$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft File: cNpFkZHpBoa9sKxHq9owqcPhdPo.mft (raw, json) Hash identifier: I/O6WMDDmNh3SAIoDL28LqQ+8L4N0+gmDbTvR+ikDSM= Subject key identifier: 5D:AF:10:6E:6B:1D:08:34:46:91:CD:BD:1D:3E:F8:C5:83:8C:2C:E8 Authority key identifier: 70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA Certificate issuer: /CN=A91AF145/serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft Manifest number: 0190 Signing time: Sun 07 Sep 2025 03:57:39 +0000 Manifest this update: Sun 07 Sep 2025 03:57:39 +0000 Manifest next update: Sun 14 Sep 2025 03:57:39 +0000 Files and hashes: 1: cNpFkZHpBoa9sKxHq9owqcPhdPo.crl (hash: NY10sTfiGyJsn53FftjbOjnCY/qNZkglEMS/yLRozd8=) 2: 43E9CB90DFF511EF8E4E3982C4F9AE02.roa (hash: ed3VnRz1sRChg/cFQmGXFi6QslMtcDU5X1xXHCQiW6k=) 3: 971B23D236EA11EE802E9246C4F9AE02.roa (hash: 4S5HT3Umab8tv1JR8LX9cjuccjEduaZGTp680hfQmts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF145, serialNumber=70DA459191E90686BDB0AC47ABDA30A9C3E174FA Validity Not Before: Sep 7 03:57:39 2025 GMT Not After : Sep 14 03:57:39 2025 GMT Subject: CN=68bd02b3-1f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:36:57:36:1a:bf:d6:e6:c1:16:32:e8:80: 26:ce:3f:5d:28:ab:89:be:f5:7e:bb:50:f7:69:b9: b6:4d:94:ec:7c:6b:14:87:1e:62:75:99:ec:27:3f: 72:7d:8b:25:53:e2:34:71:77:83:02:d5:24:bb:e9: 46:8d:37:2a:dd:97:a3:49:d1:08:49:97:2e:36:bb: 80:05:af:cb:fd:17:05:4a:d3:8c:d7:a0:1f:ee:f2: ca:c4:92:60:01:48:ba:1c:85:11:1b:7d:ec:55:9e: a7:f6:e1:eb:1d:bc:ea:19:77:a0:cb:e5:4b:a5:74: 11:ec:06:ca:22:16:b3:10:1b:69:ec:aa:66:e8:f0: 7c:de:9e:92:a2:c8:74:27:d5:3f:03:9a:b8:24:38: ce:ea:06:61:70:46:a7:7e:d5:b8:ac:09:8a:03:5f: e4:c4:04:ae:ea:c8:99:42:8b:8e:a6:0d:9b:18:ca: 28:12:de:bc:ad:d6:70:ab:71:af:4f:94:f2:f8:2e: 3a:7e:81:99:6b:3a:71:e8:01:e3:47:bb:d9:2c:03: 39:81:0a:7f:e4:d5:83:72:8a:83:a3:9b:7a:bb:e3: 94:26:27:c6:84:5e:8b:a4:ad:5c:92:b0:72:49:6f: 11:8a:af:aa:bd:34:e2:c1:e2:a8:49:45:2b:8e:95: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:10:6E:6B:1D:08:34:46:91:CD:BD:1D:3E:F8:C5:83:8C:2C:E8 X509v3 Authority Key Identifier: keyid:70:DA:45:91:91:E9:06:86:BD:B0:AC:47:AB:DA:30:A9:C3:E1:74:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNpFkZHpBoa9sKxHq9owqcPhdPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF145/278073CE36EA11EEAE10AA45C4F9AE02/cNpFkZHpBoa9sKxHq9owqcPhdPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a1:92:a8:02:66:40:7e:24:23:88:25:50:af:ad:5a:66:cf: