$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json) Hash identifier: KHeH4iSfGWcFbTI7EVjVZHfxEw7QV/jFlY1D6ZmjKDM= Subject key identifier: 76:37:5D:4D:41:37:46:E3:44:60:99:0F:C2:91:81:2E:A9:07:D0:90 Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft Manifest number: 3B Signing time: Tue 05 Aug 2025 08:12:06 +0000 Manifest this update: Tue 05 Aug 2025 08:12:05 +0000 Manifest next update: Tue 12 Aug 2025 08:12:05 +0000 Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: M4r8CMupN3/4oEkt9sSXeE+LiEsgbdD6ckzE2E0hUcE=) 2: 13EB65D41AB511F0A1F0A34BC4F9AE02.roa (hash: gBn5RMkmkclmyZmL4wf1QAerjjB7P04/rGPHIIjACSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Validity Not Before: Aug 5 08:12:05 2025 GMT Not After : Aug 12 08:12:05 2025 GMT Subject: CN=6891bcd5-b881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:b9:53:1d:fd:49:af:49:25:bd:5a:ee:5a: 27:16:c2:23:61:6d:0d:e8:d2:ad:df:03:3c:4b:59: 6b:60:b2:ac:02:0a:e9:61:9a:f3:d7:61:ae:e6:a8: 8f:72:73:cb:d8:ca:0f:a7:81:e6:ae:02:45:9f:ff: 30:6d:69:d4:21:b9:2b:0d:ae:cf:46:b4:fa:4f:fe: f3:10:87:07:cb:d9:1e:72:3e:51:ae:34:c2:42:88: ef:6a:58:96:84:23:63:89:9d:9a:4e:ea:be:13:da: ee:45:99:ca:56:1a:a2:d3:dc:a4:10:96:a5:dc:16: 11:06:b7:74:48:f9:94:7f:b8:1d:92:f0:95:c8:3a: 32:41:58:95:94:3b:a6:c3:09:74:a0:36:f2:e1:b1: b8:dc:6e:23:db:00:9d:20:14:59:05:b5:bf:6f:4a: 4a:0d:5e:aa:b0:4c:35:e6:d8:56:4d:c5:0a:7c:fb: 95:ca:9b:3d:52:2d:3d:70:3e:9a:3d:b2:96:a7:f0: 3d:1b:1b:d3:4b:2a:07:ec:cf:52:69:38:0d:31:65: fe:c9:d7:a8:2f:dd:ec:b0:11:0d:ec:6e:53:d7:0c: e0:cd:ea:24:5d:02:40:85:78:db:5f:ce:7e:92:28: 2b:fd:49:33:42:a5:18:6b:88:a1:37:b7:43:b7:4d: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:37:5D:4D:41:37:46:E3:44:60:99:0F:C2:91:81:2E:A9:07:D0:90 X509v3 Authority Key Identifier: keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:32:2e:fb:0e:76:3e:b6:43:ef:d6:db:21:14:e7:e9:ac:7f: 89:28:7e:7d:33:6f:36:6c:81:f1:5d:73:9a:16:1b:78:2c:72: 68:85:2c:88:3c:ab:64:b2:58:73:c3:57:c8:a7:02:0c:e0:41: 3b:cc:26:d6:45:9d:90:55:b6:c5:5a:97:57:45:42:2c:59:87: ea:fc:03:e7:44:2d:e4:ae:78:4f:cb:65:1c:73:0a:c9:55:69: 5c:25:f5:90:c6:95:2d:d7:cb:c4:4a:87:9c:85:84:59:38:31: 92:4d:6e:c4:a2:15:4d:42:54:c3:e3:52:5c:53:79:1e:83:1f: b5:22:df:2a:b5:b6:12:5b:5c:ab:1f:c5:03:51:71:9f:9a:3a: 07:65:a9:df:53:69:94:62:ab:17:88:36:34:f6:c1:ec:e1:df: 72:2c:6a:8f:1a:f1:bf:25:4c:7a:a0:0a:7f:6e:6f:44:0d:86: 2b:8e:91:d9:df:80:26:d8:37:b2:d5:65:8a:38:58:6e:fa:25: d5:82:6d:9b:3c:4e:66:86:83:38:6b:b4:35:0a:01:11:c5:ed: 48:cb:cd:31:15:3d:70:88:bf:ec:18:53:71:6a:e4:13:c2:f3: e1:81:8e:7d:6b:9b:de:6f:fd:b3:12:bd:f3:59:42:81:b0:24: 57:35:fe:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkVERTExMC8GA1UEBRMoOURCMjU4QzE3MEIyMzIyOTREODYzRjYwRDJEQzAxMjND REFBRTc4OTAeFw0yNTA4MDUwODEyMDVaFw0yNTA4MTIwODEyMDVaMBgxFjAUBgNV BAMTDTY4OTFiY2Q1LWI4ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkiLlTHf1Jr0klvVruWicWwiNhbQ3o0q3fAzxLWWtgsqwCCulhmvPXYa7mqI9y c8vYyg+ngeauAkWf/zBtadQhuSsNrs9GtPpP/vMQhwfL2R5yPlGuNMJCiO9qWJaE I2OJnZpO6r4T2u5FmcpWGqLT3KQQlqXcFhEGt3RI+ZR/uB2S8JXIOjJBWJWUO6bD CXSgNvLhsbjcbiPbAJ0gFFkFtb9vSkoNXqqwTDXm2FZNxQp8+5XKmz1SLT1wPpo9 span8D0bG9NLKgfsz1JpOA0xZf7J16gv3eywEQ3sblPXDODN6iRdAkCFeNtfzn6S KCv9STNCpRhriKE3t0O3TUrtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdjddTUE3 RuNEYJkPwpGBLqkH0JAwHwYDVR0jBBgwFoAUnbJYwXCyMilNhj9g0twBI82q54kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRURFLzU1Q0IyRTA0MUFC NDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmJKWXdYQ3lNaWxOaGo5ZzB0d0JJODJxNTRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RURFLzU1Q0IyRTA0MUFCNDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWls TmhqOWcwdHdCSTgycTU0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEsyLvsOdj62Q+/W2yEU5+msf4kofn0zbzZsgfFdc5oWG3gscmiFLIg8 q2SyWHPDV8inAgzgQTvMJtZFnZBVtsVal1dFQixZh+r8A+dELeSueE/LZRxzCslV aVwl9ZDGlS3Xy8RKh5yFhFk4MZJNbsSiFU1CVMPjUlxTeR6DH7Ui3yq1thJbXKsf xQNRcZ+aOgdlqd9TaZRiqxeINjT2wezh33Isao8a8b8lTHqgCn9ub0QNhiuOkdnf gCbYN7LVZYo4WG76JdWCbZs8TmaGgzhrtDUKARHF7UjLzTEVPXCIv+wYU3Fq5BPC 8+GBjn1rm95v/bMSvfNZQoGwJFc1/ps= -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:44 2025 by rpki-client