$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: /X6dI7E3uGmvH+FHQmK8ZRFQrKLYUyxGkENkBbp6/kU= Subject key identifier: BA:1C:F5:A3:D3:B8:D6:77:F6:97:F2:AE:7E:5D:70:53:6F:8C:C5:BA Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 012F Signing time: Tue 05 Aug 2025 05:05:28 +0000 Manifest this update: Tue 05 Aug 2025 05:05:28 +0000 Manifest next update: Tue 12 Aug 2025 05:05:28 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: znZ3he9vc7e4mXDuSdIXNNCXx9ZOBdut7z1/7kR7DVA=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Aug 5 05:05:28 2025 GMT Not After : Aug 12 05:05:28 2025 GMT Subject: CN=68919118-68a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:48:24:b7:09:a5:d3:8d:2a:a7:f3:fd:0c: 42:13:54:6f:03:33:0c:8a:f5:6e:09:19:5c:78:31: b6:a7:ed:d7:14:dd:af:ce:67:a8:46:22:e4:9c:6d: 38:71:5b:86:cb:20:a0:16:ef:a9:95:f5:93:ac:fa: 12:35:4f:50:68:c4:8c:57:de:89:91:52:59:ee:7d: 34:09:13:61:a7:73:73:89:8c:bf:d1:8c:3b:55:4f: 8d:92:3f:2a:34:13:79:89:a5:e4:d6:7b:b4:4f:1d: af:6a:43:bd:d2:e5:02:b5:77:4a:d2:49:6d:83:04: 8b:86:77:a7:6a:6f:26:9c:9b:cd:c6:77:68:fb:7f: ea:2b:03:0b:5a:a9:81:6b:d3:10:67:be:69:f8:3f: 50:d3:cc:3c:cc:6c:a1:57:10:0a:e5:78:d6:4d:f0: 98:a0:1f:91:6f:e8:9a:a4:cf:5c:b6:ed:b9:cb:6a: f3:d8:5e:75:dd:6b:d7:5b:8b:c7:96:0d:cc:e1:44: 9d:8e:a0:8b:f2:ba:61:b8:db:24:09:1a:5c:b7:ec: 97:a6:f2:ee:31:60:1d:05:77:e2:d2:da:54:a8:d0: d7:ed:c2:49:2b:ba:ab:3a:4a:9d:5b:be:3d:50:04: 52:f0:d2:63:c5:f1:78:61:ac:bf:b4:5a:69:db:0e: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:F5:A3:D3:B8:D6:77:F6:97:F2:AE:7E:5D:70:53:6F:8C:C5:BA X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bb:77:ee:ff:c5:8b:3a:a9:4b:f6:cd:65:1b:31:7a:e1:3d: 54:06:85:8c:9e:74:6a:dc:fb:70:09:64:f6:56:be:16:3a:f6: c9:fb:7d:a7:38:14:2f:70:1a:54:a5:8a:6f:13:4f:d3:f1:46: 27:4f:5f:13:0a:50:4c:cf:9c:42:5e:58:4e:a8:79:1b:5f:ac: 35:52:e9:bc:b8:98:dc:35:ed:76:ee:8e:d4:91:1a:fe:10:41: f8:b6:1c:e9:41:3b:53:c3:e8:8f:ac:7b:1c:13:25:2f:d3:1e: ee:14:f6:72:ce:24:6c:93:31:11:db:8c:47:14:53:f0:2a:3a: 90:27:06:10:29:db:72:20:bc:48:6a:4e:64:b3:67:93:24:13: 82:f0:f6:26:4c:41:3c:e1:20:6a:5d:19:0e:56:e4:88:89:18: f4:32:0b:88:02:fd:29:fe:b5:12:d7:2a:36:3e:2d:e3:99:2d: f8:d5:5c:f1:3b:38:07:0d:c9:f1:59:c1:9c:38:e7:6c:d4:af: 58:18:b2:fb:84:a5:2f:78:31:44:e5:ce:36:ac:11:73:20:76: 53:73:ed:0c:e5:22:77:af:eb:1a:e0:94:d3:42:44:e8:6d:e8: 36:3d:5b:86:cf:a2:6a:7a:d5:7a:26:65:7d:c1:7b:5d:c4:68: 7f:a2:86:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwODA1MDUwNTI4WhcNMjUwODEyMDUwNTI4WjAYMRYwFAYD VQQDEw02ODkxOTExOC02OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmRIJLcJpdONKqfz/QxCE1RvAzMMivVuCRlceDG2p+3XFN2vzmeoRiLknG04 cVuGyyCgFu+plfWTrPoSNU9QaMSMV96JkVJZ7n00CRNhp3NziYy/0Yw7VU+Nkj8q NBN5iaXk1nu0Tx2vakO90uUCtXdK0kltgwSLhnenam8mnJvNxndo+3/qKwMLWqmB a9MQZ75p+D9Q08w8zGyhVxAK5XjWTfCYoB+Rb+iapM9ctu25y2rz2F513WvXW4vH lg3M4USdjqCL8rphuNskCRpct+yXpvLuMWAdBXfi0tpUqNDX7cJJK7qrOkqdW749 UARS8NJjxfF4Yay/tFpp2w7PcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoc9aPT uNZ39pfyrn5dcFNvjMW6MB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxu3fu/8WLOqlL9s1lGzF64T1UBoWMnnRq3PtwCWT2Vr4WOvbJ+32n OBQvcBpUpYpvE0/T8UYnT18TClBMz5xCXlhOqHkbX6w1Uum8uJjcNe127o7UkRr+ EEH4thzpQTtTw+iPrHscEyUv0x7uFPZyziRskzER24xHFFPwKjqQJwYQKdtyILxI ak5ks2eTJBOC8PYmTEE84SBqXRkOVuSIiRj0MguIAv0p/rUS1yo2Pi3jmS341Vzx OzgHDcnxWcGcOOds1K9YGLL7hKUveDFE5c42rBFzIHZTc+0M5SJ3r+sa4JTTQkTo beg2PVuGz6JqetV6JmV9wXtdxGh/ooZk -----END CERTIFICATE-----Generated at Wed Aug 6 11:22:26 2025 by rpki-client