$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: BBOPPHS/lS0bOdwdmv/u/hiR+9FLirGcd14nAMseKbw= Subject key identifier: B4:2D:6A:E9:D6:5A:47:F8:10:78:40:80:EE:FF:9B:D5:CB:34:D1:95 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: CF Signing time: Thu 07 Aug 2025 06:15:54 +0000 Manifest this update: Thu 07 Aug 2025 06:15:54 +0000 Manifest next update: Thu 14 Aug 2025 06:15:54 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: HToLkpvhaVarVr7P4W+IO13c0a19FI1Fu6JXeJSrzcE=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Aug 7 06:15:54 2025 GMT Not After : Aug 14 06:15:54 2025 GMT Subject: CN=6894449a-3256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:9d:0b:b8:24:34:72:94:51:48:c1:2b:e4: 3c:b2:cf:9a:8f:27:b0:f0:a6:8d:4c:ed:7f:3a:30: f9:d9:b7:8a:63:ff:47:d9:e2:14:3e:3b:53:2b:1a: c4:20:bf:c6:c2:5a:fa:bb:c5:3c:67:01:36:fe:a6: d8:a1:fc:62:c7:43:80:80:95:55:1c:f6:db:87:84: 27:a4:4b:61:ba:6f:ea:76:8c:0d:d5:4a:25:06:57: ce:49:ac:61:f7:71:53:95:8f:dd:01:16:3f:29:d0: f0:ac:ae:13:31:79:7a:54:fa:f9:1a:de:8f:6d:01: 61:a8:2f:ae:3f:08:90:0a:85:a0:b9:d1:ab:34:1b: a8:d4:fe:be:f4:a0:62:7d:cf:fd:b5:ee:d6:20:26: 00:44:3a:7f:c6:9a:e6:33:6c:e6:74:1e:3c:f8:03: ff:62:01:0b:2c:e9:0f:f3:92:a8:cd:2a:5f:57:10: 8e:82:4e:80:3d:96:06:82:af:9e:f8:07:ca:08:94: e1:c4:0d:d8:b8:f2:51:a2:dc:7b:be:46:25:fd:4c: f7:08:6f:f8:e8:da:6f:c6:0b:1e:e3:0b:0a:f8:c9: be:5e:53:ec:30:97:e6:bc:9b:02:4a:38:9f:46:d3: 1b:f4:50:57:d5:3e:97:33:5f:5f:24:88:68:64:29: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2D:6A:E9:D6:5A:47:F8:10:78:40:80:EE:FF:9B:D5:CB:34:D1:95 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ec:fe:98:af:c9:5e:66:dc:b4:19:1c:fa:f8:2c:d1:bd:45: 78:58:97:5d:07:37:3a:b9:25:ac:81:32:92:e1:bc:25:9c:d4: 9e:01:f4:c4:f1:c2:19:07:85:82:96:9c:08:bb:76:71:8a:3f: 64:65:d6:34:cb:ca:d6:3e:81:e5:0f:c7:21:1f:b5:4a:ce:42: 04:5a:75:97:ee:8b:e7:ee:56:6f:7e:fb:1f:c7:13:c9:3a:28: 03:f1:2e:62:bd:d0:22:b6:e9:e0:48:2e:27:cb:56:0f:67:36: 07:f4:a6:eb:10:47:48:68:db:28:a6:78:de:a9:89:26:ba:be: c3:26:a1:b3:59:09:49:7a:bd:4d:86:29:62:eb:33:72:bb:7f: 92:7e:94:f5:82:35:88:ec:72:8e:bd:83:74:02:5a:c9:a9:54: 0a:38:56:70:75:e7:ba:f2:08:f7:33:eb:39:b0:0e:c7:75:4b: cc:67:a2:cb:18:11:55:8f:43:b8:34:7a:92:63:c4:88:87:25: b1:90:47:fc:14:06:e6:3c:ca:2f:f6:62:e3:d6:df:2c:b9:dc: 3c:40:df:5d:8c:14:67:ac:79:34:d1:73:41:64:06:30:2a:cf: 4f:2c:b0:55:e9:28:15:d9:71:45:7e:06:18:f2:71:95:7e:22: fb:72:31:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwODA3MDYxNTU0WhcNMjUwODE0MDYxNTU0WjAYMRYwFAYD VQQDEw02ODk0NDQ5YS0zMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b6dC7gkNHKUUUjBK+Q8ss+ajyew8KaNTO1/OjD52beKY/9H2eIUPjtTKxrE IL/Gwlr6u8U8ZwE2/qbYofxix0OAgJVVHPbbh4QnpEthum/qdowN1UolBlfOSaxh 93FTlY/dARY/KdDwrK4TMXl6VPr5Gt6PbQFhqC+uPwiQCoWgudGrNBuo1P6+9KBi fc/9te7WICYARDp/xprmM2zmdB48+AP/YgELLOkP85KozSpfVxCOgk6APZYGgq+e +AfKCJThxA3YuPJRotx7vkYl/Uz3CG/46Npvxgse4wsK+Mm+XlPsMJfmvJsCSjif RtMb9FBX1T6XM19fJIhoZCl/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQtaunW Wkf4EHhAgO7/m9XLNNGVMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7P6Yr8leZty0GRz6+CzRvUV4WJddBzc6uSWsgTKS4bwlnNSeAfTE 8cIZB4WClpwIu3Zxij9kZdY0y8rWPoHlD8chH7VKzkIEWnWX7ovn7lZvfvsfxxPJ OigD8S5ivdAitungSC4ny1YPZzYH9KbrEEdIaNsopnjeqYkmur7DJqGzWQlJer1N hili6zNyu3+SfpT1gjWI7HKOvYN0AlrJqVQKOFZwdee68gj3M+s5sA7HdUvMZ6LL GBFVj0O4NHqSY8SIhyWxkEf8FAbmPMov9mLj1t8sudw8QN9djBRnrHk00XNBZAYw Ks9PLLBV6SgV2XFFfgYY8nGVfiL7cjGA -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:49 2025 by rpki-client