$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft File: nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft (raw, json) Hash identifier: YyZucEMNkvo1vwDyUdEA1bCQPGe6+7b6JRa+xyP/eb4= Subject key identifier: 0C:28:5C:7A:99:40:78:7B:86:E4:90:0C:72:02:14:0D:D9:2E:71:2D Authority key identifier: 9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E Certificate issuer: /CN=A91AB383/serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft Manifest number: 05AD Signing time: Mon 04 Aug 2025 23:38:30 +0000 Manifest this update: Mon 04 Aug 2025 23:38:29 +0000 Manifest next update: Mon 11 Aug 2025 23:38:29 +0000 Files and hashes: 1: nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl (hash: UxxWt3frurxrZcP/9Q+YaNwp3dVVIAp8lBkvcOVhgLw=) 2: 7AFB859484C711EF9740BE81C4F9AE02.roa (hash: 414/5RyiyMUZFN0SEFameoFpU4rRSpvpvgBCGAe+h0s=) 3: B69E6026355C11F0B8094E3AC4F9AE02.roa (hash: flZUyrEx/m5nugLzwpifQhh18V8aEEhO9FbVnmFKA6A=) 4: 12EDB8D284C711EFA075A16AC4F9AE02.roa (hash: 5J+X0LjgteZA7gTRmfGapcuapYL3WvWAdk4QrzcZNQo=) 5: B5579BEA421911EC832A4A41C4F9AE02.roa (hash: G80CVYb1Ik+/tcRJsx2ECeYr4cToFW70btAWzXQMVLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB383, serialNumber=9C2351D45A97D71D03D6BC385B37DD9BFB80CF5E Validity Not Before: Aug 4 23:38:29 2025 GMT Not After : Aug 11 23:38:29 2025 GMT Subject: CN=68914476-b890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:d5:d7:ca:b1:02:9e:7e:42:89:eb:6d:d0: 8e:1e:73:84:9a:4f:ae:31:be:03:3c:8e:2a:9e:a3: 22:49:ea:f0:1e:89:f8:7a:2a:83:03:44:0d:a4:12: f6:11:82:80:39:6d:7d:67:b4:46:c5:b1:2f:44:79: aa:ba:88:e2:fb:2d:32:7d:b9:44:fc:7e:67:76:db: 13:a8:ff:79:13:6a:44:5d:f3:37:02:dc:f2:3b:49: 1c:48:56:f2:dc:2a:97:46:0b:91:65:e4:e4:e6:28: be:4e:6f:ed:a0:ae:43:f3:aa:03:03:46:6e:97:08: 88:88:a8:e2:1f:60:89:63:61:b4:3a:c9:75:e4:df: e7:ff:90:63:88:1e:c6:9b:a8:79:a1:d7:4a:54:1f: 13:49:09:78:fc:7c:d3:44:ed:9e:97:61:ef:7f:41: c8:55:27:fb:93:fc:cc:35:6a:c3:a3:71:6f:de:9b: 44:79:8e:2b:da:d4:ac:c4:7e:29:6b:67:d9:39:64: 70:e3:4b:be:e0:e9:60:e3:62:88:74:51:9f:8e:aa: 05:73:9b:ae:bb:91:fe:2d:07:51:93:3e:b7:8b:71: 7f:8b:9a:a9:cf:3d:6b:90:31:cf:ef:04:ee:66:f3: 4a:c5:42:cd:ca:f3:1c:cf:b6:f0:22:97:e2:3d:93: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:5C:7A:99:40:78:7B:86:E4:90:0C:72:02:14:0D:D9:2E:71:2D X509v3 Authority Key Identifier: