$ rpki-client -vvf rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft File: NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft (raw, json) Hash identifier: SAE/jHodTJNR87iNbfFZUrZtGI03AXffZvSmMn7A0nY= Subject key identifier: 9C:CE:3B:4D:8A:06:CD:D2:BB:F2:5E:EE:5E:14:00:E1:8C:1D:7B:21 Authority key identifier: 34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA Certificate issuer: /CN=A91C99B4/serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft Manifest number: 0716 Signing time: Sun 10 Aug 2025 22:01:16 +0000 Manifest this update: Sun 10 Aug 2025 22:01:15 +0000 Manifest next update: Sun 17 Aug 2025 22:01:15 +0000 Files and hashes: 1: NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl (hash: iOIVBT0dH6qqvAsmX77ULqtHoyZEJoFCpkqH54yUWpc=) 2: 0A81888851C011F08C31DF3FC4F9AE02.roa (hash: 1yPuP1g8YZqvnHf524WkUbhoEmWrAxZBELmM8pADlg8=) 3: 7B3EE1DC524811F0B02FCD27C4F9AE02.roa (hash: NOszZQVplnPpRn57635/o7+RgEVvlc3t2csfhNsghIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C99B4, serialNumber=348BE6694ED7041AAF28D0EC8C6C6565591F2DDA Validity Not Before: Aug 10 22:01:15 2025 GMT Not After : Aug 17 22:01:15 2025 GMT Subject: CN=689916ab-77e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2f:49:05:b1:d1:8b:fb:05:45:c7:cf:ec:ab: 5b:31:b0:5b:c5:f3:73:b8:6a:8b:0b:da:1c:a9:9b: 19:52:17:6f:72:73:db:bb:29:29:a7:a4:71:1a:42: 6e:d4:7d:05:bd:43:30:b2:41:8d:20:f2:d5:fe:06: 17:2c:0f:49:9e:5a:d4:c4:e5:31:b3:c2:0f:1a:82: 61:6f:0f:9a:4c:87:c6:d1:be:b1:b8:03:90:c2:38: 03:37:06:14:d4:98:05:10:0e:ef:fb:4b:b0:34:7f: 7a:69:c0:6a:18:de:ef:51:15:5a:35:2d:30:e9:19: 3f:a9:10:d0:10:e2:04:43:fd:64:e6:b2:ca:14:8a: 9f:f8:e2:63:13:4d:66:6b:0d:33:81:28:81:27:e5: 2d:0e:c0:c3:cb:84:06:41:27:40:d6:24:a5:25:3b: d2:f9:73:f5:b6:a4:20:0a:c1:17:30:4e:a2:a3:e7: 9f:d7:02:9e:e9:70:a5:49:b9:4b:70:04:e5:90:95: d2:76:a8:6b:77:27:b0:77:a7:cd:d4:da:a0:97:4c: d6:b2:92:c8:f3:3f:2e:53:a2:83:a4:a0:39:46:ea: 7a:dc:f7:68:92:49:b8:0a:75:04:bd:d1:c5:58:19: 45:e2:62:a6:bf:88:3e:5d:2b:63:a2:6f:c1:15:98: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:3B:4D:8A:06:CD:D2:BB:F2:5E:EE:5E:14:00:E1:8C:1D:7B:21 X509v3 Authority Key Identifier: keyid:34:8B:E6:69:4E:D7:04:1A:AF:28:D0:EC:8C:6C:65:65:59:1F:2D:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NIvmaU7XBBqvKNDsjGxlZVkfLdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C99B4/5DE59696594911EBA48C7871C4F9AE02/NIvmaU7XBBqvKNDsjGxlZVkfLdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3a:30:97:b6:8e:7c:63:3c:b6:c5:81:d0:03:e2:f4:15:7e: