$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: h3g5PSwFNkfVbea8+r8QqGL36+AY/MgBIU4W+/RF0tQ= Subject key identifier: 9F:71:31:05:C8:29:7C:A9:C8:40:B8:44:D9:5A:7E:B9:51:9F:C9:B0 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 10BA Signing time: Sat 26 Jul 2025 17:23:51 +0000 Manifest this update: Sat 26 Jul 2025 17:23:51 +0000 Manifest next update: Sat 02 Aug 2025 17:23:51 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: lvZBSnG6EJs4ZjDtqu7jvujFEG9hM+ij93y02OVACVI=) 2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=) 3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=) 4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=) 5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=) 6: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=) 7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=) 8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=) 9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=) 10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=) 11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 17:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4390 (0x1126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Jul 26 17:23:51 2025 GMT Not After : Aug 2 17:23:51 2025 GMT Subject: CN=68850f27-a609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d9:d3:03:c8:94:e6:b9:01:3c:e7:65:43:53: b0:7a:4f:c9:b9:72:79:9d:86:1d:e7:c6:d0:25:6e: 23:90:da:ad:fa:21:79:20:ef:07:ee:84:1c:50:0c: 3f:ef:bd:d4:73:1e:31:3c:65:90:6c:14:76:e4:3e: fc:40:33:a2:4d:6a:6a:1b:2e:a5:c5:4c:19:c0:e4: 3f:2f:b0:98:59:6c:36:89:eb:3b:90:44:42:5f:4c: 4c:b8:c8:0a:6d:25:d2:1b:c2:48:55:21:03:76:bb: 41:87:41:fb:cf:16:0b:d4:e7:62:d4:e0:e8:90:81: e5:67:8f:fc:c3:18:e0:c7:fa:28:c9:d7:3d:02:db: dc:e4:41:6a:e5:d7:bb:f4:d4:6e:21:73:9a:c4:f9: 5d:21:6b:f9:d0:89:0e:23:9f:2a:9b:a1:4f:7c:49: cd:c7:40:b3:02:46:40:7e:a5:67:94:7c:5b:6c:f7: 1f:88:43:34:a5:e0:af:29:ff:c5:29:87:6b:c9:15: 43:58:55:c8:50:01:a5:7b:5c:e3:55:df:d1:03:dd: 1e:00:7d:46:35:20:b1:c7:86:bd:fb:51:f9:04:53: 71:cc:49:85:7c:89:9a:17:05:46:de:37:b1:c1:6b: c3:a2:d9:71:99:c5:47:8e:ac:5b:86:8b:20:3e:91: 59:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:31:05:C8:29:7C:A9:C8:40:B8:44:D9:5A:7E:B9:51:9F:C9:B0 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f8:04:5d:d6:33:9e:43:1c:c8:4f:04:39:ec:88:91:dd:17: 8a:72:0a:b3:d3:d4:74:ab:c1:94:9d:6c:6b:e6:29:05:b8:cf: 36:46:96:4d:b5:b1:53:bb:08:7d:7c:ac:86:f8:8a:6a:fd:e8: dc:b4:20:dd:10:c3:5c:44:2a:1a:d4:99:c1:42:32:cf:45:a1: aa:fb:53:4e:23:11:63:17:1a:f9:c6:18:a5:82:19:20:e5:12: 82:35:d4:d0:76:e1:50:c0:c9:78:42:66:f5:3b:15:bc:f3:68: 48:82:f8:c4:f8:a3:6b:30:ea:df:7a:af:d4:2a:dc:a4:3a:66: 84:99:f1:8f:0b:ba:ab:38:52:5d:03:6b:21:99:e1:0c:12:76: 49:19:58:f8:9f:3f:c2:09:00:fc:90:4a:5b:12:4d:c1:e4:a5: 9c:eb:70:17:35:4b:74:c0:5b:fe:97:5d:0e:98:ad:c7:a6:2e: c3:24:e7:49:76:25:ff:51:7a:92:5b:d2:e1:92:b0:69:c6:9c: fd:23:fa:63:3f:e3:6b:8e:eb:f5:a6:f9:5b:3c:1e:2b:08:50: a3:e0:ef:64:7f:c3:44:24:3a:79:5b:cb:ff:66:b7:e6:0d:fd: e0:c2:0e:fa:20:75:35:b6:c6:f7:e4:db:df:06:76:16:0d:2c: 87:c7:46:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwNzI2MTcyMzUxWhcNMjUwODAyMTcyMzUxWjAYMRYwFAYD VQQDEw02ODg1MGYyNy1hNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NnTA8iU5rkBPOdlQ1Owek/JuXJ5nYYd58bQJW4jkNqt+iF5IO8H7oQcUAw/ 773Ucx4xPGWQbBR25D78QDOiTWpqGy6lxUwZwOQ/L7CYWWw2ies7kERCX0xMuMgK bSXSG8JIVSEDdrtBh0H7zxYL1Odi1ODokIHlZ4/8wxjgx/ooydc9Atvc5EFq5de7 9NRuIXOaxPldIWv50IkOI58qm6FPfEnNx0CzAkZAfqVnlHxbbPcfiEM0peCvKf/F KYdryRVDWFXIUAGle1zjVd/RA90eAH1GNSCxx4a9+1H5BFNxzEmFfImaFwVG3jex wWvDotlxmcVHjqxbhosgPpFZ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9xMQXI KXypyEC4RNlafrlRn8mwMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+ARd1jOeQxzITwQ57IiR3ReKcgqz09R0q8GUnWxr5ikFuM82RpZN tbFTuwh9fKyG+Ipq/ejctCDdEMNcRCoa1JnBQjLPRaGq+1NOIxFjFxr5xhilghkg 5RKCNdTQduFQwMl4Qmb1OxW882hIgvjE+KNrMOrfeq/UKtykOmaEmfGPC7qrOFJd A2shmeEMEnZJGVj4nz/CCQD8kEpbEk3B5KWc63AXNUt0wFv+l10OmK3Hpi7DJOdJ diX/UXqSW9LhkrBpxpz9I/pjP+Nrjuv1pvlbPB4rCFCj4O9kf8NEJDp5W8v/Zrfm Df3gwg76IHU1tsb35NvfBnYWDSyHx0aI -----END CERTIFICATE-----Generated at Sun Jul 27 06:12:46 2025 by rpki-client