$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: 83CJrD1wpR4Eb5aNJFSXj4PmLWAMLSzoaS2U4ln12TM= Subject key identifier: 99:91:81:B3:AC:E3:9F:AF:00:9C:A0:84:5F:4D:C8:E9:EF:96:32:9C Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03D1 Signing time: Sat 09 Aug 2025 01:08:27 +0000 Manifest this update: Sat 09 Aug 2025 01:08:27 +0000 Manifest next update: Sat 16 Aug 2025 01:08:27 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: cQUFU9uDQQOQNGs5oJVywhTetFBQkkzMPfDPDlIo0ak=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Aug 9 01:08:27 2025 GMT Not After : Aug 16 01:08:27 2025 GMT Subject: CN=68969f8b-2268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:17:b2:f4:23:e1:bc:3b:dd:a8:08:ee:93: 21:4e:81:8a:7a:25:ee:e6:20:d4:fe:1c:2b:f4:30: 67:11:a8:16:f4:92:b9:fc:55:c5:cf:14:1a:c1:08: 0e:9b:5c:b9:16:b3:74:74:04:e1:70:5d:41:c6:45: 82:c9:ff:21:6d:cb:5a:95:f6:91:2a:a5:a5:85:0d: a4:fa:0f:eb:f1:79:75:d9:a8:8c:50:28:46:96:d5: 99:dc:3b:2a:ef:c8:67:2c:2b:3c:06:81:72:8d:46: 8a:e8:e4:fe:fc:57:f7:2e:bd:8d:18:d1:11:15:b6: 6b:23:4f:da:8a:85:e3:b2:e4:f1:c8:31:5f:2b:5d: 6b:c3:c8:75:b7:32:fd:6a:7a:57:d1:e6:30:7a:55: 99:50:2e:a4:8b:97:35:c6:59:d6:07:04:0d:18:30: 84:ca:6d:30:27:68:d1:94:68:48:2a:37:35:60:bf: ae:71:88:ed:6b:86:14:da:14:03:b5:32:b1:f7:c4: af:38:bb:62:59:25:05:fb:0f:54:27:e9:31:30:15: 85:d0:05:ef:25:af:a2:4a:8d:68:04:b4:e3:ef:bc: 52:89:39:99:ad:0f:44:8a:9b:c6:de:21:5e:86:1b: 1a:1a:4b:63:4a:cc:a6:f7:a7:e6:d9:2f:ef:26:d8: 8d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:81:B3:AC:E3:9F:AF:00:9C:A0:84:5F:4D:C8:E9:EF:96:32:9C X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d1:fc:a6:18:0f:70:f5:d9:19:74:50:16:00:4c:95:4b:4f: 61:10:1f:ef:55:49:06:6c:e8:3c:84:77:1b:5d:43:59:a7:07: 01:30:90:54:e6:13:57:1f:d4:6b:d2:9f:e7:40:58:ed:ee:a4: a9:b0:53:0b:c5:ca:40:eb:c2:c6:19:b0:eb:df:38:62:53:35: 43:07:d0:5a:cf:69:b7:a0:35:ed:49:17:83:e7:f7:98:37:9e: 58:3d:b3:ab:06:50:0e:f9:ed:93:9e:f9:63:d3:3d:9e:92:37: ba:e9:12:1d:4e:79:f5:94:0d:4c:f9:db:1f:6c:3a:d0:32:78: c0:62:8b:58:69:22:52:a9:dc:a5:e8:d7:c5:a6:a4:39:0d:d7: 18:ed:58:6c:c1:83:b1:8a:c2:9f:37:53:7d:cf:fa:33:37:3c: 56:5e:00:ab:ba:c3:51:eb:a8:14:57:4d:ca:df:ac:14:24:5d: 0e:3f:0c:5a:7c:5a:5c:ef:06:24:40:4d:8b:2b:6e:6a:67:bc: f6:8c:4b:31:6f:9f:f1:35:8d:c5:e4:76:ea:df:79:ca:b3:d3: 34:6f:10:32:8b:8c:68:3b:b3:9a:54:ab:4f:09:75:9a:5d:0f: c4:0b:49:40:f6:af:4c:39:62:48:f1:73:0b:d6:e9:6e:14:3c: 0d:36:9e:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwODA5MDEwODI3WhcNMjUwODE2MDEwODI3WjAYMRYwFAYD VQQDEw02ODk2OWY4Yi0yMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xUXsvQj4bw73agI7pMhToGKeiXu5iDU/hwr9DBnEagW9JK5/FXFzxQawQgO m1y5FrN0dAThcF1BxkWCyf8hbctalfaRKqWlhQ2k+g/r8Xl12aiMUChGltWZ3Dsq 78hnLCs8BoFyjUaK6OT+/Ff3Lr2NGNERFbZrI0/aioXjsuTxyDFfK11rw8h1tzL9 anpX0eYwelWZUC6ki5c1xlnWBwQNGDCEym0wJ2jRlGhIKjc1YL+ucYjta4YU2hQD tTKx98SvOLtiWSUF+w9UJ+kxMBWF0AXvJa+iSo1oBLTj77xSiTmZrQ9EipvG3iFe hhsaGktjSsym96fm2S/vJtiN+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmRgbOs 45+vAJyghF9NyOnvljKcMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0fymGA9w9dkZdFAWAEyVS09hEB/vVUkGbOg8hHcbXUNZpwcBMJBU 5hNXH9Rr0p/nQFjt7qSpsFMLxcpA68LGGbDr3zhiUzVDB9Baz2m3oDXtSReD5/eY N55YPbOrBlAO+e2Tnvlj0z2ekje66RIdTnn1lA1M+dsfbDrQMnjAYotYaSJSqdyl 6NfFpqQ5DdcY7VhswYOxisKfN1N9z/ozNzxWXgCrusNR66gUV03K36wUJF0OPwxa fFpc7wYkQE2LK25qZ7z2jEsxb5/xNY3F5Hbq33nKs9M0bxAyi4xoO7OaVKtPCXWa XQ/EC0lA9q9MOWJI8XML1uluFDwNNp5k -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:08 2025 by rpki-client