$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: vn7FPl+g4aBHjIah/aVpqH5J3QwjpB/k8TpxK2xezXc= Subject key identifier: 5C:4C:B8:1C:23:86:E4:D3:EC:C0:74:53:84:CF:69:4D:6C:27:B2:D1 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 52 Signing time: Mon 11 Aug 2025 07:29:47 +0000 Manifest this update: Mon 11 Aug 2025 07:29:46 +0000 Manifest next update: Mon 18 Aug 2025 07:29:46 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: mr69u+S21gOq8T01C1AtAykEd/ut7zgQHw3sUc4QmGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Aug 11 07:29:46 2025 GMT Not After : Aug 18 07:29:46 2025 GMT Subject: CN=68999bea-1dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:a4:7e:f8:ab:71:88:db:e6:68:46:7c:50: a6:6f:5d:56:90:5e:f4:ff:75:52:44:f0:07:94:2d: 92:c0:88:53:df:5a:9f:a7:b0:dc:70:a5:dc:a3:c5: b1:88:14:6a:4d:c4:d0:c9:f2:f4:84:c8:25:eb:c8: 38:fc:f3:14:88:86:68:61:c6:00:b2:af:37:d1:1a: f6:34:df:65:c9:ee:dd:0d:d4:f4:40:2e:fc:ad:02: 52:35:5c:ce:80:44:7c:27:ff:8e:49:a3:0b:7d:23: 6c:55:4b:82:d7:fb:75:95:21:dd:70:40:27:14:1a: 49:56:58:7b:84:d6:8f:7f:61:e0:b9:bd:95:e9:9a: 1d:d3:69:6e:a0:c2:e4:70:51:53:83:c8:4a:66:70: ce:f6:5a:09:c5:a5:45:8a:e8:ee:0d:0d:f5:cb:e6: 9f:14:7d:b2:51:37:4b:d0:80:d4:8a:1c:74:a5:ff: 84:01:a4:a1:ae:69:33:ac:34:a1:13:ec:01:ee:c1: fd:4d:57:99:4c:ba:d7:67:97:26:9c:2a:c8:fb:8a: 23:d4:73:32:b2:95:67:f1:cf:01:40:c1:36:13:58: 37:13:a2:db:52:a7:01:af:fa:68:d5:7c:45:70:ea: f9:f7:b8:8a:f3:39:71:a8:29:9c:2b:4e:d8:1e:d0: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4C:B8:1C:23:86:E4:D3:EC:C0:74:53:84:CF:69:4D:6C:27:B2:D1 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:cb:ca:1b:68:53:3e:76:ac:f8:49:0d:b8:e1:c1:8c:51: 27:98:80:d5:c8:c9:5d:3d:a6:43:e7:c8:a7:ff:e2:40:d7:61: 52:15:41:fa:51:f0:01:01:80:48:b8:62:c7:e7:ef:09:6f:11: 06:1a:95:ba:b4:59:7e:b5:d8:f6:45:24:52:4d:c7:fc:ac:be: 82:57:23:25:59:97:d6:e1:47:e8:d8:c0:82:93:4b:72:8e:5a: 59:cf:35:8a:2a:91:e9:21:1b:4e:55:1d:4a:b1:87:10:21:b0: f3:01:bb:0c:94:06:f5:86:12:a9:8d:2f:70:34:10:7d:97:e6: 3d:8c:12:bb:e7:be:7a:e8:21:41:05:af:73:c1:00:29:39:79: 36:ae:03:85:6e:d1:af:13:dc:41:ff:13:58:b3:75:ef:1b:ad: dc:06:95:db:be:fc:c4:0e:85:1f:63:ad:5d:cd:85:1a:b3:15: 4f:10:e4:80:15:bf:92:64:3e:8c:eb:a9:3f:24:33:4d:f8:1d: d9:8c:9b:9a:c4:62:fb:fd:f7:74:dc:8d:86:c4:f9:72:80:70: a4:09:12:c6:3f:e6:0c:a6:d2:03:4e:8f:bc:59:c3:54:6c:3a: 13:97:ec:56:54:df:23:38:29:37:33:97:45:df:68:75:1d:b2: e6:79:d6:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTA4MTEwNzI5NDZaFw0yNTA4MTgwNzI5NDZaMBgxFjAUBgNV BAMTDTY4OTk5YmVhLTFkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3IaR++KtxiNvmaEZ8UKZvXVaQXvT/dVJE8AeULZLAiFPfWp+nsNxwpdyjxbGI FGpNxNDJ8vSEyCXryDj88xSIhmhhxgCyrzfRGvY032XJ7t0N1PRALvytAlI1XM6A RHwn/45Jowt9I2xVS4LX+3WVId1wQCcUGklWWHuE1o9/YeC5vZXpmh3TaW6gwuRw UVODyEpmcM72WgnFpUWK6O4NDfXL5p8UfbJRN0vQgNSKHHSl/4QBpKGuaTOsNKET 7AHuwf1NV5lMutdnlyacKsj7iiPUczKylWfxzwFAwTYTWDcTottSpwGv+mjVfEVw 6vn3uIrzOXGoKZwrTtge0G0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXEy4HCOG 5NPswHRThM9pTWwnstEwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB6Xy8obaFM+dqz4SQ244cGMUSeYgNXIyV09pkPnyKf/4kDXYVIVQfpR 8AEBgEi4Ysfn7wlvEQYalbq0WX612PZFJFJNx/ysvoJXIyVZl9bhR+jYwIKTS3KO WlnPNYoqkekhG05VHUqxhxAhsPMBuwyUBvWGEqmNL3A0EH2X5j2MErvnvnroIUEF r3PBACk5eTauA4Vu0a8T3EH/E1izde8brdwGldu+/MQOhR9jrV3NhRqzFU8Q5IAV v5JkPozrqT8kM034HdmMm5rEYvv993TcjYbE+XKAcKQJEsY/5gym0gNOj7xZw1Rs OhOX7FZU3yM4KTczl0XfaHUdsuZ51lM= -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:21 2025 by rpki-client