$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: p1r1gm1RJBOyZjIzOVciS/s2UZaOLmvI3MivmkLyfXo= Subject key identifier: B7:19:16:47:67:05:19:B9:ED:D8:A0:6E:D6:82:19:6C:38:5D:3B:DA Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: 012E Signing time: Sat 09 Aug 2025 05:06:14 +0000 Manifest this update: Sat 09 Aug 2025 05:06:13 +0000 Manifest next update: Sat 16 Aug 2025 05:06:13 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: NZWzDvH0gxUrhaYtvF1rSgjMHVL5t8hPO5963G7PldQ=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Aug 9 05:06:13 2025 GMT Not After : Aug 16 05:06:13 2025 GMT Subject: CN=6896d745-19ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:21:fd:4e:33:70:a4:b1:be:ef:d1:26:e6: cf:e1:b5:d7:20:fc:41:bd:4c:6b:62:52:ed:43:a5: 09:4b:e0:7b:39:68:3b:ea:d8:48:a8:e0:24:21:ac: d6:66:c3:50:1f:df:ce:28:6c:0e:70:cc:4d:8b:4d: 83:69:28:bb:c9:61:99:14:93:93:79:8b:a2:16:16: 25:db:70:d9:f1:52:e3:9a:ce:a9:47:9a:14:63:af: 3b:f9:0d:4b:60:0d:a2:aa:d8:a2:8c:5f:73:2d:64: e2:34:e4:d2:f9:87:19:63:0b:c0:35:3a:1e:ef:68: df:f5:14:23:71:a0:83:83:9e:7d:6e:43:88:10:c5: c4:0d:4a:c1:02:76:d8:42:d6:26:31:bb:5a:86:c1: 39:0b:7e:15:0d:02:f6:39:cf:6d:a1:88:47:6a:39: 87:b1:41:9b:bd:49:5a:09:ab:3c:d7:90:be:54:1a: 21:7f:bd:ff:a7:c0:a2:70:b9:4a:58:96:56:87:fe: 81:b7:fe:fa:e6:6c:e2:8b:a0:44:81:c2:be:29:d0: 99:b8:18:37:c5:ff:9f:e4:f4:86:95:84:f3:dc:3a: 4a:7f:b3:17:c9:fe:b8:8f:63:13:d2:0f:b1:03:6d: 73:7a:6a:51:26:65:d4:e6:58:f8:b0:a4:be:d6:ea: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:16:47:67:05:19:B9:ED:D8:A0:6E:D6:82:19:6C:38:5D:3B:DA X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e3:e8:f3:d6:88:ea:e1:bc:23:7b:bd:d3:02:bc:fb:35:96: 18:e6:d0:0e:27:16:c7:68:65:8e:f4:9d:1c:78:3d:7c:fd:85: 82:3f:9c:3f:fa:f0:2f:9b:6c:aa:e5:66:59:ca:47:2c:e3:ad: 2f:54:38:ac:b0:de:9e:90:c4:be:ac:33:59:c8:52:be:03:02: 33:91:e7:64:71:b9:b0:62:8c:31:0c:76:e0:cf:3a:55:12:7a: f7:30:90:67:d4:ac:4b:5b:13:4a:09:07:dc:c6:c7:ae:b0:e7: 5f:ed:88:8e:18:fe:49:f6:c9:86:73:4d:bf:eb:e8:ac:3a:d1: 13:66:5d:19:43:13:b6:18:7f:8c:d6:f0:a7:9b:36:6e:75:7a: 08:74:6d:86:8a:71:79:e9:e6:87:dd:26:94:2c:0d:63:32:02: f7:38:b3:b4:bd:11:9d:87:ab:05:f6:6b:22:0b:ac:1b:3a:6f: 72:5a:bc:ed:8a:2b:9c:1a:18:fa:bd:9a:a6:96:31:45:34:fe: 60:ac:06:4f:5d:bf:7b:4d:f3:ea:94:ae:6d:fb:6f:f6:95:65: 6b:0d:54:bb:4f:45:0f:8d:3e:84:84:0c:30:fa:ba:5c:c5:42: 12:a8:41:4d:8f:5a:2f:60:c8:c5:8f:d5:70:da:61:24:67:42: d9:39:00:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwODA5MDUwNjEzWhcNMjUwODE2MDUwNjEzWjAYMRYwFAYD VQQDEw02ODk2ZDc0NS0xOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bkh/U4zcKSxvu/RJubP4bXXIPxBvUxrYlLtQ6UJS+B7OWg76thIqOAkIazW ZsNQH9/OKGwOcMxNi02DaSi7yWGZFJOTeYuiFhYl23DZ8VLjms6pR5oUY687+Q1L YA2iqtiijF9zLWTiNOTS+YcZYwvANToe72jf9RQjcaCDg559bkOIEMXEDUrBAnbY QtYmMbtahsE5C34VDQL2Oc9toYhHajmHsUGbvUlaCas815C+VBohf73/p8CicLlK WJZWh/6Bt/765mzii6BEgcK+KdCZuBg3xf+f5PSGlYTz3DpKf7MXyf64j2MT0g+x A21zempRJmXU5lj4sKS+1urbpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcZFkdn BRm57digbtaCGWw4XTvaMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC64+jz1ojq4bwje73TArz7NZYY5tAOJxbHaGWO9J0ceD18/YWCP5w/ +vAvm2yq5WZZykcs460vVDissN6ekMS+rDNZyFK+AwIzkedkcbmwYowxDHbgzzpV Enr3MJBn1KxLWxNKCQfcxseusOdf7YiOGP5J9smGc02/6+isOtETZl0ZQxO2GH+M 1vCnmzZudXoIdG2GinF56eaH3SaULA1jMgL3OLO0vRGdh6sF9msiC6wbOm9yWrzt iiucGhj6vZqmljFFNP5grAZPXb97TfPqlK5t+2/2lWVrDVS7T0UPjT6EhAww+rpc xUISqEFNj1ovYMjFj9Vw2mEkZ0LZOQCk -----END CERTIFICATE-----Generated at Sun Aug 10 04:51:01 2025 by rpki-client