$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: 0w+N7dZR8jUkF0rogHfaGL7g9H4o+B/ZEnBlUN7YQpE= Subject key identifier: F7:78:0A:54:0B:D1:3A:CB:A1:9E:20:DA:BF:8F:BA:94:66:8B:69:5C Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03E5 Signing time: Wed 17 Sep 2025 01:00:23 +0000 Manifest this update: Wed 17 Sep 2025 01:00:23 +0000 Manifest next update: Wed 24 Sep 2025 01:00:23 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: SJ86TTGHqTxvt5C2pVZo2gq3eJ6dXc4IK4/4seb4ETQ=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Sep 17 01:00:23 2025 GMT Not After : Sep 24 01:00:23 2025 GMT Subject: CN=68ca0827-7aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:13:8d:aa:25:57:c5:65:92:5f:1e:f5:28: 74:2a:6f:5b:d9:6d:22:14:f6:bf:9a:1e:4f:e2:3f: 45:f9:86:44:74:9c:6c:b2:27:21:87:b1:67:58:66: fd:55:2f:57:30:c6:d1:1e:dd:01:34:52:3f:e5:86: 62:c8:0a:7a:49:4e:8f:2d:fe:0d:19:3e:42:57:67: 21:a0:9c:c2:4d:f5:64:1e:3f:24:1f:3e:f9:ed:c6: 3a:7d:4d:0c:f3:8e:21:6a:4d:73:9b:19:e2:18:18: 6b:d4:10:e5:d8:ff:dc:00:d3:37:50:d4:18:b8:ef: 56:b8:fd:01:54:aa:a2:f7:34:76:ef:9d:62:3a:45: ce:b1:18:61:08:e2:c4:2f:6a:d8:06:3f:5e:03:25: 74:19:ad:fb:f1:7a:76:7b:4d:6f:18:bf:48:72:c0: ed:33:fc:c6:b8:44:1b:91:ee:9a:08:14:ec:83:38: 85:c2:21:99:7e:cb:d5:1f:1c:f3:d6:9f:7c:be:16: 62:c1:b4:5d:13:bb:9e:c4:33:f5:28:1b:86:a3:be: 89:12:0c:2e:fc:ff:d2:1f:b9:be:e2:68:2e:35:c2: 0a:6b:c6:8c:f5:41:5e:01:7a:5a:ea:3c:92:45:35: 0b:56:e0:77:ee:39:81:b2:b1:b6:9d:f5:0d:81:0f: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:0A:54:0B:D1:3A:CB:A1:9E:20:DA:BF:8F:BA:94:66:8B:69:5C X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f5:56:e1:94:7c:8b:f2:e9:c9:d7:aa:3f:a7:fe:be:d3:23: 35:8d:d7:8b:c6:4b:29:bf:0d:16:ea:b3:cc:ba:1d:ca:e0:8d: b6:41:29:f1:22:24:b5:5c:59:30:e5:0c:83:75:e8:2c:73:64: b9:48:74:91:76:47:cc:bd:b8:24:68:45:70:b5:9c:89:1a:d8: 96:da:94:8c:8c:2b:bd:4e:25:5a:fb:85:63:61:28:69:a5:9e: 35:d2:82:3f:f3:3a:16:f0:f6:1b:96:50:69:bc:2c:ac:b5:e9: 27:fb:55:39:7a:d1:1e:b4:78:d0:bd:42:c9:08:1d:f3:cc:c0: 86:57:8a:88:9a:c3:e9:94:c4:ea:da:99:1d:d6:e5:52:64:53: 07:39:43:f5:d5:32:4a:ff:8e:8a:74:4c:bd:06:96:fb:ce:b0: 82:38:2b:c0:4f:ac:d3:f4:b9:f1:a9:69:06:81:ce:c8:32:41: 8d:23:8e:0c:3e:f7:92:6b:74:34:36:60:fd:a5:56:36:04:db: bb:07:64:eb:bf:a6:48:06:85:9b:1f:59:77:0c:60:04:ad:54: 1e:c0:5a:b8:aa:77:24:ef:29:f3:1f:4a:c2:4a:3b:cf:30:83: ac:02:64:94:d7:00:c5:eb:a0:05:c1:8b:fe:c7:24:cd:da:2b: b3:71:20:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwOTE3MDEwMDIzWhcNMjUwOTI0MDEwMDIzWjAYMRYwFAYD VQQDEw02OGNhMDgyNy03YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NsTjaolV8Vlkl8e9Sh0Km9b2W0iFPa/mh5P4j9F+YZEdJxssichh7FnWGb9 VS9XMMbRHt0BNFI/5YZiyAp6SU6PLf4NGT5CV2choJzCTfVkHj8kHz757cY6fU0M 844hak1zmxniGBhr1BDl2P/cANM3UNQYuO9WuP0BVKqi9zR2751iOkXOsRhhCOLE L2rYBj9eAyV0Ga378Xp2e01vGL9IcsDtM/zGuEQbke6aCBTsgziFwiGZfsvVHxzz 1p98vhZiwbRdE7uexDP1KBuGo76JEgwu/P/SH7m+4mguNcIKa8aM9UFeAXpa6jyS RTULVuB37jmBsrG2nfUNgQ+4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd4ClQL 0TrLoZ4g2r+PupRmi2lcMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf9VbhlHyL8unJ16o/p/6+0yM1jdeLxkspvw0W6rPMuh3K4I22QSnx IiS1XFkw5QyDdegsc2S5SHSRdkfMvbgkaEVwtZyJGtiW2pSMjCu9TiVa+4VjYShp pZ410oI/8zoW8PYbllBpvCystekn+1U5etEetHjQvULJCB3zzMCGV4qImsPplMTq 2pkd1uVSZFMHOUP11TJK/46KdEy9Bpb7zrCCOCvAT6zT9LnxqWkGgc7IMkGNI44M PveSa3Q0NmD9pVY2BNu7B2Trv6ZIBoWbH1l3DGAErVQewFq4qnck7ynzH0rCSjvP MIOsAmSU1wDF66AFwYv+xyTN2iuzcSCi -----END CERTIFICATE-----Generated at Fri Sep 19 00:39:10 2025 by rpki-client