$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft File: nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json) Hash identifier: +NbtpDC7grh3mIMffpgyzJ1ZB6cXpyWtEcIhwxCQcH0= Subject key identifier: 71:F1:94:B6:AE:21:FB:4A:DA:E6:B3:FA:BB:34:82:33:6E:18:58:00 Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E Certificate issuer: /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft Manifest number: 1A9A Signing time: Wed 20 Aug 2025 17:05:06 +0000 Manifest this update: Wed 20 Aug 2025 17:05:05 +0000 Manifest next update: Wed 27 Aug 2025 17:05:05 +0000 Files and hashes: 1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: gzcwiEO5y3dPuWJx+ZpVME7Adh12kiGBzNMLODkqvGM=) 2: FFFE92D29CE611EE883A672FC4F9AE02.roa (hash: GWwckZ18h6sa8xUJU0MBnoisjDnt082CFlW4eSRU0Y4=) 3: 653DCD9ADEE811EF9DE2374CC4F9AE02.roa (hash: Mazx36+KDEkICPeaUfwJ/FcwJ2wGDeNl/2eEhKXlMWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E Validity Not Before: Aug 20 17:05:05 2025 GMT Not After : Aug 27 17:05:05 2025 GMT Subject: CN=68a60042-0c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:2b:27:60:18:e6:7f:d5:41:55:4a:77:b0: 7e:04:f7:3f:b6:93:bf:ac:3d:d2:b7:84:c3:ab:a9: 51:fe:80:30:b5:32:a9:18:18:6e:a7:39:11:5d:75: 1e:6b:e9:29:3a:55:9f:7f:9e:4e:65:d5:d4:87:e0: 6c:f6:fa:8c:b7:13:22:74:e0:4b:d3:74:69:1e:c8: 70:35:07:fa:97:98:e6:56:3a:a0:84:1b:e2:34:49: 60:5d:ad:4e:e3:f9:84:e6:f6:02:46:51:dc:ea:70: ca:d7:97:a5:3e:ed:6f:06:57:1b:21:6a:58:5a:e9: 37:8b:73:be:31:a4:ce:0f:7f:7d:93:56:83:d4:be: f2:59:96:94:fa:96:5c:fa:42:a4:52:c1:37:b1:87: 16:2e:9e:38:1a:15:61:fd:76:0a:78:32:d3:d2:39: ac:5c:7f:27:47:8e:21:59:92:cc:66:33:64:88:ac: d1:1e:ca:85:1f:04:08:c8:3d:16:83:fb:a7:70:ed: cf:42:e3:b9:33:86:ad:12:15:31:b0:8b:7d:a5:ac: 02:d6:ec:30:3e:c1:94:4a:b4:a5:86:f3:13:96:e0: 0c:da:1d:f5:ef:d3:41:81:ca:30:d7:b3:38:07:ed: 5b:ac:3f:1a:95:59:ea:aa:b3:07:76:04:5f:7a:13: fb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:94:B6:AE:21:FB:4A:DA:E6:B3:FA:BB:34:82:33:6E:18:58:00 X509v3 Authority Key Identifier: keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:95:9b:a1:82:bb:4a:66:f4:e8:22:5a:71:d7:15:e6:56:fe: 7f:84:a7:88:f6:c9:a4:bb:a5:f5:f8:40:e4:ab:60:e7:ec:71: e9:0c:16:f2:b9:99:4a:ad:12:35:b9:81:ef:64:e2:3b:e1:fe: 79:e1:ec:df:76:33:70:1d:ba:c6:b7:47:1e:f3:17:70:f9:fe: dd:a9:f9:fd:48:92:08:87:2c:cb:79:bb:82:3b:a9:c8:c2:f8: 20:28:55:59:e6:1f:7d:9e:49:1d:7e:36:ac:df:f3:c6:3f:f3: 7e:1e:a0:04:b2:30:ca:03:30:20:1b:88:a5:db:6f:61:da:54: 2b:d8:c4:cf:10:c6:7f:11:c4:11:0c:88:62:17:b4:24:35:be: 22:e2:ae:73:65:37:64:88:4d:c3:2a:b1:66:50:3c:f8:a6:14: 4a:d1:a2:ab:e2:b1:d0:64:25:53:b1:02:40:e0:78:34:c6:fc: a1:a8:19:71:ff:d1:23:29:13:d6:2c:ae:36:e6:53:0b:13:9b: f0:34:08:4d:6b:ef:24:cc:f9:0e:4a:0f:ec:57:cf:ae:53:ea: 7b:d0:01:6a:1a:66:c9:6d:48:4d:3f:8a:90:67:74:d4:04:8b: 65:63:c0:24:8b:79:6e:f2:a7:16:dd:c2:fe:4d:7b:d5:4c:11: fe:a7:c4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3 NERFRDQ2NkUwHhcNMjUwODIwMTcwNTA1WhcNMjUwODI3MTcwNTA1WjAYMRYwFAYD VQQDEw02OGE2MDA0Mi0wYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6QrJ2AY5n/VQVVKd7B+BPc/tpO/rD3St4TDq6lR/oAwtTKpGBhupzkRXXUe a+kpOlWff55OZdXUh+Bs9vqMtxMidOBL03RpHshwNQf6l5jmVjqghBviNElgXa1O 4/mE5vYCRlHc6nDK15elPu1vBlcbIWpYWuk3i3O+MaTOD399k1aD1L7yWZaU+pZc +kKkUsE3sYcWLp44GhVh/XYKeDLT0jmsXH8nR44hWZLMZjNkiKzRHsqFHwQIyD0W g/uncO3PQuO5M4atEhUxsIt9pawC1uwwPsGUSrSlhvMTluAM2h3179NBgcow17M4 B+1brD8alVnqqrMHdgRfehP7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHxlLau IftK2uaz+rs0gjNuGFgAMB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5 NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq UFRub2NDSTRWbFYwM3RSbTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAflZuhgrtKZvToIlpx1xXmVv5/hKeI9smku6X1+EDkq2Dn7HHpDBby uZlKrRI1uYHvZOI74f554ezfdjNwHbrGt0ce8xdw+f7dqfn9SJIIhyzLebuCO6nI wvggKFVZ5h99nkkdfjas3/PGP/N+HqAEsjDKAzAgG4il229h2lQr2MTPEMZ/EcQR DIhiF7QkNb4i4q5zZTdkiE3DKrFmUDz4phRK0aKr4rHQZCVTsQJA4Hg0xvyhqBlx /9EjKRPWLK425lMLE5vwNAhNa+8kzPkOSg/sV8+uU+p70AFqGmbJbUhNP4qQZ3TU BItlY8Aki3lu8qcW3cL+TXvVTBH+p8Qa -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:36 2025 by rpki-client