$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: 0I4F7IJPm0FaI3NgnRdbxUsk9tpg3+Kjcj/VWoltgy8= Subject key identifier: 89:5F:2F:1F:AF:50:EE:CE:93:07:CB:E9:23:62:5D:B8:A1:18:12:39 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0157 Signing time: Sat 19 Jul 2025 04:22:13 +0000 Manifest this update: Sat 19 Jul 2025 04:22:12 +0000 Manifest next update: Sat 26 Jul 2025 04:22:12 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: U5gxbOkrhZ3+AaUCJCOu+thPXggM1MkDM2/TO8XdEGQ=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jul 19 04:22:12 2025 GMT Not After : Jul 26 04:22:12 2025 GMT Subject: CN=687b1d74-2b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:59:e6:cf:a8:87:f6:ff:c3:fb:93:31:7c: ae:fb:98:5a:c9:b7:36:15:ea:4c:66:0a:99:4a:ef: 4d:16:11:57:21:89:ef:69:a1:66:b5:81:11:63:ad: 0f:40:53:d9:67:0a:a5:39:ae:ec:cd:04:5b:4d:b9: 9e:09:43:82:ae:17:52:17:14:09:60:9d:8e:b8:05: 15:f5:3b:27:d2:a0:b1:e2:ec:89:cb:7c:8d:1d:fc: 44:cb:dd:0a:f6:91:11:14:da:62:44:ca:16:a6:61: a1:77:d0:02:02:36:be:33:a2:70:09:5c:22:ba:78: 84:dc:c7:58:12:39:67:7a:99:f2:10:68:9a:b1:7b: 77:3e:6b:f9:26:88:43:24:69:b2:65:8b:20:65:b3: 5d:29:da:ce:6e:cf:14:e4:60:f8:c7:74:0b:4a:ad: e8:36:8f:76:df:d6:83:64:8f:c7:4f:06:78:52:ce: ff:41:39:78:2f:b6:ab:80:81:c9:96:17:38:48:2b: 21:bc:70:b1:61:f8:d0:84:12:e9:4b:4d:5a:4f:98: 79:5d:a3:b9:87:46:de:4c:3b:61:09:35:2c:bb:f1: 2d:48:5f:1f:6d:45:f2:48:a1:8b:69:e0:f5:94:1e: aa:50:f3:a4:fd:cb:8f:d1:75:a2:99:35:97:94:52: 6d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5F:2F:1F:AF:50:EE:CE:93:07:CB:E9:23:62:5D:B8:A1:18:12:39 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:66:c3:04:cb:e4:c3:c7:a8:35:c9:5d:4f:6e:d1:9a:c2:27: ac:d6:0b:86:41:4e:d8:85:ad:66:fa:ed:29:e8:ca:8b:f3:cf: 21:2c:1f:9c:68:35:7a:92:27:44:a6:c2:22:22:ae:73:f6:52: 86:b7:70:45:38:27:8c:fd:6e:68:f7:42:68:4e:57:30:91:ee: c9:3a:a2:59:cf:6d:6f:77:ad:4e:78:33:fd:ab:a6:fa:71:b1: ed:59:b9:9a:4a:ca:6d:08:71:1b:f2:2d:1f:8a:bb:c5:d9:f9: 84:89:38:16:d1:c4:70:eb:09:ce:3e:f2:b9:8e:90:dd:98:3e: 18:33:d4:42:c5:22:cd:64:9d:7d:aa:0f:b6:06:79:fd:e6:49: 49:e8:4f:5b:02:ef:4c:98:c9:91:8b:6a:04:cd:e5:f0:f9:17: 0e:87:74:a5:48:ce:f3:16:92:2c:9d:d8:b7:12:e2:f7:51:dd: 19:7a:43:26:95:e1:14:a1:fc:69:f4:b2:e9:71:82:42:24:af: 9f:64:ed:81:b9:b8:aa:c5:e6:53:57:a7:58:b0:ea:55:f8:9f: 68:80:59:04:2a:8e:5a:49:98:fb:2e:46:3f:78:1b:cf:97:8f: 91:cc:3c:16:38:a1:20:11:97:e9:9d:65:cc:2a:fe:d2:1e:e0: 26:92:fc:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwNzE5MDQyMjEyWhcNMjUwNzI2MDQyMjEyWjAYMRYwFAYD VQQDEw02ODdiMWQ3NC0yYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhZZ5s+oh/b/w/uTMXyu+5haybc2FepMZgqZSu9NFhFXIYnvaaFmtYERY60P QFPZZwqlOa7szQRbTbmeCUOCrhdSFxQJYJ2OuAUV9Tsn0qCx4uyJy3yNHfxEy90K 9pERFNpiRMoWpmGhd9ACAja+M6JwCVwiuniE3MdYEjlnepnyEGiasXt3Pmv5JohD JGmyZYsgZbNdKdrObs8U5GD4x3QLSq3oNo9239aDZI/HTwZ4Us7/QTl4L7argIHJ lhc4SCshvHCxYfjQhBLpS01aT5h5XaO5h0beTDthCTUsu/EtSF8fbUXySKGLaeD1 lB6qUPOk/cuP0XWimTWXlFJtfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlfLx+v UO7OkwfL6SNiXbihGBI5MB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoZsMEy+TDx6g1yV1PbtGawies1guGQU7Yha1m+u0p6MqL888hLB+c aDV6kidEpsIiIq5z9lKGt3BFOCeM/W5o90JoTlcwke7JOqJZz21vd61OeDP9q6b6 cbHtWbmaSsptCHEb8i0firvF2fmEiTgW0cRw6wnOPvK5jpDdmD4YM9RCxSLNZJ19 qg+2Bnn95klJ6E9bAu9MmMmRi2oEzeXw+RcOh3SlSM7zFpIsndi3EuL3Ud0ZekMm leEUofxp9LLpcYJCJK+fZO2BubiqxeZTV6dYsOpV+J9ogFkEKo5aSZj7LkY/eBvP l4+RzDwWOKEgEZfpnWXMKv7SHuAmkvxV -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:16 2025 by rpki-client