$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: yqbnZk24WuWXmgDO4b5H6F7Vno4kzKUe6JkeWd/m9L0= Subject key identifier: 79:6A:4E:18:05:E9:4C:D6:DA:A2:BB:EA:22:B6:2E:A0:18:E2:D5:BD Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: A3 Signing time: Sat 09 Aug 2025 06:39:27 +0000 Manifest this update: Sat 09 Aug 2025 06:39:27 +0000 Manifest next update: Sat 16 Aug 2025 06:39:27 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: xfhpJR6eT3VIJxrmv292dOhyzdF+wOjjhmvilywtITM=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Aug 9 06:39:27 2025 GMT Not After : Aug 16 06:39:27 2025 GMT Subject: CN=6896ed1f-ef9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:c8:e4:18:9c:61:df:cc:62:a7:2e:c8:cc: a3:60:61:aa:b2:30:21:8f:2f:e0:2b:52:0b:5b:92: 66:6e:d5:86:a7:88:a2:d8:e4:4a:01:5f:2e:10:b3: ca:9d:9f:b4:57:48:07:0e:03:46:29:c5:53:a0:4f: 57:30:c0:3c:68:a2:2d:94:9d:ec:29:ce:5c:2f:97: 22:f4:9f:25:12:dd:51:2f:8b:fc:0d:ed:be:b7:12: 70:e6:d8:bb:7f:cf:7f:31:d2:1b:e5:75:db:02:64: 58:bf:4c:e9:76:b0:a8:f4:1d:31:c4:64:34:33:29: de:bc:8d:56:4f:19:90:bf:49:0a:ed:ec:2f:d4:c4: ec:58:94:aa:9a:a4:5a:47:dc:27:d3:75:f1:79:fd: 8b:46:64:79:bc:89:a7:4d:16:48:87:04:c7:9b:ee: 57:5e:70:13:05:d1:d0:af:bc:e0:10:3a:4a:82:cf: fe:de:fd:b9:b3:41:f4:1c:ab:56:38:92:ed:f8:ff: 9a:96:02:ba:37:12:50:c1:43:22:3a:8f:c5:74:5b: cb:e2:8f:4e:9f:35:ff:a5:94:1f:6d:6e:f4:cf:cc: 1b:0e:17:2e:6a:87:21:d7:5e:42:b7:36:72:b4:24: 2d:e3:63:ae:40:30:ad:34:f5:9a:71:e5:e1:b0:48: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:4E:18:05:E9:4C:D6:DA:A2:BB:EA:22:B6:2E:A0:18:E2:D5:BD X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:5e:fc:76:53:a1:ec:dc:26:b0:93:de:ec:88:29:dc:f3:86: 2a:8e:df:c8:30:2b:57:2b:55:37:2d:33:74:00:73:cb:3f:d2: 89:f9:f8:b1:56:ff:4c:03:f2:e1:f1:98:15:c6:36:55:45:27: f2:74:59:50:d1:a4:94:f3:03:93:8a:bc:0c:9a:1b:26:fb:ea: ee:be:a4:f2:65:b0:c0:85:11:91:b9:fd:9d:27:88:f0:ed:4e: ac:9a:92:90:30:a9:2d:1b:ac:d0:1a:7d:62:e9:05:f4:6c:7b: b0:ba:6a:a3:ad:e7:15:fb:cc:d9:a2:d1:ea:13:a5:67:33:cc: cd:66:3c:b5:ea:c0:e1:7f:be:05:e2:2e:17:5b:9d:46:ff:31: f2:fb:4b:5e:12:4e:bc:94:63:96:ec:b9:b8:8b:f7:46:9d:09: 8e:41:8e:99:cd:14:13:50:1d:11:87:16:ab:b6:4c:40:93:f3: b8:68:8b:6f:a0:3f:a5:bc:6b:17:5a:73:8a:45:30:34:a3:10: 5d:80:28:78:d3:40:64:4b:73:88:b6:c4:5c:c1:31:91:a6:79: 7d:df:9d:fa:e6:66:d2:58:b5:ad:cc:20:cb:f1:45:69:49:7f: c7:0f:16:84:78:f5:ef:c2:ab:6c:f6:56:d0:60:38:9e:08:ca: ba:95:3f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwODA5MDYzOTI3WhcNMjUwODE2MDYzOTI3WjAYMRYwFAYD VQQDEw02ODk2ZWQxZi1lZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lXI5BicYd/MYqcuyMyjYGGqsjAhjy/gK1ILW5JmbtWGp4ii2ORKAV8uELPK nZ+0V0gHDgNGKcVToE9XMMA8aKItlJ3sKc5cL5ci9J8lEt1RL4v8De2+txJw5ti7 f89/MdIb5XXbAmRYv0zpdrCo9B0xxGQ0MynevI1WTxmQv0kK7ewv1MTsWJSqmqRa R9wn03Xxef2LRmR5vImnTRZIhwTHm+5XXnATBdHQr7zgEDpKgs/+3v25s0H0HKtW OJLt+P+algK6NxJQwUMiOo/FdFvL4o9OnzX/pZQfbW70z8wbDhcuaoch115CtzZy tCQt42OuQDCtNPWaceXhsEi2ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlqThgF 6UzW2qK76iK2LqAY4tW9MB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtXvx2U6Hs3Cawk97siCnc84Yqjt/IMCtXK1U3LTN0AHPLP9KJ+fix Vv9MA/Lh8ZgVxjZVRSfydFlQ0aSU8wOTirwMmhsm++ruvqTyZbDAhRGRuf2dJ4jw 7U6smpKQMKktG6zQGn1i6QX0bHuwumqjrecV+8zZotHqE6VnM8zNZjy16sDhf74F 4i4XW51G/zHy+0teEk68lGOW7Lm4i/dGnQmOQY6ZzRQTUB0RhxartkxAk/O4aItv oD+lvGsXWnOKRTA0oxBdgCh400BkS3OItsRcwTGRpnl935365mbSWLWtzCDL8UVp SX/HDxaEePXvwqts9lbQYDieCMq6lT+W -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:28 2025 by rpki-client