$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: bvfidQzx4UhLFrxs7ODpEBZb/Q83S3sB0lGwaAxQEOU= Subject key identifier: 94:88:8C:1E:C4:85:80:7F:47:E7:F0:B2:7E:C9:C9:DC:37:78:CB:30 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 34DC Signing time: Mon 08 Sep 2025 14:41:24 +0000 Manifest this update: Mon 08 Sep 2025 14:41:23 +0000 Manifest next update: Mon 15 Sep 2025 14:41:23 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: O4fJGVgzeJPvNmT4aSj1fIaFzuonDeX6fhwB33pe4s4=) 2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: mBi2xBGJz7ABmwG7Kd/FaX5nMMQUKh+oy7XK2XR044o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Sep 8 14:41:23 2025 GMT Not After : Sep 15 14:41:23 2025 GMT Subject: CN=68beeb13-4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:10:b5:1c:5f:39:9f:71:d7:98:ee:b4:d6: db:2f:b0:e2:ae:bb:2a:78:52:d9:16:c1:9b:d7:f0: f8:5c:45:a5:3b:db:87:e3:a1:a4:14:fb:6c:51:9b: 39:e6:f5:0c:24:de:02:6a:b2:4f:d4:b4:43:c7:08: ca:68:3c:9e:ee:3e:ac:30:d4:7d:c1:6f:5a:b3:79: 4f:d6:4b:81:c7:22:1f:92:b6:9d:32:e6:d3:04:51: 01:d8:51:e5:50:da:af:56:5c:c3:20:d7:48:52:f0: 46:c7:e2:3b:e2:e7:ed:4a:02:03:ca:0a:c9:64:b0: 98:69:07:42:dd:33:1f:99:4c:be:e8:d0:9d:b7:49: 83:ba:f8:fb:54:cf:e5:f9:b8:92:40:13:b4:07:01: 71:bc:4c:2f:39:ac:78:b6:85:fd:54:ef:83:44:9a: 98:71:50:8c:16:26:5f:5d:84:8b:1b:8d:57:4d:a1: 44:87:68:c1:01:21:73:9c:f0:d0:5e:79:93:c2:32: b6:87:72:27:7c:5b:6d:f8:2a:85:e4:65:da:d1:eb: b7:73:f3:21:a2:73:5c:dd:45:68:4b:d4:72:09:5e: dd:69:a6:26:36:06:08:62:69:bf:02:5a:65:3c:09: 8e:ed:20:0b:57:b7:67:2f:4a:87:d3:2e:d4:b2:42: 3c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:88:8C:1E:C4:85:80:7F:47:E7:F0:B2:7E:C9:C9:DC:37:78:CB:30 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:82:5c:4f:ce:5e:c7:43:74:59:3d:94:91:46:22:94:fc:70: 95:01:ad:4d:ca:c7:73:52:67:51:7f:b6:32:9c:34:80:ee:bd: e2:64:79:c0:65:f8:b1:96:2b:54:7f:8b:27:b6:94:0a:59:3a: ed:39:e1:db:a4:fa:b7:f5:4e:18:62:72:a5:68:36:18:34:0e: bf:85:c1:3b:16:f6:81:a7:b5:b0:98:0c:1c:56:48:1d:6e:d4: b3:4e:19:d4:0c:46:ae:9e:ad:51:cf:87:de:56:75:00:6d:be: 63:ca:16:e2:3c:d6:05:77:ca:86:e7:ad:30:85:6b:0e:96:fe: 82:31:d1:0f:f0:09:81:56:aa:4a:b2:4a:ff:37:01:3a:b2:7e: 0a:09:62:82:3e:bf:6d:71:b9:76:7a:be:37:bb:bc:46:c1:57: ae:a6:b2:42:fe:dd:15:46:aa:c9:e0:6f:7c:7d:b3:74:6b:d8: f4:01:b0:5b:4a:5f:fe:03:ad:73:bb:a4:c3:68:d0:f7:74:db: 83:12:81:bb:6d:a6:ee:28:22:f7:35:e0:be:f5:94:f5:18:65: 5c:96:b5:d8:54:43:76:5f:c3:4d:89:b6:5c:9d:39:4f:fe:d5: 25:e4:8f:7b:e7:87:ed:62:7a:63:9a:e8:e9:d0:38:bf:01:ef: d1:b5:59:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUwOTA4MTQ0MTIzWhcNMjUwOTE1MTQ0MTIzWjAYMRYwFAYD VQQDEw02OGJlZWIxMy00YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH4QtRxfOZ9x15jutNbbL7DirrsqeFLZFsGb1/D4XEWlO9uH46GkFPtsUZs5 5vUMJN4CarJP1LRDxwjKaDye7j6sMNR9wW9as3lP1kuBxyIfkradMubTBFEB2FHl UNqvVlzDINdIUvBGx+I74uftSgIDygrJZLCYaQdC3TMfmUy+6NCdt0mDuvj7VM/l +biSQBO0BwFxvEwvOax4toX9VO+DRJqYcVCMFiZfXYSLG41XTaFEh2jBASFznPDQ XnmTwjK2h3InfFtt+CqF5GXa0eu3c/MhonNc3UVoS9RyCV7daaYmNgYIYmm/Alpl PAmO7SALV7dnL0qH0y7UskI8GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSIjB7E hYB/R+fwsn7Jydw3eMswMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMglxPzl7HQ3RZPZSRRiKU/HCVAa1NysdzUmdRf7YynDSA7r3iZHnA ZfixlitUf4sntpQKWTrtOeHbpPq39U4YYnKlaDYYNA6/hcE7FvaBp7WwmAwcVkgd btSzThnUDEaunq1Rz4feVnUAbb5jyhbiPNYFd8qG560whWsOlv6CMdEP8AmBVqpK skr/NwE6sn4KCWKCPr9tcbl2er43u7xGwVeuprJC/t0VRqrJ4G98fbN0a9j0AbBb Sl/+A61zu6TDaND3dNuDEoG7babuKCL3NeC+9ZT1GGVclrXYVEN2X8NNibZcnTlP /tUl5I9754ftYnpjmujp0Di/Ae/RtVmC -----END CERTIFICATE-----Generated at Tue Sep 9 07:32:51 2025 by rpki-client