$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: YEUP85Y+L8O5e1I4B5ezZLg0fjy8G5HkLMsZTI+m9lk= Subject key identifier: 0A:5E:23:3D:C4:8C:D3:86:B8:EA:7A:AF:EF:C6:D9:A3:66:CF:7D:B1 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 09D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 09C8 Signing time: Wed 20 Aug 2025 20:04:19 +0000 Manifest this update: Wed 20 Aug 2025 20:04:19 +0000 Manifest next update: Wed 27 Aug 2025 20:04:19 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: L9om7ImNtA9fMQtNN9ZMYCtzcM6mo46cjd7LEmmFKzY=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: MZTRHkBugOG0/w9DN1EvKjeTW8go+K0xNXADKQ+F2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2517 (0x9d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Aug 20 20:04:19 2025 GMT Not After : Aug 27 20:04:19 2025 GMT Subject: CN=68a62a43-394b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b0:6c:59:6a:7c:ad:1d:8d:6d:ab:6c:69:13: 18:c0:5f:bf:7d:cb:64:d5:c7:2c:c1:76:3f:64:56: 1b:35:18:9a:72:cd:77:5a:54:82:7a:78:f3:9d:ef: cf:68:f0:3f:91:6e:b8:48:fa:d9:1a:f2:81:2c:f4: d8:67:13:17:23:64:a6:f1:60:50:33:dc:76:6a:3f: 84:52:fa:87:44:5c:5a:e9:90:ea:81:0b:3b:5d:35: 82:1c:c8:1e:21:27:f4:ae:51:72:d0:a0:57:57:0b: 36:d7:d1:4c:d7:d9:b8:e4:bc:53:00:c3:94:03:8c: 95:ad:f6:46:36:cb:7f:d6:c7:05:23:f4:76:e4:30: f4:9d:68:8c:b1:60:51:43:d8:64:6d:40:8d:24:c0: 7a:34:27:28:0e:0c:33:bd:d0:1c:96:3d:d6:65:55: 0c:53:92:4e:46:3c:3b:2f:de:06:89:ad:41:28:fe: 42:64:09:a0:50:d4:2d:42:af:f5:66:79:d2:87:5b: c3:4c:ae:4d:6a:9a:2a:b2:31:2d:c9:16:fb:08:a4: 9e:78:b5:a0:8e:31:20:31:38:1e:2f:2b:5f:9e:a6: 6e:66:39:ea:9e:49:44:71:5d:bb:c4:73:76:41:14: 2d:57:75:07:e2:e0:da:e6:5c:3d:30:fe:26:32:09: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:23:3D:C4:8C:D3:86:B8:EA:7A:AF:EF:C6:D9:A3:66:CF:7D:B1 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ac:31:4b:67:5d:95:d3:88:e8:da:2b:05:92:b0:81:57:f4: 68:54:e3:ac:81:59:5b:e8:9b:89:e6:90:a8:2f:a7:9f:25:10: d0:71:b3:09:d9:df:4e:97:a9:5b:e6:4c:65:c8:dc:6a:38:78: 6f:53:53:d6:13:bd:b1:a5:e0:3a:64:fb:2a:59:2a:0c:27:b5: 83:60:89:eb:f6:33:b6:58:47:57:ab:63:d0:08:e4:3e:04:a7: 11:f9:8c:f7:fc:f7:37:e3:fa:9e:89:47:e6:7c:e0:16:c1:f8: 2c:da:df:0b:d6:f3:3d:33:14:f2:e0:01:1c:b0:78:35:58:92: 99:1d:35:59:8a:aa:a3:c6:e0:f2:77:a4:05:0e:08:19:43:ee: e8:20:f5:f6:05:15:d5:9a:c7:1f:ad:56:c8:8e:22:d4:95:26: 81:b8:cf:e6:b9:89:85:de:62:fc:ea:fb:be:61:a0:f8:91:89: 6f:48:d6:37:e0:93:6a:70:9f:d3:6b:94:bc:d8:9c:0d:10:67: 38:19:f0:85:96:19:74:fe:01:df:dd:03:15:9b:2e:9f:52:ed: 43:89:35:27:44:af:8d:3f:e1:1b:a2:b3:c5:0a:1c:e4:a3:2a: a9:91:b5:85:76:69:fc:43:f1:ab:a2:3e:e1:c1:4a:09:d8:4e: be:f3:af:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwODIwMjAwNDE5WhcNMjUwODI3MjAwNDE5WjAYMRYwFAYD VQQDEw02OGE2MmE0My0zOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6LBsWWp8rR2NbatsaRMYwF+/fctk1ccswXY/ZFYbNRiacs13WlSCenjzne/P aPA/kW64SPrZGvKBLPTYZxMXI2Sm8WBQM9x2aj+EUvqHRFxa6ZDqgQs7XTWCHMge ISf0rlFy0KBXVws219FM19m45LxTAMOUA4yVrfZGNst/1scFI/R25DD0nWiMsWBR Q9hkbUCNJMB6NCcoDgwzvdAclj3WZVUMU5JORjw7L94Gia1BKP5CZAmgUNQtQq/1 ZnnSh1vDTK5NapoqsjEtyRb7CKSeeLWgjjEgMTgeLytfnqZuZjnqnklEcV27xHN2 QRQtV3UH4uDa5lw9MP4mMgmONwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApeIz3E jNOGuOp6r+/G2aNmz32xMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrDFLZ12V04jo2isFkrCBV/RoVOOsgVlb6JuJ5pCoL6efJRDQcbMJ 2d9Ol6lb5kxlyNxqOHhvU1PWE72xpeA6ZPsqWSoMJ7WDYInr9jO2WEdXq2PQCOQ+ BKcR+Yz3/Pc34/qeiUfmfOAWwfgs2t8L1vM9MxTy4AEcsHg1WJKZHTVZiqqjxuDy d6QFDggZQ+7oIPX2BRXVmscfrVbIjiLUlSaBuM/muYmF3mL86vu+YaD4kYlvSNY3 4JNqcJ/Ta5S82JwNEGc4GfCFlhl0/gHf3QMVmy6fUu1DiTUnRK+NP+EborPFChzk oyqpkbWFdmn8Q/Groj7hwUoJ2E6+86/c -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:38 2025 by rpki-client