keyid:9C:23:51:D4:5A:97:D7:1D:03:D6:BC:38:5B:37:DD:9B:FB:80:CF:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nCNR1FqX1x0D1rw4Wzfdm_uAz14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB383/8CC2A9AADE7711EB8739EC11C4F9AE02/nCNR1FqX1x0D1rw4Wzfdm_uAz14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:da:93:32:07:7a:ad:35:59:3d:8d:32:bc:cd:a1:00:46:e6: 91:80:75:92:09:01:f7:71:91:8f:1c:19:09:f8:0d:14:48:ce: b4:9c:a3:ef:57:13:df:93:2f:a0:21:3d:5b:6f:be:18:ac:df: 67:7d:d8:f3:19:2f:16:bc:dd:11:59:37:e9:5d:d9:6b:72:62: 16:c4:be:4e:49:10:d0:00:01:a2:e5:9b:f2:c6:8b:f3:b8:c3: 7e:d9:9d:de:9f:83:0d:c3:7e:1f:de:ea:ad:0b:f0:99:80:9d: b4:e3:5c:f5:07:23:9e:fb:07:47:e6:44:d7:28:3f:7c:d6:10: 47:f9:95:d9:26:48:3b:3e:11:20:51:2c:72:8f:12:d2:64:2c: 68:3a:aa:c9:9a:b6:40:2c:96:d1:47:47:4e:a2:11:fe:60:bf: 19:f7:82:70:ba:c3:eb:b4:3f:4e:be:b5:ac:d6:cd:90:c0:f1: 94:77:8a:13:09:31:95:5b:c1:e0:9e:bf:ec:e2:1e:d2:20:f6: a0:03:33:ef:26:46:d6:8a:05:db:20:d9:a8:72:02:cb:d5:42: 9d:2d:c2:50:c7:01:ac:50:f0:0d:54:ee:3b:a3:27:55:3f:8c: 36:47:14:c2:79:a3:dc:6f:a6:5e:5e:4b:6b:11:02:72:17:10: 56:c6:7d:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODMxMTAvBgNVBAUTKDlDMjM1MUQ0NUE5N0Q3MUQwM0Q2QkMzODVCMzdERDlC RkI4MENGNUUwHhcNMjUwODA0MjMzODI5WhcNMjUwODExMjMzODI5WjAYMRYwFAYD VQQDEw02ODkxNDQ3Ni1iODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3V/V18qxAp5+QonrbdCOHnOEmk+uMb4DPI4qnqMiSerwHon4eiqDA0QNpBL2 EYKAOW19Z7RGxbEvRHmquoji+y0yfblE/H5ndtsTqP95E2pEXfM3AtzyO0kcSFby 3CqXRguRZeTk5ii+Tm/toK5D86oDA0ZulwiIiKjiH2CJY2G0Osl15N/n/5BjiB7G m6h5oddKVB8TSQl4/HzTRO2el2Hvf0HIVSf7k/zMNWrDo3Fv3ptEeY4r2tSsxH4p a2fZOWRw40u+4Olg42KIdFGfjqoFc5uuu5H+LQdRkz63i3F/i5qpzz1rkDHP7wTu ZvNKxULNyvMcz7bwIpfiPZOBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwoXHqZ QHh7huSQDHICFA3ZLnEtMB8GA1UdIwQYMBaAFJwjUdRal9cdA9a8OFs33Zv7gM9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4My84Q0MyQTlBQURF NzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4MEQxcnc0V3pmZG1fdUF6 MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25DTlIxRnFYMXgwRDFydzRXemZkbV91QXoxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4My84Q0MyQTlBQURFNzcxMUVCODczOUVDMTFDNEY5QUUwMi9uQ05SMUZxWDF4 MEQxcnc0V3pmZG1fdUF6MTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB2pMyB3qtNVk9jTK8zaEARuaRgHWSCQH3cZGPHBkJ+A0USM60nKPv VxPfky+gIT1bb74YrN9nfdjzGS8WvN0RWTfpXdlrcmIWxL5OSRDQAAGi5Zvyxovz uMN+2Z3en4MNw34f3uqtC/CZgJ2041z1ByOe+wdH5kTXKD981hBH+ZXZJkg7PhEg USxyjxLSZCxoOqrJmrZALJbRR0dOohH+YL8Z94JwusPrtD9OvrWs1s2QwPGUd4oT CTGVW8Hgnr/s4h7SIPagAzPvJkbWigXbINmocgLL1UKdLcJQxwGsUPANVO47oydV P4w2RxTCeaPcb6ZeXktrEQJyFxBWxn1c -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:49 2025 by rpki-client