f5:de:a6:e6:d3:6f:9e:b5:09:61:4e:8b:9c:99:89:e7:d6:cb: a6:27:0d:8a:f6:3d:e3:c7:47:8c:93:40:87:f2:09:4e:e2:29: dd:04:53:0d:4e:c5:47:b6:e6:37:90:a7:2f:d0:c7:f5:68:ea: c9:54:49:d1:14:26:67:d3:0d:b1:cc:bd:5f:cb:9a:31:b9:a4: 7c:86:72:87:24:70:66:c8:76:b1:1e:33:28:85:ba:23:4d:16: e6:04:dc:73:89:f4:63:30:cd:44:03:87:18:b3:a0:d3:75:cb: 79:ba:14:74:33:62:48:f7:70:89:a3:91:8b:fb:8b:7f:1c:fb: 94:81:11:7f:34:bf:5b:7c:ce:fb:46:94:6a:6a:55:2a:5a:84: d1:18:5e:ae:b5:cb:fb:ac:41:74:c0:c6:00:0e:6a:39:86:85: 4e:bf:37:35:be:6d:f2:95:00:40:86:7c:8b:cf:1f:5d:c5:8f: 50:19:ec:ab:06:93:87:fc:3c:6a:fc:1a:fc:bb:6b:12:ed:d1: ac:03:46:ba:f1:61:66:2a:50:7a:5b:f3:f0:ad:9f:58:6b:ac: 87:2c:d9:3f:53:fa:25:c0:85:e0:29:46:82:cd:04:c9:bd:22: fa:f1:14:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5QjQxMTAvBgNVBAUTKDM0OEJFNjY5NEVENzA0MUFBRjI4RDBFQzhDNkM2NTY1 NTkxRjJEREEwHhcNMjUwODEwMjIwMTE1WhcNMjUwODE3MjIwMTE1WjAYMRYwFAYD VQQDEw02ODk5MTZhYi03N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6y9JBbHRi/sFRcfP7KtbMbBbxfNzuGqLC9ocqZsZUhdvcnPbuykpp6RxGkJu 1H0FvUMwskGNIPLV/gYXLA9JnlrUxOUxs8IPGoJhbw+aTIfG0b6xuAOQwjgDNwYU 1JgFEA7v+0uwNH96acBqGN7vURVaNS0w6Rk/qRDQEOIEQ/1k5rLKFIqf+OJjE01m aw0zgSiBJ+UtDsDDy4QGQSdA1iSlJTvS+XP1tqQgCsEXME6io+ef1wKe6XClSblL cATlkJXSdqhrdyewd6fN1Nqgl0zWspLI8z8uU6KDpKA5Rup63Pdokkm4CnUEvdHF WBlF4mKmv4g+XStjom/BFZgKSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzOO02K Bs3Su/Je7l4UAOGMHXshMB8GA1UdIwQYMBaAFDSL5mlO1wQaryjQ7IxsZWVZHy3a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTlCNC81REU1OTY5NjU5 NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJCcXZLTkRzakd4bFpWa2ZM ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Jdm1hVTdYQkJxdktORHNqR3hsWlZrZkxkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTlCNC81REU1OTY5NjU5NDkxMUVCQTQ4Qzc4NzFDNEY5QUUwMi9OSXZtYVU3WEJC cXZLTkRzakd4bFpWa2ZMZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvOjCXto58Yzy2xYHQA+L0FX713qbm02+etQlhToucmYnn1sumJw2K 9j3jx0eMk0CH8glO4indBFMNTsVHtuY3kKcv0Mf1aOrJVEnRFCZn0w2xzL1fy5ox uaR8hnKHJHBmyHaxHjMohbojTRbmBNxzifRjMM1EA4cYs6DTdct5uhR0M2JI93CJ o5GL+4t/HPuUgRF/NL9bfM77RpRqalUqWoTRGF6utcv7rEF0wMYADmo5hoVOvzc1 vm3ylQBAhnyLzx9dxY9QGeyrBpOH/Dxq/Br8u2sS7dGsA0a68WFmKlB6W/PwrZ9Y a6yHLNk/U/olwIXgKUaCzQTJvSL68RSi -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:39 2025 by rpki-client