$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft File: nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft (raw, json) Hash identifier: d2OpsRekGP8gOW1aFRdhQXVYbNHNlgnuMDqG3QYC0U8= Subject key identifier: 4E:52:9A:12:C5:03:0C:5F:C0:A9:C6:A1:D2:9A:DF:B1:09:B6:6D:98 Authority key identifier: 9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B Certificate issuer: /CN=A91538E7/serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft Manifest number: 0808 Signing time: Thu 18 Sep 2025 21:20:18 +0000 Manifest this update: Thu 18 Sep 2025 21:20:17 +0000 Manifest next update: Thu 25 Sep 2025 21:20:17 +0000 Files and hashes: 1: nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl (hash: 7E71yTCOepRe1f7OnLtbxXKYYROJkjAbl59rFlEhNo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=9C1F332C125545782CE20C6EF671AF1D3FC9374B Validity Not Before: Sep 18 21:20:17 2025 GMT Not After : Sep 25 21:20:17 2025 GMT Subject: CN=68cc7791-da56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:85:9b:da:5a:49:1b:c2:4a:42:24:a6:9d: 2d:68:57:47:14:07:37:09:7c:98:a2:b7:e7:d6:ef: 1b:aa:41:db:08:79:ed:35:93:ff:bb:ca:ca:b1:0a: ed:44:07:3c:e4:88:f7:20:e4:8d:43:ca:2a:72:f1: 2b:71:f4:ff:f9:45:4a:1a:ee:db:8e:8d:5a:a2:9a: 72:6b:52:45:bc:54:94:ae:23:95:d0:72:ca:60:ca: e3:47:bc:28:b7:d3:d5:a0:36:df:5d:dc:f0:63:d9: 4c:2a:de:ca:2a:ae:e6:97:be:8b:c4:af:3e:cd:cc: 55:41:ae:23:9a:2b:1a:da:f4:65:e1:b1:53:91:a0: ff:7f:9f:36:4b:5f:7c:b3:84:14:28:17:1e:4b:96: 62:8a:f1:4e:0f:83:40:ec:b6:e1:a5:42:69:b5:a0: 2a:76:cb:61:53:52:70:62:d7:c3:77:85:d1:f9:64: 27:b1:50:f8:d4:21:f0:97:2d:24:9e:6b:b2:c9:59: 89:2d:ab:a5:f3:f1:87:20:f0:15:b9:25:29:03:78: 52:9b:6e:b1:58:25:31:07:45:ac:8b:65:d3:1c:14: 9c:11:a4:f3:a5:22:da:89:11:03:3f:90:e7:4b:77: 1d:f7:28:17:88:15:38:db:49:f9:95:f2:2c:f7:5a: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:9A:12:C5:03:0C:5F:C0:A9:C6:A1:D2:9A:DF:B1:09:B6:6D:98 X509v3 Authority Key Identifier: keyid:9C:1F:33:2C:12:55:45:78:2C:E2:0C:6E:F6:71:AF:1D:3F:C9:37:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nB8zLBJVRXgs4gxu9nGvHT_JN0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/nB8zLBJVRXgs4gxu9nGvHT_JN0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a3:b3:e3:41:26:1c:60:6c:35:5c:4e:b9:c8:ea:52:f0:ad: 72:46:e4:72:79:96:54:34:98:67:89:9c:a9:a6:e6:4d:1c:6e: c2:2c:28:36:73:af:8f:23:77:44:e4:e9:ae:31:62:41:7d:60: e3:ab:ad:d9:b3:20:6a:f3:ab:bd:ea:f4:82:66:6b:b7:35:8a: 5d:53:f1:24:b0:df:ba:ba:30:c0:2a:c4:7e:4a:f3:58:aa:67: 29:25:5b:3b:50:88:6b:75:dc:e0:25:7b:b6:4f:c4:0d:d4:23: 2a:9c:05:cc:58:6f:0d:51:86:27:3e:79:eb:62:06:63:3a:1e: 26:2a:31:81:69:5b:aa:44:13:ea:bc:06:91:02:ab:70:a7:d4: e4:87:96:7e:c7:50:3e:1a:a7:5a:68:4e:04:ba:72:9c:e9:98: c5:e9:f6:ea:f0:25:2a:56:04:1d:89:0d:16:ef:37:4b:85:21: bd:31:24:24:3e:26:0c:e4:a9:29:73:45:e7:ac:4d:cb:b2:11: 71:39:b1:7c:f4:0a:99:19:31:59:72:8b:48:fe:e7:ba:38:b7: 6c:44:7c:6e:71:ee:95:98:e7:07:c3:72:68:f3:79:92:2d:ba: 4c:e0:a3:72:cf:35:25:32:89:00:8d:12:53:09:35:43:cc:cc: 7e:7a:bb:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4RTcxMTAvBgNVBAUTKDlDMUYzMzJDMTI1NTQ1NzgyQ0UyMEM2RUY2NzFBRjFE M0ZDOTM3NEIwHhcNMjUwOTE4MjEyMDE3WhcNMjUwOTI1MjEyMDE3WjAYMRYwFAYD VQQDEw02OGNjNzc5MS1kYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5CFm9paSRvCSkIkpp0taFdHFAc3CXyYorfn1u8bqkHbCHntNZP/u8rKsQrt RAc85Ij3IOSNQ8oqcvErcfT/+UVKGu7bjo1aoppya1JFvFSUriOV0HLKYMrjR7wo t9PVoDbfXdzwY9lMKt7KKq7ml76LxK8+zcxVQa4jmisa2vRl4bFTkaD/f582S198 s4QUKBceS5ZiivFOD4NA7LbhpUJptaAqdsthU1JwYtfDd4XR+WQnsVD41CHwly0k nmuyyVmJLaul8/GHIPAVuSUpA3hSm26xWCUxB0Wsi2XTHBScEaTzpSLaiREDP5Dn S3cd9ygXiBU420n5lfIs91pWPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5SmhLF AwxfwKnGodKa37EJtm2YMB8GA1UdIwQYMBaAFJwfMywSVUV4LOIMbvZxrx0/yTdL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9CRjQwNEE1QTAy NjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJYZ3M0Z3h1OW5HdkhUX0pO MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25COHpMQkpWUlhnczRneHU5bkd2SFRfSk4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzhFNy9CRjQwNEE1QTAyNjcxMUVCOEUxQzMwMUFDNEY5QUUwMi9uQjh6TEJKVlJY Z3M0Z3h1OW5HdkhUX0pOMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmo7PjQSYcYGw1XE65yOpS8K1yRuRyeZZUNJhniZyppuZNHG7CLCg2 c6+PI3dE5OmuMWJBfWDjq63ZsyBq86u96vSCZmu3NYpdU/EksN+6ujDAKsR+SvNY qmcpJVs7UIhrddzgJXu2T8QN1CMqnAXMWG8NUYYnPnnrYgZjOh4mKjGBaVuqRBPq vAaRAqtwp9Tkh5Z+x1A+GqdaaE4EunKc6ZjF6fbq8CUqVgQdiQ0W7zdLhSG9MSQk PiYM5Kkpc0XnrE3LshFxObF89AqZGTFZcotI/ue6OLdsRHxuce6VmOcHw3Jo83mS LbpM4KNyzzUlMokAjRJTCTVDzMx+eruK -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:47 2025 by rpki-client