$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: RwMNKZfuivtdGL1SOgGqaL83CdqnJJwGOrm+QY5KQCk= Subject key identifier: 1F:5F:65:35:D9:D0:43:13:32:18:93:7D:18:D6:44:67:B0:41:C3:F4 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0103 Signing time: Sat 19 Jul 2025 05:37:26 +0000 Manifest this update: Sat 19 Jul 2025 05:37:25 +0000 Manifest next update: Sat 26 Jul 2025 05:37:25 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: tMNORU8MwIr68bUU2xnWczZnoUYD8kEDa00NQ2Tt6R8=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Jul 19 05:37:25 2025 GMT Not After : Jul 26 05:37:25 2025 GMT Subject: CN=687b2f15-0786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:00:87:a8:d6:f0:85:13:5f:69:4b:05:4d: c7:65:e6:d9:e3:61:60:67:e5:22:23:f3:7e:82:ae: 2d:8e:42:ad:c3:9c:29:72:dc:05:56:e6:88:6f:d5: 57:f2:9d:e2:3d:5e:62:51:5a:ba:32:1c:7e:c5:05: 22:5b:36:14:da:02:b9:94:82:13:07:c4:75:b2:01: d1:24:7c:75:27:3d:a2:bc:2c:52:06:10:f4:b7:a3: 7e:9f:6b:eb:39:e4:70:d1:64:d1:4a:64:89:1f:a6: 47:89:ad:c5:51:95:db:05:64:bf:d7:c2:b7:fb:7c: 0e:8a:08:30:2c:e4:3c:5d:2a:a8:bc:3a:af:25:88: f2:42:a1:a3:fa:1c:9d:e9:49:d1:b1:57:c8:72:25: 39:d7:d3:db:ae:5d:83:2f:98:be:95:c0:21:03:73: 4e:37:99:b8:4e:64:5e:74:94:7d:71:52:7c:ed:70: a8:3c:2b:ba:75:e8:2d:3a:6a:f0:8a:80:cf:89:05: 96:d9:a0:95:db:99:00:eb:63:2a:fd:f4:1d:0b:98: 39:19:fe:3f:6c:2a:f1:63:d9:b4:43:69:55:5c:a1: 07:67:e2:3f:56:be:fc:f4:5b:81:6d:0c:1d:f3:7b: 0b:75:2e:bd:31:f2:1f:dd:81:59:27:cf:a8:ae:b2: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5F:65:35:D9:D0:43:13:32:18:93:7D:18:D6:44:67:B0:41:C3:F4 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:16:33:2a:f3:66:74:d8:86:b4:eb:d5:02:fe:70:49:d8:ad: 9a:a4:88:39:41:14:f8:15:eb:d6:a5:85:b7:14:fe:5c:82:0e: 3e:d9:8f:c7:11:1f:3d:b2:a5:15:9e:f6:c7:8c:9f:81:51:ac: 83:5e:29:ed:a5:ac:78:c7:ef:f6:3c:fd:de:80:9e:4f:a8:71: 98:b1:8b:47:2b:29:2a:49:74:35:da:6d:82:9c:64:41:73:ce: e1:e5:3b:e4:fa:8a:88:f4:85:b2:b7:9f:41:d4:78:b8:fe:1e: 4c:06:f8:24:bd:10:64:ff:35:c0:d8:bb:8c:39:4c:43:17:7f: cd:b9:dc:3d:cd:be:fd:58:60:78:46:c4:eb:8a:08:9d:b3:00: 07:4f:b5:90:9e:82:ea:0f:68:d5:45:06:2f:18:39:3d:0a:34: 08:78:84:56:2e:d3:8a:2b:cc:a6:65:d1:76:b3:aa:dc:4c:a8: a0:01:3a:ea:e2:1d:6b:1f:85:8b:ba:db:2b:7b:3a:a7:39:5e: f9:7c:33:fd:0c:d4:a1:46:52:af:e0:75:f7:5d:63:24:98:77: 37:3c:55:37:18:7a:4a:de:3c:e6:e1:26:ad:c8:07:f0:f5:cf: db:64:03:c6:ff:96:ae:b2:30:5d:0a:c7:c9:7e:63:84:e4:9f: 46:14:e1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNzE5MDUzNzI1WhcNMjUwNzI2MDUzNzI1WjAYMRYwFAYD VQQDEw02ODdiMmYxNS0wNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRIAh6jW8IUTX2lLBU3HZebZ42FgZ+UiI/N+gq4tjkKtw5wpctwFVuaIb9VX 8p3iPV5iUVq6Mhx+xQUiWzYU2gK5lIITB8R1sgHRJHx1Jz2ivCxSBhD0t6N+n2vr OeRw0WTRSmSJH6ZHia3FUZXbBWS/18K3+3wOiggwLOQ8XSqovDqvJYjyQqGj+hyd 6UnRsVfIciU519Pbrl2DL5i+lcAhA3NON5m4TmRedJR9cVJ87XCoPCu6degtOmrw ioDPiQWW2aCV25kA62Mq/fQdC5g5Gf4/bCrxY9m0Q2lVXKEHZ+I/Vr789FuBbQwd 83sLdS69MfIf3YFZJ8+orrJ18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9fZTXZ 0EMTMhiTfRjWRGewQcP0MB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUFjMq82Z02Ia069UC/nBJ2K2apIg5QRT4FevWpYW3FP5cgg4+2Y/H ER89sqUVnvbHjJ+BUayDXintpax4x+/2PP3egJ5PqHGYsYtHKykqSXQ12m2CnGRB c87h5Tvk+oqI9IWyt59B1Hi4/h5MBvgkvRBk/zXA2LuMOUxDF3/Nudw9zb79WGB4 RsTrigidswAHT7WQnoLqD2jVRQYvGDk9CjQIeIRWLtOKK8ymZdF2s6rcTKigATrq 4h1rH4WLutsrezqnOV75fDP9DNShRlKv4HX3XWMkmHc3PFU3GHpK3jzm4SatyAfw 9c/bZAPG/5ausjBdCsfJfmOE5J9GFOHt -----END CERTIFICATE-----Generated at Sun Jul 20 04:26:34 2025 by rpki-client