$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: AJhNyPuSNHHzNcyYYXnN0VrWckXeJXJ/3XYO4X6zxTY= Subject key identifier: 5C:12:BA:46:A0:52:94:51:88:43:2B:CF:D5:59:11:05:2A:BC:85:9D Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: B5 Signing time: Fri 05 Sep 2025 06:28:50 +0000 Manifest this update: Fri 05 Sep 2025 06:28:49 +0000 Manifest next update: Fri 12 Sep 2025 06:28:49 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: 5LbNgBWVK0QJyGWd5p5h/fKIoXNcJVJfMhb3DjZZyeU=) 2: 31E969BE843211F09C15376BC4F9AE02.roa (hash: 5GCLZJOoevw5AXsBc/ST6XiH+CgQ8jK0uqRV+sZIszo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Sep 5 06:28:49 2025 GMT Not After : Sep 12 06:28:49 2025 GMT Subject: CN=68ba8322-a76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:82:1d:be:8f:d3:81:22:c0:14:86:f6:bd:59: 78:ab:30:d0:15:6e:ec:b2:68:31:c5:47:4a:4d:60: f7:70:73:67:35:dc:20:10:de:f6:de:dc:32:d7:d0: e4:7b:b5:78:53:30:bf:95:c4:72:88:66:4b:95:16: 46:a4:f3:98:2f:6f:47:1e:18:82:e9:46:c2:e1:22: 54:95:1a:dc:47:71:28:f6:e0:60:c4:c9:9c:8e:09: 02:9f:0d:68:c1:41:cc:bb:8e:72:a4:0e:6e:a0:0f: 43:ce:1c:d5:1e:b3:f7:c4:af:1f:22:27:e7:4e:c2: 50:06:4d:72:54:81:73:a9:3c:84:b8:09:ae:6c:09: e6:a6:33:f2:02:bf:bb:b6:58:3c:34:29:9c:d9:b5: b5:f7:7d:d6:2e:f8:93:15:8e:29:2a:7c:c9:f2:06: 74:5a:e9:17:d7:ee:b9:86:dc:17:dc:a0:ce:db:38: e2:48:b3:d9:05:7b:06:85:fe:12:c4:fc:a1:b9:82: 50:7c:97:fd:d1:a3:e5:fb:a5:f7:2c:43:fc:08:2b: 2b:95:10:12:95:a1:1b:07:83:70:14:c0:11:91:c3: 7d:72:0c:b9:52:35:76:31:f4:4d:88:61:a3:6d:c1: 38:be:ca:aa:d9:3f:2e:49:8a:52:b8:82:47:ab:9d: 1b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:BA:46:A0:52:94:51:88:43:2B:CF:D5:59:11:05:2A:BC:85:9D X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:50:f2:c3:f6:25:47:a0:96:c8:58:18:82:a9:90:18:e5:4a: 90:97:da:90:2c:b2:a3:1c:a0:1e:60:93:6b:49:c4:00:a7:79: be:9e:ee:0b:92:94:15:f9:1c:a3:d9:92:70:12:a4:15:46:c6: 03:67:2b:52:08:10:a1:8f:a5:a0:88:2b:a8:d4:1f:78:f1:c8: a0:a9:09:d8:96:47:f6:06:19:db:0a:48:f1:3e:cb:83:f0:90: 1a:73:be:a6:ce:9c:f3:6b:34:90:8d:cb:aa:de:5f:bc:13:d2: bb:a4:0f:eb:b8:f2:00:79:ca:b8:bb:6c:96:03:04:7c:40:c9: 60:b5:c8:30:ea:bd:07:e7:af:ee:c7:16:3f:85:ff:87:17:81: 17:b6:78:cf:72:91:a8:e2:b2:4e:b7:d5:0a:bf:81:c2:c9:b6: 63:a9:a8:81:62:a0:26:63:7e:3d:99:70:45:9e:2c:03:5f:c2: 39:d6:2f:be:ee:dc:4d:7e:81:58:04:0c:1a:d2:5a:6b:19:cd: 2e:44:d6:44:d5:fe:f7:fb:c0:f0:ea:b0:eb:28:7f:b9:c3:0a: a0:51:54:0c:60:f0:a9:86:63:12:3f:4d:0f:2e:11:00:0c:2c: 6c:d7:bf:fd:ea:51:67:70:88:24:5b:9b:cb:94:ad:15:71:04: 84:ed:81:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwOTA1MDYyODQ5WhcNMjUwOTEyMDYyODQ5WjAYMRYwFAYD VQQDEw02OGJhODMyMi1hNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YIdvo/TgSLAFIb2vVl4qzDQFW7ssmgxxUdKTWD3cHNnNdwgEN723twy19Dk e7V4UzC/lcRyiGZLlRZGpPOYL29HHhiC6UbC4SJUlRrcR3Eo9uBgxMmcjgkCnw1o wUHMu45ypA5uoA9DzhzVHrP3xK8fIifnTsJQBk1yVIFzqTyEuAmubAnmpjPyAr+7 tlg8NCmc2bW1933WLviTFY4pKnzJ8gZ0WukX1+65htwX3KDO2zjiSLPZBXsGhf4S xPyhuYJQfJf90aPl+6X3LEP8CCsrlRASlaEbB4NwFMARkcN9cgy5UjV2MfRNiGGj bcE4vsqq2T8uSYpSuIJHq50bnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwSukag UpRRiEMrz9VZEQUqvIWdMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUPLD9iVHoJbIWBiCqZAY5UqQl9qQLLKjHKAeYJNrScQAp3m+nu4L kpQV+Ryj2ZJwEqQVRsYDZytSCBChj6WgiCuo1B948cigqQnYlkf2BhnbCkjxPsuD 8JAac76mzpzzazSQjcuq3l+8E9K7pA/ruPIAecq4u2yWAwR8QMlgtcgw6r0H56/u xxY/hf+HF4EXtnjPcpGo4rJOt9UKv4HCybZjqaiBYqAmY349mXBFniwDX8I51i++ 7txNfoFYBAwa0lprGc0uRNZE1f73+8Dw6rDrKH+5wwqgUVQMYPCphmMSP00PLhEA DCxs17/96lFncIgkW5vLlK0VcQSE7YFB -----END CERTIFICATE-----Generated at Sat Sep 6 15:12:23 2025 by rpki-client