$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: CNePNlBLutAkfrqAT5TxthA7vWHtpsBq+E+NQSQXw3I= Subject key identifier: D6:77:BE:FF:5F:0E:A5:26:A7:AF:46:EA:52:5C:F4:8C:A8:2D:F3:10 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 0123 Signing time: Sat 19 Jul 2025 05:02:29 +0000 Manifest this update: Sat 19 Jul 2025 05:02:29 +0000 Manifest next update: Sat 26 Jul 2025 05:02:29 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: us8l2CKwJ/0m8fvPzJYl5Y6Rj7xcRqWLGGpESOfHFls=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Jul 19 05:02:29 2025 GMT Not After : Jul 26 05:02:29 2025 GMT Subject: CN=687b26e5-7d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:7d:99:9e:d5:54:30:3f:51:1b:b9:39:32: 04:11:31:f4:13:76:36:2c:89:34:50:4b:36:a9:96: ab:c0:9c:07:c3:eb:3e:55:70:c6:c8:c8:71:89:70: 1f:79:35:61:ff:75:15:b5:e7:ce:d7:de:9c:6e:5e: 01:0d:8e:61:d0:d9:bd:c9:cf:a3:92:cf:d0:61:c1: d6:98:60:5f:68:59:e7:2a:2b:20:d2:9a:2f:01:86: 91:eb:ce:83:e4:98:7b:99:5f:54:0d:d3:2b:d9:a5: 7e:37:0b:88:92:23:f4:f9:54:bf:58:6e:77:40:17: 17:eb:7d:96:22:3f:e6:1f:a9:41:2c:51:7b:cc:b2: 3d:9d:3b:1b:8a:ac:36:2f:93:fc:74:19:14:9b:3a: 3b:b7:58:94:24:ff:7d:2b:f3:87:04:40:a7:c9:ef: 29:3a:f0:a1:24:af:90:b7:92:8e:7e:13:67:30:19: 33:19:fd:cd:d8:ea:a2:9c:2c:07:46:d9:ce:5b:9a: dc:41:6f:41:b0:bc:2b:0f:5b:77:c5:66:9e:3c:dd: 59:1a:aa:a9:81:c9:b7:a5:77:94:50:ea:64:8f:ff: 12:e5:8c:29:c5:78:6c:2d:51:1b:34:a4:36:5f:6c: 50:08:13:3d:1e:0e:19:02:37:03:09:50:45:7c:ba: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:77:BE:FF:5F:0E:A5:26:A7:AF:46:EA:52:5C:F4:8C:A8:2D:F3:10 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d2:46:f1:14:8f:d1:ef:2a:cc:ad:18:01:cc:d7:64:3f:5b: 03:40:64:9b:76:cf:e5:ff:16:cd:4d:93:98:39:8d:fb:97:b2: b5:1f:ac:20:76:4b:ce:66:38:5e:c8:16:c1:be:86:3b:4e:66: 51:d8:e4:b7:2a:7c:c3:9c:3a:e9:60:39:52:4b:86:7e:2c:5b: 08:5c:e9:0d:56:32:82:47:a2:b7:26:19:71:89:1d:27:07:2b: 05:c8:f0:c2:6d:db:a4:77:90:3e:c9:2b:1d:66:41:90:2f:f7: 39:e0:dd:78:56:63:bb:f2:5a:88:77:6b:99:8a:8b:2a:99:50: e3:63:bf:f0:6c:ab:3d:3c:e4:19:40:34:fd:80:9b:e8:19:19: eb:5a:9a:b2:12:78:d4:fe:c2:87:2f:dd:8f:6f:70:44:c5:e9: 14:c6:80:f7:3b:2e:f3:38:48:b5:54:6c:10:d7:96:95:20:c7: 09:60:bb:9c:37:66:fa:49:29:ee:97:df:b3:88:11:83:dc:ae: ec:ee:eb:bd:2c:d9:ac:0c:f9:13:e2:57:dd:80:f7:e2:86:82: 6f:54:54:48:88:b6:4b:66:f4:83:43:c0:69:77:99:d3:3f:17: 19:56:b1:5c:c0:cd:db:9c:bb:6a:76:fc:2e:bb:f4:6c:e7:cf: 7d:41:51:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNzE5MDUwMjI5WhcNMjUwNzI2MDUwMjI5WjAYMRYwFAYD VQQDEw02ODdiMjZlNS03ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fR9mZ7VVDA/URu5OTIEETH0E3Y2LIk0UEs2qZarwJwHw+s+VXDGyMhxiXAf eTVh/3UVtefO196cbl4BDY5h0Nm9yc+jks/QYcHWmGBfaFnnKisg0povAYaR686D 5Jh7mV9UDdMr2aV+NwuIkiP0+VS/WG53QBcX632WIj/mH6lBLFF7zLI9nTsbiqw2 L5P8dBkUmzo7t1iUJP99K/OHBECnye8pOvChJK+Qt5KOfhNnMBkzGf3N2OqinCwH RtnOW5rcQW9BsLwrD1t3xWaePN1ZGqqpgcm3pXeUUOpkj/8S5YwpxXhsLVEbNKQ2 X2xQCBM9Hg4ZAjcDCVBFfLrRkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ3vv9f DqUmp69G6lJc9IyoLfMQMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB30kbxFI/R7yrMrRgBzNdkP1sDQGSbds/l/xbNTZOYOY37l7K1H6wg dkvOZjheyBbBvoY7TmZR2OS3KnzDnDrpYDlSS4Z+LFsIXOkNVjKCR6K3JhlxiR0n BysFyPDCbdukd5A+ySsdZkGQL/c54N14VmO78lqId2uZiosqmVDjY7/wbKs9POQZ QDT9gJvoGRnrWpqyEnjU/sKHL92Pb3BExekUxoD3Oy7zOEi1VGwQ15aVIMcJYLuc N2b6SSnul9+ziBGD3K7s7uu9LNmsDPkT4lfdgPfihoJvVFRIiLZLZvSDQ8Bpd5nT PxcZVrFcwM3bnLtqdvwuu/Rs5899QVFq -----END CERTIFICATE-----Generated at Sun Jul 20 10:51:58 2025 by rpki-client