$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: 8gSrkMcjl+OsDS7MTvt2CCXoJEff5suAZiTbAbvILhA= Subject key identifier: 73:8B:48:5F:E0:23:B0:5B:80:16:AA:93:36:7F:99:0A:F2:D7:B1:04 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: 9D Signing time: Thu 19 Jun 2025 05:51:26 +0000 Manifest this update: Thu 19 Jun 2025 05:51:25 +0000 Manifest next update: Thu 26 Jun 2025 05:51:25 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: ftWOqIuDJNFgPGE53RySxYc2oVQCOcSThlMBbuGUjK4=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Jun 19 05:51:25 2025 GMT Not After : Jun 26 05:51:25 2025 GMT Subject: CN=6853a55e-900e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c3:ec:5b:35:80:f0:ab:6a:20:70:c4:02:1b: c9:ac:02:4f:86:a3:9b:3b:6f:8d:72:5f:16:2b:33: 27:54:2b:09:10:7f:46:ae:49:e5:f4:45:b4:f8:05: 9d:b0:df:bb:1b:5a:6a:34:ec:72:69:16:4f:9a:c9: 41:79:85:52:05:d7:07:05:1c:0c:66:f4:18:a2:56: 8f:33:0c:19:16:8e:c2:80:6f:65:7a:5f:bb:ec:c7: 75:50:c7:89:5c:da:be:fc:5a:62:c4:52:ce:32:a4: 85:a0:89:6d:a7:15:6a:e4:f7:e9:33:2d:1c:83:04: 5a:a7:86:46:63:22:cc:bc:48:db:e0:3e:f5:90:f2: ff:d0:86:0f:39:6f:ff:f3:d3:cb:dc:ac:10:50:f1: ae:35:2e:1a:5e:9c:e4:50:70:8f:0e:e2:e5:d4:90: 2d:97:b7:7d:d7:39:3b:27:84:ec:31:a2:a5:57:62: a9:3c:fa:a5:d0:0d:8e:ef:59:c2:bd:26:16:1d:45: 66:bb:1d:07:12:ae:7b:c1:00:17:4c:30:5e:03:c1: 55:18:b4:0a:cf:98:70:ff:d8:1e:5b:5e:77:01:c2: 98:75:02:c8:0f:a3:fe:e0:db:40:a0:8f:42:1d:26: e4:e0:32:d8:e7:78:a2:8f:d1:05:f0:17:02:e0:ea: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:48:5F:E0:23:B0:5B:80:16:AA:93:36:7F:99:0A:F2:D7:B1:04 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a1:3d:57:5d:5d:f4:2f:59:26:6f:c0:17:ce:32:eb:f1:f7: 79:df:46:6e:43:e6:5b:71:31:3f:ad:a5:cb:44:01:2c:98:4f: 49:ac:13:e0:c1:ea:89:8f:1b:50:e8:04:67:69:6f:21:dd:05: 63:e8:45:c2:37:06:db:45:4b:fd:e2:f2:75:06:bc:85:fd:ef: 67:ca:e6:6a:89:17:ff:73:5f:23:1b:ca:52:08:1e:86:ec:3c: a1:49:5e:3c:04:10:0a:f7:34:d7:a3:6e:d9:75:9e:a7:1a:7e: 15:07:1e:4a:e0:a8:ad:9d:8d:1f:bb:ab:15:7d:00:33:f6:e7: e2:c2:41:d4:eb:df:35:40:74:a4:d9:20:45:04:66:50:79:fe: b1:7e:40:88:c6:40:ae:e7:73:52:bb:00:41:6d:07:13:72:ff: e6:84:b3:8e:99:79:7d:ff:61:c4:f0:a5:45:03:81:aa:b5:69: 36:8c:b6:65:31:2f:ec:4b:42:5e:87:91:fc:8a:91:3e:32:c7: 80:5d:16:3e:18:01:0b:a6:bb:34:cd:7e:5f:30:ee:40:42:fc: dd:11:26:d2:ae:86:0f:0c:7d:93:82:36:93:7e:36:b4:03:36: 20:f0:34:f3:13:f6:de:0e:a7:b3:22:12:af:75:ec:d6:18:a5: f9:e1:d7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwNjE5MDU1MTI1WhcNMjUwNjI2MDU1MTI1WjAYMRYwFAYD VQQDEw02ODUzYTU1ZS05MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMPsWzWA8KtqIHDEAhvJrAJPhqObO2+Ncl8WKzMnVCsJEH9Grknl9EW0+AWd sN+7G1pqNOxyaRZPmslBeYVSBdcHBRwMZvQYolaPMwwZFo7CgG9lel+77Md1UMeJ XNq+/FpixFLOMqSFoIltpxVq5PfpMy0cgwRap4ZGYyLMvEjb4D71kPL/0IYPOW// 89PL3KwQUPGuNS4aXpzkUHCPDuLl1JAtl7d91zk7J4TsMaKlV2KpPPql0A2O71nC vSYWHUVmux0HEq57wQAXTDBeA8FVGLQKz5hw/9geW153AcKYdQLID6P+4NtAoI9C HSbk4DLY53iij9EF8BcC4Or+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOLSF/g I7BbgBaqkzZ/mQry17EEMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBooT1XXV30L1kmb8AXzjLr8fd530ZuQ+ZbcTE/raXLRAEsmE9JrBPg weqJjxtQ6ARnaW8h3QVj6EXCNwbbRUv94vJ1BryF/e9nyuZqiRf/c18jG8pSCB6G 7DyhSV48BBAK9zTXo27ZdZ6nGn4VBx5K4KitnY0fu6sVfQAz9ufiwkHU6981QHSk 2SBFBGZQef6xfkCIxkCu53NSuwBBbQcTcv/mhLOOmXl9/2HE8KVFA4GqtWk2jLZl MS/sS0Jeh5H8ipE+MseAXRY+GAELprs0zX5fMO5AQvzdESbSroYPDH2TgjaTfja0 AzYg8DTzE/beDqezIhKvdezWGKX54dds -----END CERTIFICATE-----Generated at Fri Jun 20 17:04:07 2025 by rpki-client