$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: w4aNYKLi0xRHCCehXgfBbLI2zWpynhx18bcm2frCKy8= Subject key identifier: 4B:AB:8F:36:E0:F8:FD:E2:48:92:23:FB:88:7F:3A:94:92:A3:DD:92 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 0172 Signing time: Fri 05 Sep 2025 04:10:16 +0000 Manifest this update: Fri 05 Sep 2025 04:10:16 +0000 Manifest next update: Fri 12 Sep 2025 04:10:16 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: ioziFz+M7Sx3vVRECCxHip1JhGVIyBzefmPWK5h16Fw=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Sep 5 04:10:16 2025 GMT Not After : Sep 12 04:10:16 2025 GMT Subject: CN=68ba62a8-effd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:17:f6:40:55:f5:e0:99:bb:ca:b2:b7:ae: 7e:b8:e7:42:d7:42:b3:fc:a7:98:29:03:cb:dc:52: cf:55:36:e4:ba:57:36:11:de:4f:6b:57:b5:b6:b2: 66:7a:50:57:0d:0f:4a:47:89:0e:d8:ba:48:8e:b4: fc:e7:2f:b4:36:13:ea:54:c8:a9:a3:af:a2:d9:8e: 36:fa:18:48:f1:a6:92:75:d1:98:34:cb:14:80:c0: d1:3e:2f:fc:bb:ca:8a:c7:23:3c:d1:75:ad:9f:c3: fe:c0:4e:1f:be:6c:b1:c7:33:76:22:02:94:5c:85: 96:d8:6e:12:86:80:76:61:4b:e9:b7:0a:6a:13:6d: c7:4a:f2:dc:21:94:fe:8c:67:86:d4:c7:09:37:86: 4b:08:99:94:93:df:62:ef:34:21:69:a3:57:bc:09: 34:11:98:0b:c3:5f:fa:79:82:b4:51:7c:a6:71:9f: 50:27:94:c2:80:2d:cc:6a:74:b2:89:db:6c:fe:0a: df:04:38:e9:7c:bf:4c:51:fe:7c:a8:00:a9:d6:9f: d8:81:a5:68:07:96:e7:02:ef:ea:b1:89:27:23:8e: 33:40:e5:0f:23:87:3c:7f:ed:a3:5c:21:b1:29:70: 64:d5:3b:17:e9:65:9a:b3:3e:e9:0e:a8:a2:c1:21: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AB:8F:36:E0:F8:FD:E2:48:92:23:FB:88:7F:3A:94:92:A3:DD:92 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:de:da:54:e5:b8:1d:6e:0b:7a:8e:8d:26:02:96:1b:86:c2: 0d:4c:7d:2b:83:76:a5:8e:a4:c7:29:69:bf:97:e2:27:dd:5b: 59:a3:95:fb:3d:0c:07:e5:56:3c:1d:86:38:2f:f4:15:c6:6c: 5c:51:d3:21:63:7f:43:cf:35:75:6d:2c:69:cb:9b:1b:c5:52: f9:a9:4b:f9:28:af:fb:9c:82:f9:a0:dc:35:72:9f:eb:40:6b: 7b:81:c1:4a:6b:d3:3a:8d:14:3b:13:44:10:1a:3b:e7:71:cd: ad:e7:49:d2:84:97:3a:5c:ff:b8:e6:6a:4d:ff:1f:57:01:9f: 92:ea:47:28:1b:61:fe:a7:25:50:bf:7e:9e:c9:f0:53:cc:6e: 73:9c:73:38:f4:1e:ca:7f:1f:bf:9c:ba:d6:7f:00:a9:14:ce: 0b:04:d0:f4:da:38:5a:8b:8c:95:03:ad:7b:60:dd:a0:11:10: 05:d4:20:9f:94:92:9f:47:61:20:23:c3:d7:82:9f:20:02:66: e0:5e:3f:9e:85:3d:a5:7a:8d:92:d2:3e:ea:e6:76:22:92:74: fe:91:35:64:01:ca:a7:46:cc:26:66:61:c0:27:12:36:c2:3c: 85:96:84:ad:41:41:0a:7c:e4:7c:6d:b5:7f:50:89:60:ca:d9: cb:0d:66:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwOTA1MDQxMDE2WhcNMjUwOTEyMDQxMDE2WjAYMRYwFAYD VQQDEw02OGJhNjJhOC1lZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziMX9kBV9eCZu8qyt65+uOdC10Kz/KeYKQPL3FLPVTbkulc2Ed5Pa1e1trJm elBXDQ9KR4kO2LpIjrT85y+0NhPqVMipo6+i2Y42+hhI8aaSddGYNMsUgMDRPi/8 u8qKxyM80XWtn8P+wE4fvmyxxzN2IgKUXIWW2G4ShoB2YUvptwpqE23HSvLcIZT+ jGeG1McJN4ZLCJmUk99i7zQhaaNXvAk0EZgLw1/6eYK0UXymcZ9QJ5TCgC3ManSy idts/grfBDjpfL9MUf58qACp1p/YgaVoB5bnAu/qsYknI44zQOUPI4c8f+2jXCGx KXBk1TsX6WWasz7pDqiiwSHtKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEurjzbg +P3iSJIj+4h/OpSSo92SMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR3tpU5bgdbgt6jo0mApYbhsINTH0rg3aljqTHKWm/l+In3VtZo5X7 PQwH5VY8HYY4L/QVxmxcUdMhY39DzzV1bSxpy5sbxVL5qUv5KK/7nIL5oNw1cp/r QGt7gcFKa9M6jRQ7E0QQGjvncc2t50nShJc6XP+45mpN/x9XAZ+S6kcoG2H+pyVQ v36eyfBTzG5znHM49B7Kfx+/nLrWfwCpFM4LBND02jhai4yVA617YN2gERAF1CCf lJKfR2EgI8PXgp8gAmbgXj+ehT2leo2S0j7q5nYiknT+kTVkAcqnRswmZmHAJxI2 wjyFloStQUEKfOR8bbV/UIlgytnLDWZo -----END CERTIFICATE-----Generated at Sat Sep 6 13:47:41 2025 by rpki-client