$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft File: NSwvQv_2bLhqacZ-5hurbhEVTss.mft (raw, json) Hash identifier: uhOhpZj5636BL6nKTQxgCrfdtbRNcZ+SwCt0bJPyluQ= Subject key identifier: 6F:80:86:7C:94:93:70:90:78:97:86:CD:B1:95:D0:77:8E:54:46:05 Authority key identifier: 35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB Certificate issuer: /CN=A91CCD0C/serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft Manifest number: E8 Signing time: Wed 17 Sep 2025 05:59:47 +0000 Manifest this update: Wed 17 Sep 2025 05:59:46 +0000 Manifest next update: Wed 24 Sep 2025 05:59:46 +0000 Files and hashes: 1: NSwvQv_2bLhqacZ-5hurbhEVTss.crl (hash: U5jvoA+0goWFr2JA4BGAXfy4pc9olqFC8LSChRUu6gA=) 2: E5BB4DB260E411EF83727F5CC4F9AE02.roa (hash: sjsLTuWeFwgevoPUUjQqWdyEX8OASo8b7yHbpb8l0pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCD0C, serialNumber=352C2F42FFF66CB86A69C67EE61BAB6E11154ECB Validity Not Before: Sep 17 05:59:46 2025 GMT Not After : Sep 24 05:59:46 2025 GMT Subject: CN=68ca4e53-c694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:37:dd:eb:96:a2:c8:7f:93:e0:25:2e:a7: 8a:29:c7:97:93:fa:71:fa:8b:22:1c:25:1f:60:c7: bd:de:8e:c6:7c:69:f0:5c:85:6a:0d:2f:80:30:bb: f1:38:72:64:de:b0:48:90:d0:49:1f:a1:d7:2b:96: 49:ed:7c:78:77:4b:1e:94:e0:bf:ae:14:c8:a0:33: ff:f4:83:62:a9:14:3c:b0:2c:48:03:a8:5a:92:14: fd:57:bc:bd:86:e9:e7:d2:6d:a0:95:52:55:cf:a1: 8e:2e:50:ee:42:39:15:8d:59:43:1e:5b:03:32:55: 43:5b:1b:9e:da:7a:64:dc:d8:86:3d:43:08:21:fa: 04:0f:75:80:a8:01:28:44:2c:3d:91:27:e5:a5:49: 57:f7:78:a7:88:88:b3:de:f1:a4:33:b9:d9:a6:22: 73:9f:9e:b3:b8:9e:7d:b5:86:89:1b:a0:ed:a1:b6: f4:49:5b:1b:c4:94:2c:1a:75:35:a7:f6:f3:86:a3: 0b:58:79:7b:43:87:02:9a:af:54:c2:8c:3d:a4:5a: 37:63:d1:c0:da:18:6c:8b:e6:6d:a6:39:ae:8d:aa: b2:20:13:50:30:c6:ce:f8:b1:48:b9:17:8b:a1:d4: 6d:30:3d:66:a3:fa:07:9c:7b:0b:6f:aa:e0:95:5c: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:86:7C:94:93:70:90:78:97:86:CD:B1:95:D0:77:8E:54:46:05 X509v3 Authority Key Identifier: keyid:35:2C:2F:42:FF:F6:6C:B8:6A:69:C6:7E:E6:1B:AB:6E:11:15:4E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSwvQv_2bLhqacZ-5hurbhEVTss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCD0C/819A023432CB11EF9EA0C96AC4F9AE02/NSwvQv_2bLhqacZ-5hurbhEVTss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8a:e1:18:2f:b4:18:58:f1:a7:31:db:e9:47:f3:1e:8a:86: