$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft File: asoRKbI4x6HxeRt1zUmta9at-nc.mft (raw, json) Hash identifier: uvr+otukWOnn5TqH2sHCh3elOsTt3d+1fMNcJkJJ+60= Subject key identifier: 5C:32:1E:DD:3D:D3:80:28:D6:29:13:F5:8F:FD:94:29:CB:B8:3A:B4 Authority key identifier: 6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 Certificate issuer: /CN=A91A6F56/serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft Manifest number: 0D Signing time: Sat 23 Aug 2025 08:20:00 +0000 Manifest this update: Sat 23 Aug 2025 08:20:00 +0000 Manifest next update: Sat 30 Aug 2025 08:20:00 +0000 Files and hashes: 1: asoRKbI4x6HxeRt1zUmta9at-nc.crl (hash: 1ecsNCcUsrHiwjrvP0pICVgYXhVi4gdIeMocjqF+uFs=) 2: 234A6D0E6E8911F0AEEA0B14C4F9AE02.roa (hash: rZBaMYyqsgdUbj2Kc1VUQWs/4+3J/zfoVLydL5l2mZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=6ACA1129B238C7A1F1791B75CD49AD6BD6ADFA77 Validity Not Before: Aug 23 08:20:00 2025 GMT Not After : Aug 30 08:20:00 2025 GMT Subject: CN=68a979b0-e12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:fa:2b:5f:8b:db:3d:f4:bb:69:1b:e4:c2: bc:35:05:9b:7d:fc:39:9d:3e:df:ec:fb:eb:07:70: 67:19:31:88:87:39:4c:81:e0:cc:2d:2c:9a:92:fd: 69:1b:cb:2e:4a:b2:7f:53:b3:b2:1b:d0:c8:b1:ac: c3:15:7c:00:d2:40:ff:91:09:d5:e2:a3:84:ed:ea: 46:1d:c9:1e:5c:61:8c:98:d9:08:c0:f9:6a:ee:41: 6d:24:7f:7c:f5:b6:51:0d:a8:2c:c4:8b:13:24:0c: b4:a6:c5:a6:26:ac:26:d7:75:8a:cf:15:05:68:2f: b1:36:82:79:54:88:df:63:c4:87:e9:ea:d8:d8:f3: ce:b6:0f:2c:f1:51:69:71:8a:d8:16:31:43:41:dc: 2d:64:ac:eb:b6:69:38:8c:8f:90:c1:8d:1a:e0:75: 4b:09:c2:ef:ee:a7:0b:81:83:b6:55:6a:d8:c6:39: a1:03:16:a3:13:a2:6a:1c:3b:62:01:cf:95:8d:39: 27:67:31:39:b2:6b:45:a4:81:04:d9:4e:0f:6d:bd: 15:17:d4:97:26:c8:79:ec:c3:dc:9d:c3:6f:59:fc: 53:ce:27:f4:8b:ad:d8:71:44:c7:2f:6b:aa:4d:3c: 18:9c:4a:fd:97:02:0e:98:ae:29:2d:7e:f6:df:eb: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:1E:DD:3D:D3:80:28:D6:29:13:F5:8F:FD:94:29:CB:B8:3A:B4 X509v3 Authority Key Identifier: keyid:6A:CA:11:29:B2:38:C7:A1:F1:79:1B:75:CD:49:AD:6B:D6:AD:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asoRKbI4x6HxeRt1zUmta9at-nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/913CA6E86E8811F0AD5D1A12C4F9AE02/asoRKbI4x6HxeRt1zUmta9at-nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:aa:16:61:e8:cc:2a:06:15:c4:aa:5a:d6:fe:e1:7c:13: 16:d0:27:a3:67:0d:b3:65:99:b3:ea:cf:bb:bb:d9:81:67:b8: 47:7a:23:11:df:6c:3b:a7:92:ae:42:1c:92:46:49:78:47:92: 40:56:da:82:17:ec:c2:33:b5:df:2c:bf:a6:d7:a2:ed:d2:07: 72:a5:1f:94:0b:1e:40:fa:ec:ac:af:2a:2a:b3:54:a6:51:2c: bb:53:d4:49:c6:92:45:82:a9:3b:c3:31:f9:84:64:1c:93:10: 11:47:6d:9c:02:20:50:f3:4b:d0:41:2a:8e:e5:c0:03:2f:11: bb:25:0d:c1:9a:47:53:14:04:b3:74:40:60:76:8d:b2:6e:61: 52:db:19:67:d2:fa:b3:13:c6:ca:dd:4d:12:b1:b0:e0:d3:17: 52:7e:5c:a2:f3:23:0b:69:f4:a1:34:3b:34:bf:24:3e:b4:b2: 9c:9b:09:0a:6c:0f:4e:9a:de:c6:e2:cf:a7:43:06:b1:7c:64: c2:a2:a2:e6:2c:5a:70:23:d4:91:b5:3e:55:44:e3:2f:6a:28: 41:d8:f0:06:92:69:f5:b7:9d:dd:1b:ca:d1:5b:52:25:58:d0: b5:a6:40:fc:59:3c:6b:98:c4:d0:30:39:68:68:42:f3:6f:74: 27:23:c5:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoNkFDQTExMjlCMjM4QzdBMUYxNzkxQjc1Q0Q0OUFENkJE NkFERkE3NzAeFw0yNTA4MjMwODIwMDBaFw0yNTA4MzAwODIwMDBaMBgxFjAUBgNV BAMTDTY4YTk3OWIwLWUxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWiforX4vbPfS7aRvkwrw1BZt9/DmdPt/s++sHcGcZMYiHOUyB4MwtLJqS/Wkb yy5Ksn9Ts7Ib0MixrMMVfADSQP+RCdXio4Tt6kYdyR5cYYyY2QjA+WruQW0kf3z1 tlENqCzEixMkDLSmxaYmrCbXdYrPFQVoL7E2gnlUiN9jxIfp6tjY8862DyzxUWlx itgWMUNB3C1krOu2aTiMj5DBjRrgdUsJwu/upwuBg7ZVatjGOaEDFqMTomocO2IB z5WNOSdnMTmya0WkgQTZTg9tvRUX1JcmyHnsw9ydw29Z/FPOJ/SLrdhxRMcva6pN PBicSv2XAg6Yriktfvbf69VnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXDIe3T3T gCjWKRP1j/2UKcu4OrQwHwYDVR0jBBgwFoAUasoRKbI4x6HxeRt1zUmta9at+ncw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2LzkxM0NBNkU4NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZIeGVSdDF6VW10YTlhdC1u Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXNvUktiSTR4Nkh4ZVJ0MXpVbXRhOWF0LW5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2LzkxM0NBNkU4NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL2Fzb1JLYkk0eDZI eGVSdDF6VW10YTlhdC1uYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7BqhZh6MwqBhXEqlrW/uF8ExbQJ6NnDbNlmbPqz7u72YFnuEd6IxHf bDunkq5CHJJGSXhHkkBW2oIX7MIztd8sv6bXou3SB3KlH5QLHkD67KyvKiqzVKZR LLtT1EnGkkWCqTvDMfmEZByTEBFHbZwCIFDzS9BBKo7lwAMvEbslDcGaR1MUBLN0 QGB2jbJuYVLbGWfS+rMTxsrdTRKxsODTF1J+XKLzIwtp9KE0OzS/JD60spybCQps D06a3sbiz6dDBrF8ZMKiouYsWnAj1JG1PlVE4y9qKEHY8AaSafW3nd0bytFbUiVY 0LWmQPxZPGuYxNAwOWhoQvNvdCcjxQM= -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:33 2025 by rpki-client