$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: 4Y4B2ER1ks2X8N9nlNGPha06lnk6ao1IAMyatKsWWQs= Subject key identifier: 1D:42:E2:8A:9A:E2:DF:96:22:8A:31:A3:9E:C0:D0:0A:97:92:6F:FA Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 89 Signing time: Thu 19 Jun 2025 05:52:32 +0000 Manifest this update: Thu 19 Jun 2025 05:52:31 +0000 Manifest next update: Thu 26 Jun 2025 05:52:31 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: XsrtVPlh/ZBFFBzhE2KRzxlJIOHUWQgANYCL/q/t+L8=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Jun 19 05:52:31 2025 GMT Not After : Jun 26 05:52:31 2025 GMT Subject: CN=6853a5a0-4de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:fc:24:3f:f9:ae:85:96:b3:a2:20:65:a3: 2c:95:b7:be:81:f5:be:22:32:0e:14:0f:cb:a4:c3: 5d:61:c5:f8:9e:f3:e3:15:ca:4c:a9:d1:d0:3a:56: 17:6e:7e:10:8e:9c:ec:62:84:d0:cb:06:f9:d8:29: 67:69:a6:1d:8c:f2:6b:85:3a:37:5e:64:da:8d:db: 22:24:c8:40:40:87:20:b8:2d:e5:2b:92:9f:32:aa: bf:ea:a7:3f:97:3b:2a:a3:75:b8:e8:34:34:fc:0b: a7:c4:98:55:ac:1c:c7:e6:49:aa:ca:03:19:b6:09: 1a:e2:1a:8f:c7:92:51:83:6e:c7:c8:eb:80:0d:9d: 64:51:b4:c8:ad:d8:c7:a6:ff:50:82:e5:dc:e9:d3: 30:2a:a6:f7:1e:32:a4:11:59:db:72:36:31:b8:c6: 2f:b8:81:c2:e0:e7:a7:10:b9:99:f9:a6:52:ba:51: 17:19:0e:b4:16:41:3a:37:dc:75:59:e0:6a:f0:48: 05:52:d0:a9:35:14:13:14:55:49:22:8b:7f:31:9f: 2c:09:7a:43:f0:a8:28:96:2b:9c:78:32:a1:8c:4e: aa:50:64:30:82:d2:36:26:42:9b:ae:b6:4e:e9:39: 9e:e7:28:9f:40:aa:9d:cf:1f:f5:e3:40:82:1a:d0: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:E2:8A:9A:E2:DF:96:22:8A:31:A3:9E:C0:D0:0A:97:92:6F:FA X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:31:5f:15:ec:06:a0:11:58:15:1d:f9:7b:c4:d5:d0:50:29: 70:b0:f3:d9:d5:92:22:94:59:5a:c5:19:9a:91:95:7d:02:00: 59:cc:56:da:57:73:72:bb:33:62:81:8e:9c:db:3c:f1:d4:6f: 5b:99:01:0a:f3:bf:25:c8:02:c1:21:cb:47:8c:7c:c8:d5:b0: 3f:62:bb:b2:95:a5:64:26:c6:13:cb:48:f5:4f:0e:aa:01:b9: 68:e8:a3:44:ca:77:73:8f:e1:e9:b3:65:83:ad:b1:fd:3b:f6: 18:cf:ba:6d:22:62:e2:00:59:3d:87:9a:a5:25:68:9b:8f:f6: 99:e1:42:1b:e0:51:10:d5:ec:50:ef:7c:63:c1:02:2b:70:ad: 74:2b:44:cb:c9:2e:a1:b3:71:e3:59:21:ad:6e:56:27:b3:96: 38:d9:6a:cf:d7:ce:c9:b5:58:b9:31:bd:40:9d:ca:3b:f5:c6: 19:69:a3:42:3b:ed:c4:c8:eb:3c:cc:4e:35:b6:84:8e:90:c8: 93:49:26:26:69:6f:6f:88:06:26:02:13:0d:54:61:c7:cb:f6: 4f:11:4f:64:e0:bf:79:ac:e3:e2:91:5d:21:14:11:83:6b:55: 23:08:1f:e1:1c:40:09:01:e3:d4:b2:d8:ae:0f:e5:06:34:24: fc:74:70:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwNjE5MDU1MjMxWhcNMjUwNjI2MDU1MjMxWjAYMRYwFAYD VQQDEw02ODUzYTVhMC00ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFn8JD/5roWWs6IgZaMslbe+gfW+IjIOFA/LpMNdYcX4nvPjFcpMqdHQOlYX bn4QjpzsYoTQywb52ClnaaYdjPJrhTo3XmTajdsiJMhAQIcguC3lK5KfMqq/6qc/ lzsqo3W46DQ0/AunxJhVrBzH5kmqygMZtgka4hqPx5JRg27HyOuADZ1kUbTIrdjH pv9QguXc6dMwKqb3HjKkEVnbcjYxuMYvuIHC4OenELmZ+aZSulEXGQ60FkE6N9x1 WeBq8EgFUtCpNRQTFFVJIot/MZ8sCXpD8KgoliuceDKhjE6qUGQwgtI2JkKbrrZO 6Tme5yifQKqdzx/140CCGtDN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1C4oqa 4t+WIooxo57A0AqXkm/6MB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTMV8V7AagEVgVHfl7xNXQUClwsPPZ1ZIilFlaxRmakZV9AgBZzFba V3NyuzNigY6c2zzx1G9bmQEK878lyALBIctHjHzI1bA/YruylaVkJsYTy0j1Tw6q Ablo6KNEyndzj+Hps2WDrbH9O/YYz7ptImLiAFk9h5qlJWibj/aZ4UIb4FEQ1exQ 73xjwQIrcK10K0TLyS6hs3HjWSGtblYns5Y42WrP187JtVi5Mb1Anco79cYZaaNC O+3EyOs8zE41toSOkMiTSSYmaW9viAYmAhMNVGHHy/ZPEU9k4L95rOPikV0hFBGD a1UjCB/hHEAJAePUstiuD+UGNCT8dHAG -----END CERTIFICATE-----Generated at Thu Jun 19 21:30:14 2025 by rpki-client