e3:78:91:40:b0:78:17:6d:02:22:c0:66:fd:08:42:f2:be:cd: 51:69:93:4a:aa:12:d6:ae:9c:8d:33:f6:37:78:11:7a:d4:7c: 26:37:d2:2f:17:83:89:12:ae:00:2a:6b:6f:50:03:31:b6:58: f0:08:70:d2:5e:82:9e:06:57:59:f7:3f:3d:33:07:60:68:e8: 8c:91:5f:89:cc:12:9a:5f:c8:88:f7:6a:71:20:7a:a2:df:b3: ff:00:5c:64:41:0a:62:37:92:75:e7:4d:cd:2c:ee:8e:e7:ea: f0:79:22:cf:70:d2:bd:df:3e:de:82:ab:92:6d:33:25:71:d6: 93:5c:77:10:cb:ef:ff:d7:db:35:b9:0c:c3:76:8c:cb:bf:bd: 3c:3b:1e:c5:8f:0b:ad:30:31:2c:46:23:78:67:57:8b:38:6e: 05:6a:0b:44:85:98:4b:5f:92:26:4c:6f:45:12:dd:8b:5a:12: e0:32:1b:df:f7:74:ee:24:e8:e1:4d:d4:2a:5d:f4:8d:6a:62: a1:af:80:61:11:67:0e:41:58:7d:54:a3:1a:48:fd:c2:84:25: 6f:0a:fb:2d:df:60:57:d1:e3:68:ad:f3:00:0c:a8:c1:48:28: 6b:b1:de:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NEMEMxMTAvBgNVBAUTKDM1MkMyRjQyRkZGNjZDQjg2QTY5QzY3RUU2MUJBQjZF MTExNTRFQ0IwHhcNMjUwOTE3MDU1OTQ2WhcNMjUwOTI0MDU1OTQ2WjAYMRYwFAYD VQQDEw02OGNhNGU1My1jNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYA33euWosh/k+AlLqeKKceXk/px+osiHCUfYMe93o7GfGnwXIVqDS+AMLvx OHJk3rBIkNBJH6HXK5ZJ7Xx4d0selOC/rhTIoDP/9INiqRQ8sCxIA6hakhT9V7y9 hunn0m2glVJVz6GOLlDuQjkVjVlDHlsDMlVDWxue2npk3NiGPUMIIfoED3WAqAEo RCw9kSflpUlX93iniIiz3vGkM7nZpiJzn56zuJ59tYaJG6Dtobb0SVsbxJQsGnU1 p/bzhqMLWHl7Q4cCmq9Uwow9pFo3Y9HA2hhsi+ZtpjmujaqyIBNQMMbO+LFIuReL odRtMD1mo/oHnHsLb6rglVwKVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+AhnyU k3CQeJeGzbGV0HeOVEYFMB8GA1UdIwQYMBaAFDUsL0L/9my4amnGfuYbq24RFU7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0QwQy84MTlBMDIzNDMy Q0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJMaHFhY1otNWh1cmJoRVZU c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Td3ZRdl8yYkxocWFjWi01aHVyYmhFVlRzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0QwQy84MTlBMDIzNDMyQ0IxMUVGOUVBMEM5NkFDNEY5QUUwMi9OU3d2UXZfMmJM aHFhY1otNWh1cmJoRVZUc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiuEYL7QYWPGnMdvpR/MeiobjeJFAsHgXbQIiwGb9CELyvs1RaZNK qhLWrpyNM/Y3eBF61HwmN9IvF4OJEq4AKmtvUAMxtljwCHDSXoKeBldZ9z89Mwdg aOiMkV+JzBKaX8iI92pxIHqi37P/AFxkQQpiN5J1503NLO6O5+rweSLPcNK93z7e gquSbTMlcdaTXHcQy+//19s1uQzDdozLv708Ox7FjwutMDEsRiN4Z1eLOG4FagtE hZhLX5ImTG9FEt2LWhLgMhvf93TuJOjhTdQqXfSNamKhr4BhEWcOQVh9VKMaSP3C hCVvCvst32BX0eNorfMADKjBSChrsd6j -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:35 2025 by rpki-client