$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: 0BcEQEiT4SjxiMH+k3iMU7QGD4r2hlhAJMBnpFG33Aw= Subject key identifier: 5E:35:DF:6E:47:EF:82:9C:83:00:5A:71:58:D2:F5:01:32:B4:6A:C0 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0172 Signing time: Tue 09 Sep 2025 03:56:46 +0000 Manifest this update: Tue 09 Sep 2025 03:56:45 +0000 Manifest next update: Tue 16 Sep 2025 03:56:45 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: 0w1qAhQTig2Z5QsTyJdlVSmsa4FRQheOXz5qV+bkCz8=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Sep 9 03:56:45 2025 GMT Not After : Sep 16 03:56:45 2025 GMT Subject: CN=68bfa57e-8476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c3:6e:f7:5c:ec:9d:6f:36:af:f7:ba:6f:c9: 7e:88:47:f7:8c:1c:9b:0c:e9:fc:89:25:fe:62:63: b7:df:eb:9f:9b:fa:73:76:34:73:47:10:eb:9b:a8: 7a:6f:42:81:8c:e3:78:1e:8d:35:85:b5:1d:cc:77: b8:60:26:29:d9:1d:a4:72:16:4b:b8:86:7c:2e:b3: de:41:83:ee:1a:f0:70:a4:78:7a:07:e3:3f:d8:7f: b7:f6:7b:f4:ab:53:15:8b:3b:5c:63:3a:ca:31:e5: de:07:62:e6:b4:3d:e9:04:61:88:e5:10:ba:67:da: b3:14:23:63:7e:37:ef:6c:e4:20:f0:e2:cb:77:65: 38:55:5a:84:e0:d2:29:39:78:a7:51:3a:c5:b7:b2: 03:8a:b6:8d:e0:dd:ba:46:f0:74:3d:22:7a:d9:45: d2:cd:25:89:8a:a2:37:ad:df:97:e4:dd:ef:b4:fb: 30:9e:93:bf:fd:c2:52:90:44:ea:2a:44:37:8c:c8: 5b:2b:1f:04:46:4f:8d:c8:b7:3a:43:32:17:fd:18: e7:19:9f:8b:f5:0a:2b:c2:ab:d4:6b:dc:a1:8c:ba: 20:86:ac:d6:0c:3d:f5:4a:7c:de:ba:66:fd:58:2d: fb:19:b7:3b:44:ef:9d:b9:5c:3f:98:c3:e6:53:bc: e7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:DF:6E:47:EF:82:9C:83:00:5A:71:58:D2:F5:01:32:B4:6A:C0 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:2b:97:78:63:3c:a2:63:75:70:b4:b3:b1:ad:a3:57:51:56: 07:97:1c:95:1d:06:53:31:97:e7:f5:53:2e:6e:c7:ef:66:73: 2f:50:ff:18:8b:da:95:6f:b0:b8:f3:35:c1:60:50:4f:9a:e1: 27:dd:6a:2e:b4:a7:f8:25:ad:2d:ee:a5:3b:bc:11:75:9a:83: 69:af:f6:e8:1e:97:41:ac:c1:fc:db:eb:46:23:8c:15:5c:b5: d3:6b:dd:61:9b:b2:9d:3f:89:a0:1b:e7:b8:f6:9d:16:08:41: 45:6a:c5:9f:6a:62:b0:e0:ff:94:5a:af:c9:89:43:48:99:cc: ca:58:6e:ca:fd:ab:f0:66:6b:b3:2f:1f:15:62:07:0c:79:0e: d6:e2:a6:c6:be:5b:ae:a9:35:65:f6:5b:ba:bd:19:26:1f:95: d6:d2:50:a9:d5:cc:6d:05:17:c2:a7:d0:21:02:6a:e7:9f:57: 17:63:b4:0e:a0:5d:41:2d:a2:28:12:9e:df:5f:42:b8:7e:b3: 1b:bb:0c:24:44:ab:b1:d8:25:39:32:48:68:df:f7:b8:61:7d: 14:5d:6e:2d:9f:3e:d6:cc:7c:bd:0e:b7:e3:ae:dd:53:15:fd: 58:e4:98:e8:75:44:f3:c3:ef:41:b4:61:ab:a3:03:bc:24:56: 92:eb:bf:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwOTA5MDM1NjQ1WhcNMjUwOTE2MDM1NjQ1WjAYMRYwFAYD VQQDEw02OGJmYTU3ZS04NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sNu91zsnW82r/e6b8l+iEf3jBybDOn8iSX+YmO33+ufm/pzdjRzRxDrm6h6 b0KBjON4Ho01hbUdzHe4YCYp2R2kchZLuIZ8LrPeQYPuGvBwpHh6B+M/2H+39nv0 q1MViztcYzrKMeXeB2LmtD3pBGGI5RC6Z9qzFCNjfjfvbOQg8OLLd2U4VVqE4NIp OXinUTrFt7IDiraN4N26RvB0PSJ62UXSzSWJiqI3rd+X5N3vtPswnpO//cJSkETq KkQ3jMhbKx8ERk+NyLc6QzIX/RjnGZ+L9QorwqvUa9yhjLoghqzWDD31Snzeumb9 WC37Gbc7RO+duVw/mMPmU7znfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF41325H 74KcgwBacVjS9QEytGrAMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzK5d4YzyiY3VwtLOxraNXUVYHlxyVHQZTMZfn9VMubsfvZnMvUP8Y i9qVb7C48zXBYFBPmuEn3WoutKf4Ja0t7qU7vBF1moNpr/boHpdBrMH82+tGI4wV XLXTa91hm7KdP4mgG+e49p0WCEFFasWfamKw4P+UWq/JiUNImczKWG7K/avwZmuz Lx8VYgcMeQ7W4qbGvluuqTVl9lu6vRkmH5XW0lCp1cxtBRfCp9AhAmrnn1cXY7QO oF1BLaIoEp7fX0K4frMbuwwkRKux2CU5Mkho3/e4YX0UXW4tnz7WzHy9Drfjrt1T Ff1Y5JjodUTzw+9BtGGrowO8JFaS679z -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:14 2025 by rpki-client