$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: cbhpNnr+WxzEJy4yBikC9SLyC/r4iAMZnjFDPG6CF/w= Subject key identifier: 2F:B1:E2:54:1C:FE:1E:70:F4:B6:D1:88:50:CA:CC:CF:F8:12:EC:76 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 57 Signing time: Thu 21 Aug 2025 07:22:58 +0000 Manifest this update: Thu 21 Aug 2025 07:22:57 +0000 Manifest next update: Thu 28 Aug 2025 07:22:57 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: obfJgJkFOFj40HC3QXAadckxkG4cmvzqkKfEiXl/T6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Aug 21 07:22:57 2025 GMT Not After : Aug 28 07:22:57 2025 GMT Subject: CN=68a6c951-6678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:85:4b:f3:83:4e:33:cf:93:39:f0:37:7f: 0f:56:2b:5d:6d:1e:91:75:98:e2:52:c5:b5:77:cc: 31:6c:03:4b:61:ca:ed:fd:91:69:54:24:83:92:a2: a4:71:c3:46:af:ec:b5:6f:2c:2f:65:88:dd:e9:88: a5:87:ea:1b:18:dc:6c:65:a4:41:0d:3a:91:f3:6b: cf:5f:a1:a5:99:81:da:0d:35:39:f0:a2:9a:cf:06: 6d:05:d2:0d:5f:3f:e1:1b:3c:d7:7e:14:c5:4a:09: b1:6b:cf:8e:95:d6:ea:87:14:e2:db:a2:a2:3a:c6: 2e:bc:45:61:f4:4f:6b:93:ab:ed:57:d4:2b:18:ea: 81:f9:2a:2e:8c:72:d4:c9:2d:c3:40:06:05:c6:c8: 9a:ed:94:64:35:96:d4:b3:b0:c4:b6:09:da:28:a9: 14:00:f2:d2:a2:cc:dd:75:8f:79:ac:15:f1:fd:31: 61:60:ef:b7:9a:20:86:06:30:45:87:b7:e5:92:03: 00:5e:7c:46:a3:85:a8:d2:76:05:7e:52:f8:d4:3a: 00:41:d2:4b:50:c3:c4:0b:32:04:bc:1b:b7:ac:01: 91:7b:85:b8:5a:99:79:4f:b1:f6:94:37:bd:77:9b: 93:42:48:40:fe:65:a9:a5:79:e5:22:70:7b:29:bb: 80:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:E2:54:1C:FE:1E:70:F4:B6:D1:88:50:CA:CC:CF:F8:12:EC:76 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9a:0d:d6:a7:18:d7:0f:91:79:82:5f:f8:e5:f3:e6:21:a7: 66:57:13:94:24:16:1b:d0:91:a6:05:36:8f:34:b7:82:22:ec: f9:2e:a8:51:36:a8:9a:07:35:c2:53:b2:bc:0c:a9:b6:2c:ed: eb:c1:43:a8:9e:ad:a3:16:5a:e0:b3:69:57:f1:26:f5:f6:42: 65:17:54:b2:57:cd:7d:60:b3:d6:0a:4d:73:ca:bd:ef:46:69: 2c:7d:d5:a6:55:d1:42:d2:2b:7b:7e:0e:e5:4c:53:ad:97:3f: f4:ac:87:d7:76:e4:7b:dc:eb:f1:92:58:da:8e:13:33:a4:be: 45:bb:68:bf:8e:71:37:a5:8f:e0:1a:49:27:d9:24:88:6d:f2: f0:88:2e:eb:3e:de:be:07:cc:f9:eb:5d:79:27:dd:c0:99:55: 7d:6e:d9:68:35:24:46:52:ba:b3:c1:9e:7e:3b:83:ab:6a:29: bb:d4:eb:38:d9:8b:35:2f:d1:f7:4c:90:d5:97:34:3c:f4:fb: ef:0d:6b:33:4a:01:fe:2b:85:df:34:50:de:28:4e:5e:63:4d: 6f:a6:2b:bd:d3:0a:fb:73:e9:7f:99:a5:92:c1:89:33:64:e7: b3:22:38:64:8f:43:c2:2d:01:b1:46:e2:82:6d:b0:fb:bb:bd: 46:47:c7:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTA4MjEwNzIyNTdaFw0yNTA4MjgwNzIyNTdaMBgxFjAUBgNV BAMTDTY4YTZjOTUxLTY2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZFoVL84NOM8+TOfA3fw9WK11tHpF1mOJSxbV3zDFsA0thyu39kWlUJIOSoqRx w0av7LVvLC9liN3piKWH6hsY3GxlpEENOpHza89foaWZgdoNNTnwoprPBm0F0g1f P+EbPNd+FMVKCbFrz46V1uqHFOLboqI6xi68RWH0T2uTq+1X1CsY6oH5Ki6MctTJ LcNABgXGyJrtlGQ1ltSzsMS2CdooqRQA8tKizN11j3msFfH9MWFg77eaIIYGMEWH t+WSAwBefEajhajSdgV+UvjUOgBB0ktQw8QLMgS8G7esAZF7hbhamXlPsfaUN713 m5NCSED+ZamleeUicHspu4CTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL7HiVBz+ HnD0ttGIUMrMz/gS7HYwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmaDdanGNcPkXmCX/jl8+Yhp2ZXE5QkFhvQkaYFNo80t4Ii7PkuqFE2 qJoHNcJTsrwMqbYs7evBQ6ieraMWWuCzaVfxJvX2QmUXVLJXzX1gs9YKTXPKve9G aSx91aZV0ULSK3t+DuVMU62XP/Ssh9d25Hvc6/GSWNqOEzOkvkW7aL+OcTelj+Aa SSfZJIht8vCILus+3r4HzPnrXXkn3cCZVX1u2Wg1JEZSurPBnn47g6tqKbvU6zjZ izUv0fdMkNWXNDz0++8NazNKAf4rhd80UN4oTl5jTW+mK73TCvtz6X+ZpZLBiTNk 57MiOGSPQ8ItAbFG4oJtsPu7vUZHx4g= -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:02 2025 by rpki-client