$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: 2M0NbShdRG3NiyDRNTak3Tgh1B1Ybn6s0em0A9brgBQ= Subject key identifier: 0D:9B:9E:18:65:CF:D3:3F:C4:E2:91:36:40:01:9B:6F:62:1D:02:98 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 082D Signing time: Sun 14 Sep 2025 20:59:55 +0000 Manifest this update: Sun 14 Sep 2025 20:59:55 +0000 Manifest next update: Sun 21 Sep 2025 20:59:55 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: 82w3igQQAKBYlRvzsgAbG4GhOjN+0RJ+ThKcQsXCpNQ=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Sep 14 20:59:55 2025 GMT Not After : Sep 21 20:59:55 2025 GMT Subject: CN=68c72ccb-7ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:fb:9c:e8:b1:68:e3:35:bf:dc:4a:a0:30: 2c:7c:7d:ad:6e:3c:42:54:95:af:b3:3a:61:f3:74: f2:4b:5d:cc:37:c1:88:81:21:b9:9a:46:f2:81:c0: a0:f5:de:82:a5:15:fe:cb:b2:42:5d:14:29:9f:48: bd:ba:8f:15:e6:a0:78:f6:f7:dc:fc:a5:46:20:09: 47:47:9a:d9:f0:5f:94:cf:a7:f5:7a:12:90:9c:fb: 1d:f1:bf:0f:9c:bd:15:cf:ed:a1:4e:3a:6e:c1:45: 65:9a:72:b5:94:8e:1b:88:fe:58:26:0f:a9:b3:b0: b2:9f:e0:e1:c9:a5:b4:e9:29:ab:55:e4:e3:31:1d: 9b:66:93:80:89:90:0b:f8:ae:25:1c:0e:8a:82:e0: 5e:f1:c4:10:68:bb:bf:dd:f5:81:4f:ca:4f:e3:f1: 35:15:3a:61:d7:32:b5:ec:ad:18:8f:ae:86:70:e0: b1:b3:fb:f1:2f:40:18:ad:c6:98:4d:5f:08:6a:f4: ce:3c:3d:b0:08:3f:d4:8e:fe:91:0a:6d:bd:c3:c6: b5:a5:f1:93:39:f2:51:ef:29:23:63:8e:d0:a6:b5: 79:99:3b:14:3e:0f:7f:32:09:37:e5:58:87:f1:fc: dc:22:8c:84:26:f1:57:03:fc:ec:24:c1:84:5d:4e: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9B:9E:18:65:CF:D3:3F:C4:E2:91:36:40:01:9B:6F:62:1D:02:98 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:89:85:d5:22:7b:cc:9c:65:41:7d:00:6a:8d:f7:1c:09:49: 6e:ee:90:9b:4d:2d:bb:6a:06:f2:00:0b:bf:1d:d0:39:f5:5d: 12:34:1c:bd:c6:62:85:4d:8e:af:2b:8c:0c:7a:30:9a:4a:9e: ed:d2:61:1c:73:54:66:ff:fb:e8:ac:3d:98:46:24:e1:9a:41: 09:2d:e0:f4:45:9c:45:a7:e0:39:e2:f8:07:ef:e5:b1:4f:75: f8:ae:05:55:bd:aa:c6:5b:47:45:1c:b8:28:13:c2:e9:58:8c: fa:1e:9e:46:4d:a9:3c:19:aa:b6:4c:19:97:e3:56:f5:5e:d6: 16:d2:2f:de:bc:fe:3c:dd:7b:84:c3:75:2d:1b:7c:4d:e4:d8: 74:4e:e4:1e:12:43:75:7b:bc:76:23:69:91:3d:79:78:a5:70: c2:9c:f7:d0:3e:df:8d:af:5c:be:29:00:87:7d:fe:cf:d4:47: 57:ba:be:51:7f:22:9c:29:a0:56:d3:26:fa:f2:13:7c:53:00: 9d:27:78:a2:eb:74:84:49:7e:83:8d:18:eb:a4:62:52:ea:f2: 4f:4d:85:59:a6:a2:ab:e8:cb:68:74:eb:d0:c1:85:33:c8:08: a0:08:0d:2c:53:75:56:ae:dc:ec:42:77:cf:a1:0a:cd:b4:16: 34:b0:e4:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwOTE0MjA1OTU1WhcNMjUwOTIxMjA1OTU1WjAYMRYwFAYD VQQDEw02OGM3MmNjYi03ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzz7nOixaOM1v9xKoDAsfH2tbjxCVJWvszph83TyS13MN8GIgSG5mkbygcCg 9d6CpRX+y7JCXRQpn0i9uo8V5qB49vfc/KVGIAlHR5rZ8F+Uz6f1ehKQnPsd8b8P nL0Vz+2hTjpuwUVlmnK1lI4biP5YJg+ps7Cyn+DhyaW06SmrVeTjMR2bZpOAiZAL +K4lHA6KguBe8cQQaLu/3fWBT8pP4/E1FTph1zK17K0Yj66GcOCxs/vxL0AYrcaY TV8IavTOPD2wCD/Ujv6RCm29w8a1pfGTOfJR7ykjY47QprV5mTsUPg9/Mgk35ViH 8fzcIoyEJvFXA/zsJMGEXU6LkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2bnhhl z9M/xOKRNkABm29iHQKYMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWiYXVInvMnGVBfQBqjfccCUlu7pCbTS27agbyAAu/HdA59V0SNBy9 xmKFTY6vK4wMejCaSp7t0mEcc1Rm//vorD2YRiThmkEJLeD0RZxFp+A54vgH7+Wx T3X4rgVVvarGW0dFHLgoE8LpWIz6Hp5GTak8Gaq2TBmX41b1XtYW0i/evP483XuE w3UtG3xN5Nh0TuQeEkN1e7x2I2mRPXl4pXDCnPfQPt+Nr1y+KQCHff7P1EdXur5R fyKcKaBW0yb68hN8UwCdJ3ii63SESX6DjRjrpGJS6vJPTYVZpqKr6MtodOvQwYUz yAigCA0sU3VWrtzsQnfPoQrNtBY0sOSz -----END CERTIFICATE-----Generated at Tue Sep 16 10:48:55 2025 by rpki-client