$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: DayBD9sQE19rxWq+oOSjRytpl2UfEAfAv0BRn+GOJO4= Subject key identifier: 63:F4:C0:36:DC:A2:4C:3C:50:4E:07:5B:75:C8:37:B4:71:44:0D:91 Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 068A Signing time: Thu 04 Sep 2025 22:36:30 +0000 Manifest this update: Thu 04 Sep 2025 22:36:30 +0000 Manifest next update: Thu 11 Sep 2025 22:36:30 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: fWZ9Y0od1CPXbWp+mhtnB1ccRKKwre5GU1GZlqKQ7iY=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Sep 4 22:36:30 2025 GMT Not After : Sep 11 22:36:30 2025 GMT Subject: CN=68ba146e-c87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:f2:b0:a1:a9:db:4e:f5:af:8d:76:cd:9c: 23:f2:13:e1:ad:e4:b5:bf:fb:e2:10:71:2e:4a:ee: e5:fc:07:87:e5:65:fd:b6:95:21:8c:d6:19:81:1f: 11:62:45:f5:28:60:71:f8:7b:dc:5e:cc:a8:9f:5e: 7a:ae:d9:0f:b7:e5:de:1d:5d:a0:90:7b:e3:ff:99: b5:6c:e7:6a:84:48:9b:ef:63:18:e8:60:a5:4d:bf: d1:5d:0c:1e:5b:68:26:e1:be:5b:43:ca:88:22:b9: b6:b9:a3:12:79:bd:72:bf:20:d3:13:15:d5:01:fe: d0:8c:1b:99:b2:29:c9:32:52:a4:06:78:2f:c5:11: 5a:e0:f7:a2:d0:2a:55:c6:99:d7:15:53:d9:5b:f5: ff:93:43:d6:a0:9a:a1:d3:90:a4:44:1d:71:09:ac: e9:61:a2:7d:7a:da:7e:5c:47:8a:91:22:34:46:48: 74:0d:46:3a:33:8c:37:d2:6d:83:88:ab:71:d6:0b: 9e:7e:97:de:93:68:17:f9:fb:f5:57:07:65:d7:aa: 66:65:2d:f4:28:3b:99:df:16:ae:e0:64:85:64:2b: ed:ef:e6:61:f2:7e:11:78:45:18:62:80:7f:7c:e1: fa:cd:b6:46:f6:a0:c0:31:c4:38:f3:bd:5e:05:1c: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:C0:36:DC:A2:4C:3C:50:4E:07:5B:75:C8:37:B4:71:44:0D:91 X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2b:ef:45:3b:3e:27:96:b0:d2:6a:45:30:13:5d:7d:58:27: 2b:6c:0e:63:8c:d7:25:41:3b:d8:68:46:22:7b:37:24:44:f4: ab:64:49:b8:fe:5a:55:d1:9a:03:4a:0f:9f:ba:99:7b:3c:8c: 0a:32:b0:dd:c6:77:5c:55:47:9f:e9:d3:c6:69:2a:b4:8a:1a: d3:bc:4c:d2:a3:38:9c:33:bb:fe:90:fe:30:8b:57:63:f9:75: 4f:6c:3f:ac:4c:10:f6:89:09:8d:ba:ff:39:c0:65:43:1a:c0: 9d:e6:29:a2:61:f0:71:5d:1d:cb:29:66:8d:71:26:00:fe:66: 27:86:4b:d5:d6:47:27:1b:8b:b5:b6:4d:5c:22:4f:34:43:1b: bd:7d:c1:d0:d2:53:80:72:00:0b:65:b2:81:d5:55:e5:0f:55: 5f:30:e1:48:fc:46:07:b9:79:18:ad:9a:4b:48:bc:bc:45:c4: 6a:f1:41:08:c0:b0:ac:ff:37:31:2d:53:95:d4:16:98:1c:08: be:19:5b:dd:a0:4a:7c:10:d8:1f:a4:d5:44:39:21:d8:8b:ec: 6d:18:00:cb:38:23:19:f9:cb:ad:f0:f0:45:6d:ab:e4:31:4b: fc:83:af:79:25:c9:53:37:12:e6:56:40:77:97:85:86:90:9f: c7:50:42:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUwOTA0MjIzNjMwWhcNMjUwOTExMjIzNjMwWjAYMRYwFAYD VQQDEw02OGJhMTQ2ZS1jODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+jysKGp2071r412zZwj8hPhreS1v/viEHEuSu7l/AeH5WX9tpUhjNYZgR8R YkX1KGBx+HvcXsyon156rtkPt+XeHV2gkHvj/5m1bOdqhEib72MY6GClTb/RXQwe W2gm4b5bQ8qIIrm2uaMSeb1yvyDTExXVAf7QjBuZsinJMlKkBngvxRFa4Pei0CpV xpnXFVPZW/X/k0PWoJqh05CkRB1xCazpYaJ9etp+XEeKkSI0Rkh0DUY6M4w30m2D iKtx1guefpfek2gX+fv1Vwdl16pmZS30KDuZ3xau4GSFZCvt7+Zh8n4ReEUYYoB/ fOH6zbZG9qDAMcQ4871eBRzNMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP0wDbc okw8UE4HW3XIN7RxRA2RMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhK+9FOz4nlrDSakUwE119WCcrbA5jjNclQTvYaEYiezckRPSrZEm4 /lpV0ZoDSg+fupl7PIwKMrDdxndcVUef6dPGaSq0ihrTvEzSozicM7v+kP4wi1dj +XVPbD+sTBD2iQmNuv85wGVDGsCd5imiYfBxXR3LKWaNcSYA/mYnhkvV1kcnG4u1 tk1cIk80Qxu9fcHQ0lOAcgALZbKB1VXlD1VfMOFI/EYHuXkYrZpLSLy8RcRq8UEI wLCs/zcxLVOV1BaYHAi+GVvdoEp8ENgfpNVEOSHYi+xtGADLOCMZ+cut8PBFbavk MUv8g695JclTNxLmVkB3l4WGkJ/HUEK+ -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:54 2025 by rpki-client