$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: Z1xo8WGuFFusjEK2jVZMObgU4f9YJzG06W79gxgF8to= Subject key identifier: B7:45:50:D5:FA:34:FC:77:DC:9C:D1:57:53:F4:68:06:96:BA:08:ED Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 091D Signing time: Wed 06 Aug 2025 20:34:17 +0000 Manifest this update: Wed 06 Aug 2025 20:34:17 +0000 Manifest next update: Wed 13 Aug 2025 20:34:17 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: X/0CzvVD7PfOM6jzJpNv7EkyzD8obuvWyVcDo6sPtYI=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Aug 6 20:34:17 2025 GMT Not After : Aug 13 20:34:17 2025 GMT Subject: CN=6893bc49-82e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:66:2a:9d:cf:fa:69:84:9d:a0:53:60:14: 01:5d:46:3a:9e:80:49:1f:5e:11:8a:11:bb:7b:4c: 73:a8:83:0d:8f:6c:d6:d1:f6:8b:5c:42:be:ad:5c: 97:98:df:8c:d2:36:8b:8b:f4:e2:d6:07:03:29:42: 64:06:f4:b1:c9:ed:25:b7:28:77:d3:16:38:de:fc: 44:6f:29:6c:4c:17:23:15:93:6c:1f:8d:5d:bc:31: e9:3a:e3:b1:38:d4:8e:00:ad:09:ad:ed:20:aa:15: 85:69:b6:c7:c4:26:8e:15:03:a5:a2:54:45:11:31: 7d:84:13:5e:1f:82:81:38:eb:dc:77:e6:7e:49:8a: d3:9a:37:d4:2d:21:25:85:7b:c7:da:17:1e:95:6c: 20:a9:1c:01:34:ed:1f:b5:27:45:12:9e:67:18:b4: eb:8e:db:ec:57:8c:5a:bb:22:54:3b:6c:3e:3d:4c: 4c:dd:b1:95:2d:4e:4e:bb:0f:dd:fd:c7:14:23:3f: 79:ad:fc:b0:d0:56:e0:5b:75:71:31:6b:ea:52:4e: d7:79:ee:a8:04:aa:3a:d7:4d:c1:e4:d3:fd:c5:c2: e4:a9:85:b4:7f:b6:bf:ac:72:86:52:7e:78:2b:d9: cd:69:88:f0:51:04:9f:0c:ed:99:0c:ed:b9:48:a1: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:50:D5:FA:34:FC:77:DC:9C:D1:57:53:F4:68:06:96:BA:08:ED X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4d:64:37:ee:02:cc:d8:0c:50:84:6e:0b:e2:dc:d1:a8:b0: 4f:a6:ac:8c:60:74:c6:b0:cb:b8:bb:60:54:fe:ce:98:ab:00: 89:4e:40:f5:93:b8:10:20:c9:d2:2c:37:ed:3d:dc:ea:82:12: e0:58:fa:77:f0:42:38:d5:88:f5:49:83:66:cf:6e:de:c6:68: 02:c0:ff:7e:69:af:42:8d:06:95:67:20:31:68:c0:4a:12:d2: 7a:5e:9e:23:f6:2e:8e:d6:68:35:05:72:90:8a:93:97:21:39: f3:39:2b:7f:87:bf:1c:f1:a5:46:1f:e1:0c:e2:3b:b1:1c:1c: 9b:e5:98:72:f1:1b:df:ac:1f:68:72:0d:8b:54:cd:9a:4b:62: 74:1b:bb:0f:81:5c:0e:38:3c:59:47:a5:1e:29:f9:4c:3e:3a: 72:a3:58:db:0a:76:b4:e0:1a:db:21:1d:db:c8:11:7a:e8:d9: 43:1b:f9:18:5f:54:51:bf:c4:2f:54:ff:24:f7:4e:90:5d:0c: d3:0a:d8:2f:df:d9:cb:32:bf:b4:97:7a:f8:e3:e0:86:c8:d1: 82:47:c1:36:d2:c5:58:9c:7e:60:58:e3:61:d6:6e:01:38:68: d3:c3:2b:00:9a:31:bd:19:f3:86:3c:b2:d3:6f:7b:28:41:01: f5:39:21:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUwODA2MjAzNDE3WhcNMjUwODEzMjAzNDE3WjAYMRYwFAYD VQQDEw02ODkzYmM0OS04MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOxmKp3P+mmEnaBTYBQBXUY6noBJH14RihG7e0xzqIMNj2zW0faLXEK+rVyX mN+M0jaLi/Ti1gcDKUJkBvSxye0ltyh30xY43vxEbylsTBcjFZNsH41dvDHpOuOx ONSOAK0Jre0gqhWFabbHxCaOFQOlolRFETF9hBNeH4KBOOvcd+Z+SYrTmjfULSEl hXvH2hcelWwgqRwBNO0ftSdFEp5nGLTrjtvsV4xauyJUO2w+PUxM3bGVLU5Ouw/d /ccUIz95rfyw0FbgW3VxMWvqUk7Xee6oBKo6103B5NP9xcLkqYW0f7a/rHKGUn54 K9nNaYjwUQSfDO2ZDO25SKEuIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdFUNX6 NPx33JzRV1P0aAaWugjtMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3TWQ37gLM2AxQhG4L4tzRqLBPpqyMYHTGsMu4u2BU/s6YqwCJTkD1 k7gQIMnSLDftPdzqghLgWPp38EI41Yj1SYNmz27exmgCwP9+aa9CjQaVZyAxaMBK EtJ6Xp4j9i6O1mg1BXKQipOXITnzOSt/h78c8aVGH+EM4juxHByb5Zhy8RvfrB9o cg2LVM2aS2J0G7sPgVwOODxZR6UeKflMPjpyo1jbCna04BrbIR3byBF66NlDG/kY X1RRv8QvVP8k906QXQzTCtgv39nLMr+0l3r44+CGyNGCR8E20sVYnH5gWONh1m4B OGjTwysAmjG9GfOGPLLTb3soQQH1OSGQ -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:02 2025 by rpki-client