b4:2e:db:56:d0:f5:ef:ca:a3:da:8c:44:93:41:37:5d:0f:5b: c0:84:29:fc:a9:f7:68:50:9c:21:2f:b8:eb:d9:f6:3a:42:9d: a5:db:54:e9:8d:86:9e:95:3a:81:33:ba:65:7e:a2:2f:22:53: 77:ba:12:a0:9a:47:71:0b:b0:54:5c:01:a8:e1:bc:0c:ae:55: b5:bf:5a:20:f0:89:02:01:71:1e:a5:ac:1d:a3:b4:60:e0:d3: fb:0e:21:2f:b1:7a:50:5c:ef:91:4f:04:44:3b:85:ab:74:f0: be:0e:10:48:c3:8b:84:a6:3e:34:30:37:c3:7c:c0:8f:1f:67: 80:30:2a:49:3f:84:33:33:d7:05:29:68:75:68:60:2e:3e:1d: 7a:a5:3f:44:a6:c7:d2:6e:be:f0:5e:c3:b5:f1:15:8b:24:bb: b9:55:a3:85:6b:a6:7b:3b:f2:3c:91:62:4a:34:71:e4:d7:a4: 7a:38:78:13:7a:e0:0f:82:4a:96:23:97:44:4d:35:e1:09:d7: 0a:d6:6f:bc:45:1f:60:f9:15:4b:ff:5c:e8:bb:1f:55:49:5e: 65:a5:23:fa:7d:fa:ec:30:cb:97:b9:b6:e7:c3:f0:cd:6f:83: 89:7d:a3:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNDUxMTAvBgNVBAUTKDcwREE0NTkxOTFFOTA2ODZCREIwQUM0N0FCREEzMEE5 QzNFMTc0RkEwHhcNMjUwOTA3MDM1NzM5WhcNMjUwOTE0MDM1NzM5WjAYMRYwFAYD VQQDEw02OGJkMDJiMy0xZjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/I2VzYav9bmwRYy6IAmzj9dKKuJvvV+u1D3abm2TZTsfGsUhx5idZnsJz9y fYslU+I0cXeDAtUku+lGjTcq3ZejSdEISZcuNruABa/L/RcFStOM16Af7vLKxJJg AUi6HIURG33sVZ6n9uHrHbzqGXegy+VLpXQR7AbKIhazEBtp7Kpm6PB83p6Sosh0 J9U/A5q4JDjO6gZhcEanftW4rAmKA1/kxASu6siZQouOpg2bGMooEt68rdZwq3Gv T5Ty+C46foGZazpx6AHjR7vZLAM5gQp/5NWDcoqDo5t6u+OUJifGhF6LpK1ckrBy SW8Riq+qvTTiweKoSUUrjpVWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2vEG5r HQg0RpHNvR0++MWDjCzoMB8GA1UdIwQYMBaAFHDaRZGR6QaGvbCsR6vaMKnD4XT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE0NS8yNzgwNzNDRTM2 RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJvYTlzS3hIcTlvd3FjUGhk UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOcEZrWkhwQm9hOXNLeEhxOW93cWNQaGRQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE0NS8yNzgwNzNDRTM2RUExMUVFQUUxMEFBNDVDNEY5QUUwMi9jTnBGa1pIcEJv YTlzS3hIcTlvd3FjUGhkUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1oZKoAmZAfiQjiCVQr61aZs+0LttW0PXvyqPajESTQTddD1vAhCn8 qfdoUJwhL7jr2fY6Qp2l21TpjYaelTqBM7plfqIvIlN3uhKgmkdxC7BUXAGo4bwM rlW1v1og8IkCAXEepawdo7Rg4NP7DiEvsXpQXO+RTwREO4WrdPC+DhBIw4uEpj40 MDfDfMCPH2eAMCpJP4QzM9cFKWh1aGAuPh16pT9EpsfSbr7wXsO18RWLJLu5VaOF a6Z7O/I8kWJKNHHk16R6OHgTeuAPgkqWI5dETTXhCdcK1m+8RR9g+RVL/1zoux9V SV5lpSP6ffrsMMuXubbnw/DNb4OJfaM4 -----END CERTIFICATE-----Generated at Mon Sep 8 02:17:50 2025 by rpki-client