$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: vO3tHY8o6UHc52vT1fK27QWs0EfKEY9ANYGwoJ4zA8Q= Subject key identifier: 8A:20:96:03:AC:A5:5C:86:4D:72:92:FA:4C:66:D8:E7:E2:9B:BB:D0 Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:14:53 +0000 Manifest this update: Sat 19 Jul 2025 07:14:52 +0000 Manifest next update: Sat 26 Jul 2025 07:14:52 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: 8SjoyLFo5TCXhN8c60VhfTuUNNlIoQVo60WzknmUrzU=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Jul 19 07:14:52 2025 GMT Not After : Jul 26 07:14:52 2025 GMT Subject: CN=687b45ec-46d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:fc:9a:16:66:86:62:40:5e:9e:3f:06:8c: 23:4c:19:2b:fb:58:1b:3b:da:3f:18:d1:8d:06:c4: e9:e0:1d:53:1b:dc:ef:a9:1e:95:bd:05:39:99:93: a8:df:e1:86:f8:2f:9c:b7:6f:3a:f2:a0:fd:d7:20: f5:77:13:de:a8:78:ff:23:a4:4c:30:46:77:9f:ab: ca:0b:43:c4:33:fb:39:1b:e0:22:93:12:61:c1:3b: b2:16:1b:a4:70:7b:a4:d7:9b:be:a7:b7:99:89:e9: 80:1f:0d:ff:a5:1a:ab:41:8c:b7:a1:3c:1f:2c:b6: 84:43:2c:eb:52:31:21:6c:ea:de:38:e0:62:fe:0c: 0b:61:ce:08:6b:96:6f:d6:71:c4:a4:76:ff:6c:4b: df:83:ee:6e:df:74:44:fe:82:62:ee:80:e9:da:01: 27:ae:b1:8a:a4:32:20:aa:2d:a5:cb:8c:8a:92:08: ef:04:29:15:9c:f7:e0:2a:a8:3a:7f:75:61:ff:23: b8:27:a7:af:b9:05:f0:5f:84:56:cf:1f:96:50:51: 27:e2:79:71:e4:b8:15:ec:ba:4e:57:97:5a:7d:71: 20:ba:6e:c8:45:d3:05:1e:80:96:c5:cc:88:72:95: 95:b4:de:d4:a0:67:85:c8:40:9f:03:32:c6:90:e2: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:20:96:03:AC:A5:5C:86:4D:72:92:FA:4C:66:D8:E7:E2:9B:BB:D0 X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b7:c6:da:0d:63:74:20:33:ff:3c:8f:6d:7b:77:78:65:5d: 69:8b:4b:2d:da:85:12:99:e1:b9:6a:f3:88:36:5b:76:a6:70: 74:0b:ef:f2:af:de:85:75:0b:3b:7d:0a:13:ac:be:8b:83:7b: 5f:f6:91:76:55:64:a9:8d:92:17:b5:87:1a:95:c5:86:3c:a4: d6:4e:1f:a9:b0:61:ed:08:6b:f8:7f:4e:59:ba:b4:58:67:3c: f0:35:c6:bf:e8:58:5d:ee:1a:4f:a7:2b:74:da:5e:78:55:f2: c9:b3:b2:ef:09:0a:3b:12:53:da:9f:5f:f4:bc:3e:e6:3d:b7: 86:ca:cc:5e:3d:7f:df:54:a7:01:17:88:a7:e5:d0:d2:53:6c: a7:1f:aa:bc:bc:9c:f9:82:16:77:60:17:78:2e:56:6d:d1:e9: b8:90:3a:7e:db:99:44:cf:27:d6:69:c8:07:f5:de:b5:39:05: 53:7a:9f:2b:67:39:69:03:7c:c7:0a:16:85:ef:bd:3d:36:ec: e0:15:a3:8a:21:ec:47:b2:87:e4:d8:66:0d:f0:f6:e0:1a:b0: 30:9b:47:3e:48:09:8f:91:b4:22:51:e3:17:b0:d2:b9:e0:c2: ce:e5:df:ac:0f:2e:56:67:c7:3b:f6:4d:fd:d2:1e:a1:c8:e3: ae:20:d7:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA3MTkwNzE0NTJaFw0yNTA3MjYwNzE0NTJaMBgxFjAUBgNV BAMTDTY4N2I0NWVjLTQ2ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYh/yaFmaGYkBenj8GjCNMGSv7WBs72j8Y0Y0GxOngHVMb3O+pHpW9BTmZk6jf 4Yb4L5y3bzryoP3XIPV3E96oeP8jpEwwRnefq8oLQ8Qz+zkb4CKTEmHBO7IWG6Rw e6TXm76nt5mJ6YAfDf+lGqtBjLehPB8stoRDLOtSMSFs6t444GL+DAthzghrlm/W ccSkdv9sS9+D7m7fdET+gmLugOnaASeusYqkMiCqLaXLjIqSCO8EKRWc9+AqqDp/ dWH/I7gnp6+5BfBfhFbPH5ZQUSfieXHkuBXsuk5Xl1p9cSC6bshF0wUegJbFzIhy lZW03tSgZ4XIQJ8DMsaQ4gujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiiCWA6yl XIZNcpL6TGbY5+Kbu9AwHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAO3xtoNY3QgM/88j217d3hlXWmLSy3ahRKZ4blq84g2W3amcHQL7/Kv 3oV1Czt9ChOsvouDe1/2kXZVZKmNkhe1hxqVxYY8pNZOH6mwYe0Ia/h/Tlm6tFhn PPA1xr/oWF3uGk+nK3TaXnhV8smzsu8JCjsSU9qfX/S8PuY9t4bKzF49f99UpwEX iKfl0NJTbKcfqry8nPmCFndgF3guVm3R6biQOn7bmUTPJ9ZpyAf13rU5BVN6nytn OWkDfMcKFoXvvT027OAVo4oh7Eeyh+TYZg3w9uAasDCbRz5ICY+RtCJR4xew0rng ws7l36wPLlZnxzv2Tf3SHqHI464g19E= -----END CERTIFICATE-----Generated at Sun Jul 20 22:14:25 2025 by rpki-client