$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: G0PtWG6G0h1DDcpYGk1YuCGRp9UKB6B5Z+NolHYgZ/I= Subject key identifier: 15:48:02:61:1D:45:F5:AE:7B:D9:4D:0A:CE:25:B5:88:0C:6A:D6:A2 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 011E Signing time: Tue 09 Sep 2025 05:10:58 +0000 Manifest this update: Tue 09 Sep 2025 05:10:58 +0000 Manifest next update: Tue 16 Sep 2025 05:10:58 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: udgU+ce18ARt/Lm0M7+eGgywkoMF+kirc8F1bEfHbsI=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Sep 9 05:10:58 2025 GMT Not After : Sep 16 05:10:58 2025 GMT Subject: CN=68bfb6e2-0cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:c7:6c:9e:3b:05:f7:1d:24:14:d6:89:a1: ed:cc:ad:0f:61:a0:c1:d6:25:ed:df:b5:3e:df:03: a8:6e:cb:b6:e9:1e:df:57:38:55:ca:4c:2c:c8:2c: 46:34:b3:8e:ed:1c:ad:6b:5e:46:7d:4c:1f:91:4d: a5:73:f3:99:8d:61:a7:b8:42:2b:7d:d1:80:12:72: 18:58:f3:ab:01:19:eb:a1:b8:68:b2:e3:7f:bb:ba: 6d:e0:0d:e3:22:09:43:7c:a8:88:c3:68:2e:49:86: 3c:b3:3b:b0:c3:5b:db:46:b3:29:27:9b:da:73:a1: 4e:ae:18:fe:78:81:3a:54:ef:60:60:0f:f0:e3:f0: 4b:d6:44:d7:8d:78:ff:14:c5:cc:3e:76:58:6c:1a: 76:e1:20:73:10:e5:c0:83:59:f2:e5:13:0c:25:8f: f4:fd:8a:4e:07:39:13:af:07:cd:4e:ac:97:02:ed: e2:4a:4a:a6:d4:21:c3:3b:b7:22:d3:19:3a:cb:d6: a1:e5:71:6d:b7:fd:24:cd:77:40:23:61:16:3f:5a: 4d:b0:f5:5c:35:86:32:8c:6c:85:ad:8c:d0:ae:a1: 3c:69:d4:54:77:fe:ad:17:54:80:e2:2e:49:57:1e: a0:50:01:eb:62:53:ae:f8:02:a0:12:bc:f5:3a:22: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:02:61:1D:45:F5:AE:7B:D9:4D:0A:CE:25:B5:88:0C:6A:D6:A2 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:75:47:34:9a:3a:44:9a:2a:3a:a2:45:41:db:f4:ee:c0:05: 5c:7b:90:93:e6:28:91:03:77:20:37:40:c2:1b:5b:a1:d1:56: 22:eb:c7:24:94:78:06:64:f5:3d:74:62:68:fa:ec:fc:1c:94: 32:b7:37:97:5a:ff:0d:7b:85:06:ab:92:e3:06:cc:75:2f:06: 4d:32:64:fe:6d:32:73:48:61:6d:93:bd:55:3e:a5:88:b1:9f: 44:05:e1:a9:1f:fd:a4:9f:37:ea:8e:d6:d1:58:fc:51:7a:23: 70:89:3d:66:38:e1:d4:11:90:3b:ed:0a:57:0e:ee:33:18:66: 1e:d9:f6:2a:8a:e5:99:83:10:74:b4:56:5a:da:eb:3d:f5:00: 8d:91:e8:6a:23:12:4b:86:fc:71:5d:0a:97:83:9b:ea:f3:e1: dc:b4:22:5d:57:d7:06:9e:32:e3:f8:89:c8:e9:f9:b9:08:d8: 02:21:55:a3:74:9c:9c:bf:83:70:9b:d5:ee:4c:36:6c:6f:c0: e9:4b:2f:f1:5f:d6:5c:58:11:75:51:52:9e:e0:93:1d:d0:13: 0d:83:90:82:17:02:65:97:51:02:73:cf:43:4a:6a:e0:f7:95: 2d:a7:7c:b9:57:ee:ab:93:3f:e3:45:0d:a1:71:10:aa:8a:7a: 82:32:b8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwOTA5MDUxMDU4WhcNMjUwOTE2MDUxMDU4WjAYMRYwFAYD VQQDEw02OGJmYjZlMi0wY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9HHbJ47BfcdJBTWiaHtzK0PYaDB1iXt37U+3wOobsu26R7fVzhVykwsyCxG NLOO7Ryta15GfUwfkU2lc/OZjWGnuEIrfdGAEnIYWPOrARnrobhosuN/u7pt4A3j IglDfKiIw2guSYY8szuww1vbRrMpJ5vac6FOrhj+eIE6VO9gYA/w4/BL1kTXjXj/ FMXMPnZYbBp24SBzEOXAg1ny5RMMJY/0/YpOBzkTrwfNTqyXAu3iSkqm1CHDO7ci 0xk6y9ah5XFtt/0kzXdAI2EWP1pNsPVcNYYyjGyFrYzQrqE8adRUd/6tF1SA4i5J Vx6gUAHrYlOu+AKgErz1OiLUpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVIAmEd RfWue9lNCs4ltYgMataiMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCidUc0mjpEmio6okVB2/TuwAVce5CT5iiRA3cgN0DCG1uh0VYi68ck lHgGZPU9dGJo+uz8HJQytzeXWv8Ne4UGq5LjBsx1LwZNMmT+bTJzSGFtk71VPqWI sZ9EBeGpH/2knzfqjtbRWPxReiNwiT1mOOHUEZA77QpXDu4zGGYe2fYqiuWZgxB0 tFZa2us99QCNkehqIxJLhvxxXQqXg5vq8+HctCJdV9cGnjLj+InI6fm5CNgCIVWj dJycv4Nwm9XuTDZsb8DpSy/xX9ZcWBF1UVKe4JMd0BMNg5CCFwJll1ECc89DSmrg 95Utp3y5V+6rkz/jRQ2hcRCqinqCMrhm -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:38 2025 by rpki-client