$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft File: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft (raw, json) Hash identifier: DhwkWWImlF2kNYieKdyJMDzeeXQ9D1glN5Uxo+VlWrg= Subject key identifier: 30:DA:9E:24:1C:09:E7:8C:DC:CB:9D:E1:6D:43:13:77:70:18:DE:A9 Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Certificate serial: 1E56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft Manifest number: 1E19 Signing time: Tue 12 Aug 2025 16:10:48 +0000 Manifest this update: Tue 12 Aug 2025 16:10:48 +0000 Manifest next update: Tue 19 Aug 2025 16:10:48 +0000 Files and hashes: 1: -NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl (hash: lSxPOAB3rk0vdyH6A5uCljZea23dhkIba9UdgxOKf4k=) 2: 527AA5C69F4F11EAA7970484C4F9AE02.roa (hash: zuUsKZCcjPOj5pM09o9z0mAoFhewcmu+fcIGUoGJ1jw=) 3: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (hash: G/Ubv3z+VEdcNFiGQpNHf2mTf7Lsh6KdDEju5wCmKbw=) 4: C86831A80CB311EDB2750F60C4F9AE02.roa (hash: lSszTQ1c+gMLFVw7Gk7VDvJy/TEZ74hKfBC2kdiByE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7766 (0x1e56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54 Validity Not Before: Aug 12 16:10:48 2025 GMT Not After : Aug 19 16:10:48 2025 GMT Subject: CN=689b6788-0bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d1:49:ed:c0:cb:90:6e:20:14:80:85:8e:ce: 50:c2:b0:cd:d5:45:ef:63:83:2b:75:dc:86:a3:3f: 94:25:ee:14:4b:b3:64:b2:11:b5:bd:bb:3d:b5:f9: d7:19:4c:68:61:b8:f9:c9:7a:af:5f:ff:c3:c9:8e: ad:a2:32:68:83:ea:df:e1:2f:14:87:53:3e:b1:61: 76:90:10:58:2a:e4:b6:d1:00:38:fa:57:3c:b6:b7: 84:cc:9d:cb:e1:29:a1:57:82:2e:e0:3b:7b:f7:89: 44:31:67:e5:c7:b9:23:d5:6d:42:96:9d:5d:d8:98: 02:ad:6c:32:99:10:7b:b8:ff:f3:86:f8:bf:f1:53: a0:7e:9e:17:c3:77:c8:27:51:30:38:d5:4c:73:38: 02:6b:a2:af:61:a9:20:b2:52:7a:3c:e3:31:98:21: fd:e2:67:be:8f:06:78:68:57:a0:16:b7:2c:c8:1c: 1f:70:90:df:18:d4:a6:b8:ba:be:2e:d6:d8:f1:c4: df:2d:38:ef:4b:f5:1c:ee:8c:0b:a0:93:06:13:51: 4e:fd:79:2c:de:d7:6e:7c:d1:83:07:3f:70:86:de: 37:99:1d:2d:8c:ea:99:47:bd:fc:35:f7:28:cf:e7: b3:bd:03:e9:ea:c7:17:83:78:61:59:e7:fd:21:3a: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:9E:24:1C:09:E7:8C:DC:CB:9D:E1:6D:43:13:77:70:18:DE:A9 X509v3 Authority Key Identifier: keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:2e:d5:b4:ab:7b:3d:27:af:d6:43:f7:52:ae:e7:e2:7b: d0:76:0b:02:76:53:74:38:9c:e7:0f:93:d2:76:e9:c9:d5:67: 81:0b:7b:f8:5d:63:fa:56:5a:fe:22:0c:fd:2c:d4:e2:e7:06: e5:41:89:fa:a0:03:a7:bf:75:f6:46:a4:9d:95:5b:70:f1:bd: f6:18:d4:37:ef:93:57:c4:7c:00:17:47:d9:b4:c3:4c:21:bf: 4d:6c:93:9b:a3:d4:2c:38:66:3f:2d:83:96:19:68:6d:ec:da: bc:ef:a8:a1:5e:c5:9b:4f:62:e7:14:89:e1:61:ca:78:35:bd: 6f:a1:f6:de:6f:f9:bd:a5:09:e9:a4:31:bd:ce:f0:d3:e7:0b: 7c:c0:bb:4b:a8:49:20:c3:a8:0e:fc:42:5d:4e:55:64:39:1d: 80:bd:d4:32:58:db:07:a0:f3:6f:dd:ef:6c:72:e0:b2:2a:60: a0:a7:4f:b3:21:bb:ef:0d:db:23:da:82:f0:57:3e:29:a1:1e: 91:c7:75:f2:59:0e:07:8d:c4:fd:c1:fd:a8:90:61:b5:0d:f7: 15:b1:21:cc:d4:44:ae:06:be:00:89:27:d0:9e:6a:55:a7:56: 8b:2c:93:e6:94:2c:17:05:79:9e:e1:1f:83:e0:d8:b6:4a:17: e7:6e:7d:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0NkExMTAvBgNVBAUTKEY4RDRBNjMyRDA2OTk2NEM2MUEzM0U0MUQ2MjQzRDUz NUIwMDdENTQwHhcNMjUwODEyMTYxMDQ4WhcNMjUwODE5MTYxMDQ4WjAYMRYwFAYD VQQDEw02ODliNjc4OC0wYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dFJ7cDLkG4gFICFjs5QwrDN1UXvY4MrddyGoz+UJe4US7NkshG1vbs9tfnX GUxoYbj5yXqvX//DyY6tojJog+rf4S8Uh1M+sWF2kBBYKuS20QA4+lc8treEzJ3L 4SmhV4Iu4Dt794lEMWflx7kj1W1Clp1d2JgCrWwymRB7uP/zhvi/8VOgfp4Xw3fI J1EwONVMczgCa6KvYakgslJ6POMxmCH94me+jwZ4aFegFrcsyBwfcJDfGNSmuLq+ LtbY8cTfLTjvS/Uc7owLoJMGE1FO/Xks3tdufNGDBz9wht43mR0tjOqZR738Nfco z+ezvQPp6scXg3hhWef9ITpqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDaniQc CeeM3Mud4W1DE3dwGN6pMB8GA1UdIwQYMBaAFPjUpjLQaZZMYaM+QdYkPVNbAH1U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQ2QS8wMDUwMDE2NDk0 MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxreGhvejVCMWlROVUxc0Fm VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1OU21NdEJwbGt4aG96NUIxaVE5VTFzQWZWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQ2QS8wMDUwMDE2NDk0MzIxMUU2OEMxQjgyNEFDNEY5QUUwMi8tTlNtTXRCcGxr eGhvejVCMWlROVUxc0FmVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChS7VtKt7PSev1kP3Uq7n4nvQdgsCdlN0OJznD5PSdunJ1WeBC3v4 XWP6Vlr+Igz9LNTi5wblQYn6oAOnv3X2RqSdlVtw8b32GNQ375NXxHwAF0fZtMNM Ib9NbJObo9QsOGY/LYOWGWht7Nq876ihXsWbT2LnFInhYcp4Nb1vofbeb/m9pQnp pDG9zvDT5wt8wLtLqEkgw6gO/EJdTlVkOR2AvdQyWNsHoPNv3e9scuCyKmCgp0+z IbvvDdsj2oLwVz4poR6Rx3XyWQ4HjcT9wf2okGG1DfcVsSHM1ESuBr4AiSfQnmpV p1aLLJPmlCwXBXme4R+D4Ni2Shfnbn2+ -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:25 2025 by rpki-client