fd:26:0d:df:cb:41:3c:f8:4c:1d:a9:c3:15:d0:b1:86:0a:0d: 63:f1:4e:2e:b0:ea:89:a8:83:d3:13:8f:9a:57:17:6d:2d:8d: 6d:a0:4d:fb:35:58:a1:7e:9a:6c:a6:eb:68:de:0a:c8:8a:d7: 16:07:68:9a:32:6c:cf:d5:06:f6:81:f5:fb:db:89:c5:37:95: aa:8f:a0:c5:3b:60:7a:5f:6f:81:c8:9b:60:3f:7f:13:7d:76: 2d:ff:64:f2:19:cd:12:a0:81:5c:1c:4e:e2:2b:23:98:91:7d: 18:2c:7c:e4:63:b8:e2:fc:94:85:4d:09:1d:68:4b:b3:0e:21: a0:79:78:e1:c6:91:5c:59:9f:a2:8d:0d:98:f4:24:58:7a:9b: 9e:29:92:4d:39:17:25:9f:cb:5e:1a:3b:fd:53:a9:1b:09:5a: 88:b8:34:26:65:58:ed:de:80:a0:6d:76:03:be:e3:a9:9e:f8: 3e:81:19:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwNzE5MDYzNDA4WhcNMjUwNzI2MDYzNDA4WjAYMRYwFAYD VQQDEw02ODdiM2M2MC02NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xFlMEiLicHGPfRB6PGzm2KvoEnkRlyTOlqyXLwvdigPhqEvzZFlap2oYqoF p+pLHwzF4JNBDyL9B8vK86yV8ccDAXn5Vwy2j4o0GKK+qkkAUrjAmg40BawTDHW/ BLwOGXdTx9USEA2bHNldS7+uZLUI5NKTReo8VW1pzbe1E52ejEhdOO2U/PXiuVN/ 6wl3OzThsmIX1XeOKxSXEAeqqz/DhNZw8o45L0vfZGmHlzAUbiEWqrezVfYUILFu 2CzPnjapZsbI4ohlih8w/FUy5IpOdFTRUbJwgUJ1unkKbBDcNmptd+TtFVHVWwHu COhIASoAl1Z4U55NbBQI83ijFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzSAGiC uA29L0kojsfvr5W+JUt2MB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ3rNeYi4N6Fk8zLVPpDlehcHVA1aiBBL7l56L9rDUBO0dILqDIVfV gnkcewFGcsIAoNFzTJcwhwJKkSkkPGBM5ZFa5ySqWKP9Jg3fy0E8+EwdqcMV0LGG Cg1j8U4usOqJqIPTE4+aVxdtLY1toE37NVihfppsputo3grIitcWB2iaMmzP1Qb2 gfX724nFN5Wqj6DFO2B6X2+ByJtgP38TfXYt/2TyGc0SoIFcHE7iKyOYkX0YLHzk Y7ji/JSFTQkdaEuzDiGgeXjhxpFcWZ+ijQ2Y9CRYepueKZJNORcln8teGjv9U6kb CVqIuDQmZVjt3oCgbXYDvuOpnvg+gRlx -----END CERTIFICATE-----Generated at Sun Jul 20 06:35:08 2025 by rpki-client