$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft File: Nu6KQBMF6zjijYal2392KKq34k8.mft (raw, json) Hash identifier: gf0n6yFciuY/BZxztK5LBeGe93SkAX+dFa8IhYkkUXM= Subject key identifier: C7:15:3D:73:A4:C1:7A:9E:C1:4B:01:A9:D6:59:94:36:15:11:81:97 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft Manifest number: 10D6 Signing time: Thu 18 Sep 2025 17:28:12 +0000 Manifest this update: Thu 18 Sep 2025 17:28:11 +0000 Manifest next update: Thu 25 Sep 2025 17:28:11 +0000 Files and hashes: 1: Nu6KQBMF6zjijYal2392KKq34k8.crl (hash: JCjDXtdAUy4yIKAUTPIVy+AzIXPbuqOtdSOyuAkFKe0=) 2: 264DBA882E9411E9A7232A19C4F9AE02.roa (hash: R1CUbIu0V+HE4f06nI4AoF8weg5+WJaRb7OLoB74u3o=) 3: 8F5856362E9511E9896EFA1DC4F9AE02.roa (hash: JSG6xv2uqNAgwOpDXcHQxv8WbhIpG22unWVbGkO466o=) 4: 53DFF8EC2E9111E999636910C4F9AE02.roa (hash: 6mj2ePigEKlPzc3f7+eTQsUuSCZHP+3UsHzZtRH/e3g=) 5: 8CD1AEC62E9511E9896EFA1DC4F9AE02.roa (hash: AQJjv8c1H+P8QI0s3FB/4mPX+TV6GerHGXja71yYLBo=) 6: 52685F222E9111E999636910C4F9AE02.roa (hash: tnJuonmKS/V0uoywfbn8ky35GlWjycjl3empqFomJY8=) 7: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (hash: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw=) 8: 81CBCECA0BFF11EE9AE0F676C4F9AE02.roa (hash: /vrezSo6RJ5dq1cFDK2anelkL8dBqwcaNrTPSxP8eN8=) 9: 5870952EC53011EA98D1D651C4F9AE02.roa (hash: aDxTmBiu7r/Tn9jcjNLK8UcWaXq5NN3ow+MDjn+I+ck=) 10: 8D76CA462E9511E9896EFA1DC4F9AE02.roa (hash: MmpvHOBJX6/TYN9r3lrc9Z7dr+vQVfQyHD+RNXiHs1I=) 11: 8EA288F62E9511E9896EFA1DC4F9AE02.roa (hash: S5sgxNBi0p+O5VGwcCA6mYFpVmBWw6J0mLdcaJC7l/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4418 (0x1142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: Sep 18 17:28:11 2025 GMT Not After : Sep 25 17:28:11 2025 GMT Subject: CN=68cc412c-5146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:3c:d7:f3:51:69:6d:60:43:b9:31:9a:70: df:9f:b5:ea:f5:ed:86:a3:e3:56:c5:17:75:0a:10: 68:80:6d:a0:8b:b4:cf:6d:f3:2d:38:e7:02:7d:75: 57:b9:ae:3f:65:da:27:92:34:27:d4:3b:48:20:f1: e0:2b:fd:0c:b6:ed:1b:1b:02:c4:0f:bc:44:be:52: 98:01:dd:0c:0d:f1:b1:f7:54:1f:d8:47:c6:d3:05: b1:2b:fd:f4:b0:bb:39:cf:af:a4:21:17:49:f4:43: 97:5a:8d:52:1e:78:00:56:5c:4b:96:49:7e:22:71: a4:4f:e3:a0:11:4f:0d:02:c0:bc:06:4e:99:5e:d5: 04:ff:49:d6:aa:eb:27:c4:54:e7:f4:59:1d:e3:d5: 33:56:16:e6:31:18:ef:97:6a:df:49:7a:99:6b:f6: 2a:46:8e:26:70:e7:14:c1:ae:e6:53:1b:1e:2f:a6: 13:87:e5:50:14:26:c7:08:eb:93:6c:c0:35:7c:44: 