$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft File: nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft (raw, json) Hash identifier: 775KCJ3wXnRMW0g6RTE6Qw+im7D0b89vIqVF79tzLqk= Subject key identifier: D3:29:7A:D1:00:E5:5E:B1:FF:EA:5A:44:AF:BB:A4:6A:7E:A5:5A:4C Authority key identifier: 9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE Certificate issuer: /CN=A91A7CDD/serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft Manifest number: 010A Signing time: Wed 13 Aug 2025 05:33:59 +0000 Manifest this update: Wed 13 Aug 2025 05:33:58 +0000 Manifest next update: Wed 20 Aug 2025 05:33:58 +0000 Files and hashes: 1: nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl (hash: sedvuHodbwq1nHUoavG4kUD20n6ociEZZG17C02vZBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD, serialNumber=9D46044060FA96E94A231E030A30E3D654F411AE Validity Not Before: Aug 13 05:33:58 2025 GMT Not After : Aug 20 05:33:58 2025 GMT Subject: CN=689c23c6-6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:fe:0a:21:0a:66:8d:ca:f0:0a:ba:ea:b1: fd:4a:8a:67:c7:70:93:8d:af:d4:1c:29:61:8a:7b: 69:a9:73:e0:6b:86:48:cb:7d:b9:ff:12:72:d4:d0: f6:42:c0:7a:05:6a:5b:61:7a:ea:22:91:23:36:23: 63:aa:ba:cb:2f:8f:9b:79:52:10:70:ed:d5:d6:47: 4b:43:7a:e7:b9:1a:77:3b:ce:78:3f:e5:55:2b:de: 62:38:d8:4c:fd:ff:a9:31:60:1d:1c:a4:10:da:8c: a4:62:db:30:cc:fa:c9:d4:ec:be:ce:25:e4:10:22: 37:f8:79:77:f6:63:00:c2:6f:53:70:99:63:b9:db: 1f:f4:98:79:9f:5e:b2:53:a4:ad:2e:06:79:7a:6a: c4:16:48:79:9c:e5:47:57:18:0c:b8:04:d0:1d:c7: 07:bf:75:e5:fd:08:d8:19:62:30:8f:df:49:7c:27: 06:6c:94:9e:19:a5:55:14:4b:dc:cb:05:84:fb:06: 03:9e:ae:ae:2f:1d:0f:f5:43:96:99:83:97:4c:3f: 6c:08:16:64:36:55:b9:9b:b3:a8:e2:d6:19:e5:9b: 52:b4:43:e1:a9:9f:25:71:60:c5:48:d3:cf:4d:2a: 0e:30:28:97:38:12:99:17:57:b1:ae:06:c8:1e:57: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:7A:D1:00:E5:5E:B1:FF:EA:5A:44:AF:BB:A4:6A:7E:A5:5A:4C X509v3 Authority Key Identifier: keyid:9D:46:04:40:60:FA:96:E9:4A:23:1E:03:0A:30:E3:D6:54:F4:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nUYEQGD6lulKIx4DCjDj1lT0Ea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/936B31E0DD0D11EE9D292D6AC4F9AE02/nUYEQGD6lulKIx4DCjDj1lT0Ea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:58:0f:65:c5:87:dc:77:71:79:55:46:fe:f2:62:75:32:53: 8a:2d:b5:f6:19:69:f4:58:02:99:7d:c0:2f:1d:2e:14:27:46: 02:c5:6e:b6:56:07:95:84:94:3f:61:5d:59:55:22:0f:63:13: 10:a8:9b:54:36:d9:61:c7:ee:d0:d2:01:a7:46:4a:53:b4:ec: 95:ef:bb:73:1d:2a:79:b2:e4:bb:f0:51:63:19:61:d3:2c:11: e9:2e:9c:e9:3a:fc:a9:40:3d:1f:14:5c:31:6c:bc:35:55:7d: e9:57:81:cd:48:af:91:78:98:1f:36:0b:15:fa:9e:cf:83:09: 20:eb:29:c7:0f:f4:8b:b5:6a:3c:26:50:7f:f4:e0:21:e0:23: 50:ea:f3:18:b5:40:7d:3e:ef:5c:56:cd:21:4a:8e:6d:ca:45: 67:1e:70:3d:36:b9:99:5d:5f:30:30:f1:cf:58:d2:8e:2c:6f: d6:7c:d3:e0:2f:55:a8:6d:23:1c:91:45:53:bb:87:f4:ac:ce: ec:f1:d1:8e:26:c6:25:8d:7a:a3:c6:18:c0:02:14:7d:80:e1: 29:e2:62:ca:f2:94:e4:31:be:59:21:16:bf:d8:4b:a9:e0:d8: c0:b7:96:57:c9:f2:9d:4e:eb:85:0f:a3:6c:a8:7e:e3:f4:91: 32:15:0e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDREQxMTAvBgNVBAUTKDlENDYwNDQwNjBGQTk2RTk0QTIzMUUwMzBBMzBFM0Q2 NTRGNDExQUUwHhcNMjUwODEzMDUzMzU4WhcNMjUwODIwMDUzMzU4WjAYMRYwFAYD VQQDEw02ODljMjNjNi02ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lj+CiEKZo3K8Aq66rH9Sopnx3CTja/UHClhintpqXPga4ZIy325/xJy1ND2 QsB6BWpbYXrqIpEjNiNjqrrLL4+beVIQcO3V1kdLQ3rnuRp3O854P+VVK95iONhM /f+pMWAdHKQQ2oykYtswzPrJ1Oy+ziXkECI3+Hl39mMAwm9TcJljudsf9Jh5n16y U6StLgZ5emrEFkh5nOVHVxgMuATQHccHv3Xl/QjYGWIwj99JfCcGbJSeGaVVFEvc ywWE+wYDnq6uLx0P9UOWmYOXTD9sCBZkNlW5m7Oo4tYZ5ZtStEPhqZ8lcWDFSNPP TSoOMCiXOBKZF1exrgbIHlcS3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMpetEA 5V6x/+paRK+7pGp+pVpMMB8GA1UdIwQYMBaAFJ1GBEBg+pbpSiMeAwow49ZU9BGu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC85MzZCMzFFMERE MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1bEtJeDREQ2pEajFsVDBF YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25VWUVRR0Q2bHVsS0l4NERDakRqMWxUMEVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NERC85MzZCMzFFMEREMEQxMUVFOUQyOTJENkFDNEY5QUUwMi9uVVlFUUdENmx1 bEtJeDREQ2pEajFsVDBFYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTWA9lxYfcd3F5VUb+8mJ1MlOKLbX2GWn0WAKZfcAvHS4UJ0YCxW62 VgeVhJQ/YV1ZVSIPYxMQqJtUNtlhx+7Q0gGnRkpTtOyV77tzHSp5suS78FFjGWHT LBHpLpzpOvypQD0fFFwxbLw1VX3pV4HNSK+ReJgfNgsV+p7Pgwkg6ynHD/SLtWo8 JlB/9OAh4CNQ6vMYtUB9Pu9cVs0hSo5tykVnHnA9NrmZXV8wMPHPWNKOLG/WfNPg L1WobSMckUVTu4f0rM7s8dGOJsYljXqjxhjAAhR9gOEp4mLK8pTkMb5ZIRa/2Eup 4NjAt5ZXyfKdTuuFD6NsqH7j9JEyFQ5Z -----END CERTIFICATE-----Generated at Wed Aug 13 09:51:08 2025 by rpki-client