$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: 4CfdQ2qNmjaTmXCD5YYyulELPxCilfh87YVK5EbnenQ= Subject key identifier: 7F:03:1C:66:C3:02:65:78:AC:9F:E4:18:97:CB:B0:A9:5F:E7:01:68 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: B8 Signing time: Mon 11 Aug 2025 06:23:36 +0000 Manifest this update: Mon 11 Aug 2025 06:23:36 +0000 Manifest next update: Mon 18 Aug 2025 06:23:36 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: Fuw0XixhNVXIePuE03ZJKe6vw3rirbzsKqCJxVdNSPI=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Aug 11 06:23:36 2025 GMT Not After : Aug 18 06:23:36 2025 GMT Subject: CN=68998c68-9af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:8d:db:35:0a:00:a0:ba:fe:ce:3a:f7:61: 71:d6:e7:12:f5:13:05:2a:28:a2:89:c0:b3:d7:c1: c6:c2:62:af:f5:43:ed:ec:f0:06:20:a2:d9:e0:50: 63:60:8b:78:08:2f:a5:4a:00:06:dc:a1:0e:67:f9: ad:83:8f:80:c0:10:32:cc:55:20:c9:d7:bf:5a:5c: e4:e3:7e:72:b3:04:5d:de:93:67:f8:ee:93:22:93: 61:f3:1b:4b:cc:5b:40:29:13:f7:d7:54:ff:ac:38: fe:94:d8:52:b6:ba:b8:f5:a3:c7:15:93:95:a1:82: 48:ba:b6:d3:ec:ad:d0:a6:d4:a5:b2:a5:8d:80:1c: bb:e4:d1:4c:9c:c1:df:a4:46:d8:3d:c1:72:fd:cd: 8c:63:92:e7:f0:12:c0:75:8d:cf:1a:82:63:04:9f: f6:a7:28:f2:fe:b2:14:c0:a1:64:44:34:68:90:13: cd:77:2a:b9:2c:7c:a5:73:b6:64:87:1b:6a:46:66: a7:09:ce:55:07:45:4f:78:cf:4d:1e:cb:00:a2:b9: dc:e7:cf:1b:22:a7:54:5f:c9:f8:65:31:5d:c5:47: c0:46:6e:eb:3a:fe:1b:fb:1c:55:e1:d5:44:d6:12: fe:05:fe:f2:de:46:1f:b4:9b:80:25:a2:58:73:74: d8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:03:1C:66:C3:02:65:78:AC:9F:E4:18:97:CB:B0:A9:5F:E7:01:68 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b2:19:95:2b:e2:2f:49:7e:1d:54:2e:b1:b0:ab:8f:1a:e2: 14:9e:b8:92:1f:8a:1e:21:c1:ae:66:d4:fd:d6:0b:d1:43:d5: 96:da:e8:7d:36:a3:a0:08:2a:0b:bc:83:84:0d:e6:eb:7f:ac: 50:fa:63:43:19:5b:9a:d7:35:e5:9f:a4:7b:f8:0e:90:e4:44: d7:03:7f:f9:13:ec:ad:d8:4d:51:9d:4a:45:11:8e:aa:30:99: 60:6f:d5:a9:3a:b6:cf:e2:a1:77:89:bb:dd:3f:86:3d:f2:74: ff:cd:f9:d3:49:11:b0:de:b5:05:97:b5:de:55:a0:0e:25:da: 0b:2d:f1:9e:b8:57:77:0b:0b:4a:5c:15:36:ab:e7:15:77:e1: 2c:11:fd:c2:55:a4:15:91:b1:f0:02:a3:96:e3:21:fa:0e:c8: 0e:da:34:6b:04:4b:0d:f5:ce:b9:51:c7:9c:f7:3a:49:4e:f5: 80:2a:23:b6:05:67:08:b7:6d:4b:34:a7:d5:c0:bd:06:c7:e3: ba:60:9b:bc:e4:fe:58:49:9b:0d:49:83:bc:e3:6a:8d:f6:79: 6f:21:77:6c:3a:ab:41:c2:77:78:71:c4:6d:79:6e:dc:c5:54: 5d:a0:ca:e8:b9:b4:13:50:ec:6c:7f:84:fc:7d:90:93:dd:38: 8f:e4:8e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwODExMDYyMzM2WhcNMjUwODE4MDYyMzM2WjAYMRYwFAYD VQQDEw02ODk5OGM2OC05YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZiN2zUKAKC6/s4692Fx1ucS9RMFKiiiicCz18HGwmKv9UPt7PAGIKLZ4FBj YIt4CC+lSgAG3KEOZ/mtg4+AwBAyzFUgyde/Wlzk435yswRd3pNn+O6TIpNh8xtL zFtAKRP311T/rDj+lNhStrq49aPHFZOVoYJIurbT7K3QptSlsqWNgBy75NFMnMHf pEbYPcFy/c2MY5Ln8BLAdY3PGoJjBJ/2pyjy/rIUwKFkRDRokBPNdyq5LHylc7Zk hxtqRmanCc5VB0VPeM9NHssAornc588bIqdUX8n4ZTFdxUfARm7rOv4b+xxV4dVE 1hL+Bf7y3kYftJuAJaJYc3TYOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8DHGbD AmV4rJ/kGJfLsKlf5wFoMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHshmVK+IvSX4dVC6xsKuPGuIUnriSH4oeIcGuZtT91gvRQ9WW2uh9 NqOgCCoLvIOEDebrf6xQ+mNDGVua1zXln6R7+A6Q5ETXA3/5E+yt2E1RnUpFEY6q MJlgb9WpOrbP4qF3ibvdP4Y98nT/zfnTSRGw3rUFl7XeVaAOJdoLLfGeuFd3CwtK XBU2q+cVd+EsEf3CVaQVkbHwAqOW4yH6DsgO2jRrBEsN9c65Ucec9zpJTvWAKiO2 BWcIt21LNKfVwL0Gx+O6YJu85P5YSZsNSYO842qN9nlvIXdsOqtBwnd4ccRteW7c xVRdoMroubQTUOxsf4T8fZCT3TiP5I7L -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:28 2025 by rpki-client