$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: nWrCaX+huxIvo7uJ9oO9QsVmrthIIgzMsxrcWibN+SY= Subject key identifier: 2C:04:13:83:7E:C2:25:9C:3D:83:2F:1F:19:4E:9A:3C:F7:96:71:C4 Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 6D Signing time: Tue 05 Aug 2025 07:29:30 +0000 Manifest this update: Tue 05 Aug 2025 07:29:30 +0000 Manifest next update: Tue 12 Aug 2025 07:29:30 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: z7AfTpDPlEn4IwJ5Yz+0n+mGPwo/MspPkR+LejR2Zzk=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Aug 5 07:29:30 2025 GMT Not After : Aug 12 07:29:30 2025 GMT Subject: CN=6891b2da-5fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:37:08:0b:c5:36:bb:2a:88:88:9d:df:61: 3e:86:4c:61:5d:2d:e9:b0:48:3b:a4:b5:7b:00:da: e8:8d:f2:e2:a7:a9:9e:32:a6:dc:7a:a4:d5:f4:ec: 0f:7d:4c:5f:91:23:b5:13:80:ad:fb:a3:70:6c:d9: cd:f0:b3:16:87:98:35:48:6c:47:f5:63:9f:dd:58: 11:a4:d7:ab:13:d8:5c:9a:3f:ff:b1:88:69:78:8f: ee:88:15:67:8b:03:a6:7c:0c:8f:01:4f:f6:ca:1d: a3:b1:77:b0:89:d9:a5:ee:b8:a7:7e:23:fe:2d:2d: 28:a1:30:63:eb:13:53:11:f9:a4:af:3f:05:0a:5a: 78:9d:2c:26:a1:16:91:5b:08:f9:43:f7:6f:89:25: 6a:8d:14:67:e6:a3:14:16:ab:a0:4b:4f:ef:a5:77: 66:39:9e:ab:bc:6e:c9:8f:43:64:74:d3:1e:50:91: b1:67:fd:4d:28:51:f8:45:e3:7f:52:a8:dc:71:f5: f5:97:22:d6:be:28:33:4f:1c:94:bb:4d:17:c0:1b: 03:3c:43:fc:5e:5e:fb:b8:18:db:2e:16:1a:17:c9: fb:75:f0:ab:06:b9:5a:b7:50:5c:c2:5c:ca:fe:74: 8c:5c:5d:6d:ae:63:44:3a:87:ef:ce:8f:6e:64:6c: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:13:83:7E:C2:25:9C:3D:83:2F:1F:19:4E:9A:3C:F7:96:71:C4 X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:94:d0:f0:a6:ff:7c:03:63:71:d6:ff:6c:17:29:97:c2: 2b:9d:18:bc:cf:01:ed:d0:c0:3b:d9:22:1e:e1:5e:50:fe:47: 28:08:a0:d9:5c:0d:12:95:71:da:48:33:4f:86:85:f2:1e:47: c1:5a:e2:ed:88:76:af:35:8a:c8:e5:d5:3c:42:8e:26:8d:dd: 9b:ce:90:08:ba:2e:99:96:a5:1b:e9:52:6e:b0:9d:2a:55:a8: 4d:87:78:78:0c:0e:88:9a:a8:c3:95:2b:16:6d:4d:42:97:55: d0:e3:f4:fa:09:cd:bc:18:a1:6a:aa:23:ee:83:65:de:04:6c: f2:11:29:99:f3:25:66:c6:2a:a9:9b:ee:d9:1d:82:70:d5:ec: 37:81:b2:0b:23:5f:f2:4e:66:5a:77:62:2f:c4:ab:5d:ed:73: c7:85:f2:10:6f:09:e0:45:6e:c8:a5:e4:8d:46:24:b5:23:10: 78:40:39:cb:8b:9c:d1:ae:dd:8e:f3:40:4d:df:cb:cf:10:e2: 15:50:4d:55:18:01:e6:95:31:09:20:3c:14:3c:49:06:b9:03: d5:2e:69:30:08:69:5f:55:57:d6:85:20:04:44:d3:10:aa:a3: c6:3e:41:10:da:8a:f1:08:8e:e9:61:d5:06:d0:72:94:09:c6: a4:3d:d9:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA4MDUwNzI5MzBaFw0yNTA4MTIwNzI5MzBaMBgxFjAUBgNV BAMTDTY4OTFiMmRhLTVmZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/JjcIC8U2uyqIiJ3fYT6GTGFdLemwSDuktXsA2uiN8uKnqZ4yptx6pNX07A99 TF+RI7UTgK37o3Bs2c3wsxaHmDVIbEf1Y5/dWBGk16sT2FyaP/+xiGl4j+6IFWeL A6Z8DI8BT/bKHaOxd7CJ2aXuuKd+I/4tLSihMGPrE1MR+aSvPwUKWnidLCahFpFb CPlD92+JJWqNFGfmoxQWq6BLT++ld2Y5nqu8bsmPQ2R00x5QkbFn/U0oUfhF439S qNxx9fWXIta+KDNPHJS7TRfAGwM8Q/xeXvu4GNsuFhoXyft18KsGuVq3UFzCXMr+ dIxcXW2uY0Q6h+/Oj25kbFZtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULAQTg37C JZw9gy8fGU6aPPeWccQwHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCZlNDwpv98A2Nx1v9sFymXwiudGLzPAe3QwDvZIh7hXlD+RygIoNlc DRKVcdpIM0+GhfIeR8Fa4u2Idq81isjl1TxCjiaN3ZvOkAi6LpmWpRvpUm6wnSpV qE2HeHgMDoiaqMOVKxZtTUKXVdDj9PoJzbwYoWqqI+6DZd4EbPIRKZnzJWbGKqmb 7tkdgnDV7DeBsgsjX/JOZlp3Yi/Eq13tc8eF8hBvCeBFbsil5I1GJLUjEHhAOcuL nNGu3Y7zQE3fy88Q4hVQTVUYAeaVMQkgPBQ8SQa5A9UuaTAIaV9VV9aFIARE0xCq o8Y+QRDaivEIjulh1QbQcpQJxqQ92Xw= -----END CERTIFICATE-----Generated at Wed Aug 6 09:33:48 2025 by rpki-client