$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: btXCYw4iJ9NOzFqsSdEWk5jtfsn2Q1KNmNuEbpA8+dI= Subject key identifier: 86:21:6A:EC:D3:AD:B2:F0:4C:B8:95:E4:F3:5E:B6:1D:F3:2D:5E:BF Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2A3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2A32 Signing time: Sat 06 Sep 2025 14:23:41 +0000 Manifest this update: Sat 06 Sep 2025 14:23:40 +0000 Manifest next update: Sat 13 Sep 2025 14:23:40 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: RGrqC5qf+B9AlOlA8ZkMQlfEVh7+eeQsMVBx975VmwQ=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: symelOI4KiPwqS+zxOG2abXkQkOu/9Ecrvxkqaxc9Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10813 (0x2a3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Sep 6 14:23:40 2025 GMT Not After : Sep 13 14:23:40 2025 GMT Subject: CN=68bc43ec-5bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:63:5a:e2:e6:72:22:4f:6c:38:61:1f:10: 8e:c8:af:39:69:d6:64:73:19:33:11:f1:6d:9a:5d: a8:0a:51:f7:96:7b:87:d9:62:22:4a:02:ba:2a:62: 60:3e:84:5a:40:75:d9:06:b1:42:ca:39:2f:cc:c2: 0c:a1:19:3a:fb:b0:49:9a:f1:59:08:9b:dc:34:56: f7:f0:47:af:45:03:6e:96:9f:fe:11:da:9b:27:28: 7c:04:2a:25:d7:9f:f1:d6:64:40:34:13:33:4c:2e: af:ba:1e:b3:ab:8a:c9:e6:4d:f2:21:fd:88:d7:2e: a5:df:a7:02:b4:40:81:2c:8f:f8:e6:38:50:7a:0f: 77:a0:97:cb:fa:66:ca:50:98:e6:59:6f:83:81:92: ba:7d:27:33:27:df:fa:92:bb:c1:2e:3a:94:33:7c: c3:19:96:09:0a:b5:6e:d9:75:ae:89:e7:67:5a:ff: 77:ec:fc:f5:1a:93:39:fa:00:cd:28:82:6e:03:1c: 06:5d:5b:16:3f:69:cb:e7:3c:01:33:77:ca:78:65: 7d:70:97:0d:10:dd:8d:4c:9e:d5:98:74:2a:75:23: 10:5b:91:13:fa:74:92:d4:33:e8:e7:64:b5:0c:9a: 2d:97:78:c9:16:ae:21:d9:11:74:54:0e:6d:da:f5: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:21:6A:EC:D3:AD:B2:F0:4C:B8:95:E4:F3:5E:B6:1D:F3:2D:5E:BF X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7f:82:53:70:77:d5:f5:bb:f0:b9:78:84:ff:e6:a5:a2:b2: cd:3a:c1:f1:9d:1c:28:a7:46:ff:d1:93:9c:e1:09:b8:44:c5: c7:1f:b2:07:03:1f:64:c3:f3:53:49:13:34:fd:0f:b7:97:07: 5d:b0:d6:24:21:6f:b7:4b:9a:4d:35:99:e9:dd:a2:8b:48:3c: 57:c3:65:bd:e2:40:41:77:a1:45:ec:b7:7f:d9:3f:e9:4b:50: 50:ad:60:34:f4:c0:37:09:ed:6e:14:3c:c8:fd:93:b0:25:81: 30:ad:0b:d8:16:d7:97:cf:a4:c0:ac:36:b5:67:61:73:93:a6: b7:20:5b:6f:fc:cc:f4:8e:fe:9a:0a:a6:5a:8f:73:87:da:e6: c7:c2:68:28:e3:ba:af:cf:d7:aa:64:18:ff:e0:0d:a2:57:47: 12:9c:41:eb:d7:05:87:6a:81:6b:1c:d9:61:cf:37:3a:db:8c: ab:db:33:4c:8c:16:e1:a3:b2:68:8b:df:b6:e0:03:ec:76:5e: 2b:bd:9c:52:4c:e3:ff:36:78:7e:bd:ff:a5:72:86:2c:51:1e: c5:1e:a5:04:fd:77:2f:7c:db:fa:ff:16:b2:04:5c:54:dd:ba: 5b:ec:26:5d:a5:56:7d:50:a1:9f:b4:a0:62:02:e2:e3:d6:1c: d4:0b:dd:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwOTA2MTQyMzQwWhcNMjUwOTEzMTQyMzQwWjAYMRYwFAYD VQQDEw02OGJjNDNlYy01YmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpFjWuLmciJPbDhhHxCOyK85adZkcxkzEfFtml2oClH3lnuH2WIiSgK6KmJg PoRaQHXZBrFCyjkvzMIMoRk6+7BJmvFZCJvcNFb38EevRQNulp/+EdqbJyh8BCol 15/x1mRANBMzTC6vuh6zq4rJ5k3yIf2I1y6l36cCtECBLI/45jhQeg93oJfL+mbK UJjmWW+DgZK6fSczJ9/6krvBLjqUM3zDGZYJCrVu2XWuiednWv937Pz1GpM5+gDN KIJuAxwGXVsWP2nL5zwBM3fKeGV9cJcNEN2NTJ7VmHQqdSMQW5ET+nSS1DPo52S1 DJotl3jJFq4h2RF0VA5t2vW55wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYhauzT rbLwTLiV5PNeth3zLV6/MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/f4JTcHfV9bvwuXiE/+alorLNOsHxnRwop0b/0ZOc4Qm4RMXHH7IH Ax9kw/NTSRM0/Q+3lwddsNYkIW+3S5pNNZnp3aKLSDxXw2W94kBBd6FF7Ld/2T/p S1BQrWA09MA3Ce1uFDzI/ZOwJYEwrQvYFteXz6TArDa1Z2Fzk6a3IFtv/Mz0jv6a CqZaj3OH2ubHwmgo47qvz9eqZBj/4A2iV0cSnEHr1wWHaoFrHNlhzzc624yr2zNM jBbho7Joi9+24APsdl4rvZxSTOP/Nnh+vf+lcoYsUR7FHqUE/XcvfNv6/xayBFxU 3bpb7CZdpVZ9UKGftKBiAuLj1hzUC92h -----END CERTIFICATE-----Generated at Sat Sep 6 21:31:28 2025 by rpki-client