7b:80:ae:25:2d:c8:dc:d1:f1:b9:58:02:5a:42:b8: c0:3e:5d:c7:64:36:47:09:31:b8:b5:8a:aa:0d:55: 90:94:4a:74:b7:2c:85:06:e6:f2:65:2f:b6:b8:99: 67:1e:af:6f:2c:7d:54:77:c1:d3:a2:71:32:b8:d4: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:15:3D:73:A4:C1:7A:9E:C1:4B:01:A9:D6:59:94:36:15:11:81:97 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a9:8a:7c:34:f5:2b:0f:bd:14:d5:c6:c2:75:f1:92:d9:33: bb:72:b5:5c:fe:93:d2:c9:3b:a7:e6:b5:45:86:51:78:91:ce: 6c:09:d9:af:2c:49:0b:47:b4:f7:62:32:b4:19:bd:0f:26:85: 4e:e2:dd:f0:10:84:ed:83:28:6c:7b:f7:b4:aa:84:a2:fc:c7: d0:cf:f7:10:4d:ce:e7:98:df:43:a5:ae:1b:32:2f:28:6f:8d: 2f:5d:e4:43:bb:81:5a:93:fe:5f:c0:0b:3d:7b:1e:46:11:72: 26:7a:5a:9e:27:c0:48:d2:1b:97:25:b5:32:68:b6:25:56:54: 62:d0:d3:08:bf:b4:c4:5c:ce:a6:38:17:4b:c2:13:c6:b8:42: 6a:b5:9a:75:11:ba:c9:71:d2:60:5c:dc:c3:bf:df:ea:3e:ed: 04:2e:24:10:46:13:f0:83:85:ed:b8:93:b1:a8:20:e4:75:cd: 89:71:ae:5c:00:e0:1e:c2:f9:b0:d9:19:cb:4f:25:89:39:df: bf:32:74:7d:8d:4e:5d:c7:d6:e9:91:11:a8:fe:df:42:be:ff: c2:f9:50:4f:37:03:24:b0:31:7b:e8:e8:d4:ca:2f:f7:10:b2: b4:96:04:d7:05:b5:52:f3:28:7c:01:39:54:73:ad:70:1c:83: 4c:01:66:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwOTE4MTcyODExWhcNMjUwOTI1MTcyODExWjAYMRYwFAYD VQQDEw02OGNjNDEyYy01MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuw81/NRaW1gQ7kxmnDfn7Xq9e2Go+NWxRd1ChBogG2gi7TPbfMtOOcCfXVX ua4/ZdonkjQn1DtIIPHgK/0Mtu0bGwLED7xEvlKYAd0MDfGx91Qf2EfG0wWxK/30 sLs5z6+kIRdJ9EOXWo1SHngAVlxLlkl+InGkT+OgEU8NAsC8Bk6ZXtUE/0nWqusn xFTn9Fkd49UzVhbmMRjvl2rfSXqZa/YqRo4mcOcUwa7mUxseL6YTh+VQFCbHCOuT bMA1fER7gK4lLcjc0fG5WAJaQrjAPl3HZDZHCTG4tYqqDVWQlEp0tyyFBubyZS+2 uJlnHq9vLH1Ud8HTonEyuNTF3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcVPXOk wXqewUsBqdZZlDYVEYGXMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlCQy84OTI4OTczMDJFOTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6 amlqWWFsMjM5MktLcTM0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIqYp8NPUrD70U1cbCdfGS2TO7crVc/pPSyTun5rVFhlF4kc5sCdmv LEkLR7T3YjK0Gb0PJoVO4t3wEITtgyhse/e0qoSi/MfQz/cQTc7nmN9Dpa4bMi8o b40vXeRDu4Fak/5fwAs9ex5GEXImelqeJ8BI0huXJbUyaLYlVlRi0NMIv7TEXM6m OBdLwhPGuEJqtZp1EbrJcdJgXNzDv9/qPu0ELiQQRhPwg4XtuJOxqCDkdc2Jca5c AOAewvmw2RnLTyWJOd+/MnR9jU5dx9bpkRGo/t9Cvv/C+VBPNwMksDF76OjUyi/3 ELK0lgTXBbVS8yh8ATlUc61wHINMAWY1 -----END CERTIFICATE-----Generated at Thu Sep 18 23:32:20 2025 by rpki-client