$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: w6u7arCKQhNg2lfgWDJQaapdsfJ3G+RdGL1EK/7icLo= Subject key identifier: DF:73:82:11:55:0E:6A:04:FC:A0:16:14:14:BD:6E:77:70:8D:54:16 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 11AF Signing time: Fri 08 Aug 2025 17:24:51 +0000 Manifest this update: Fri 08 Aug 2025 17:24:50 +0000 Manifest next update: Fri 15 Aug 2025 17:24:50 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: uDbxa0pvS4o7l5/DfsHoSj2d0E1tINFMreZFV/plJgo=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: hpmM9pfcrUFnNRets4Cm3b/cVvffA5StG3HyqAHQxOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Aug 8 17:24:50 2025 GMT Not After : Aug 15 17:24:50 2025 GMT Subject: CN=689632e3-13a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:c1:50:e7:72:a2:30:e4:12:7f:6c:fe:c0: 6c:54:d5:d5:73:9a:f2:e8:90:18:f2:00:f8:98:3a: 06:67:40:62:ae:a4:98:3b:25:ee:c6:87:7c:7a:d2: 20:c6:3e:b4:67:1b:fd:cc:3f:d4:1c:30:61:db:c0: ae:94:19:0d:fa:74:a3:48:d7:c5:3f:c9:39:44:be: 77:ae:32:0b:18:9a:48:2c:1a:1c:75:6b:79:2a:91: 62:39:d8:6a:66:63:5e:12:2c:92:1a:e6:e4:da:89: 01:e4:58:f7:40:3b:48:b3:99:d3:69:49:2d:97:68: 7a:3f:17:72:d2:9c:30:2a:88:a6:86:35:5b:17:20: a6:76:3f:49:c3:e6:1c:d5:e3:77:c5:93:f3:c2:41: 82:40:bd:ba:0c:2e:ad:73:81:9f:af:17:21:c8:88: b0:55:a8:d8:80:a4:b3:66:cb:82:43:f8:2c:c2:7e: 35:ca:6b:67:2e:43:a8:03:70:31:41:06:30:c0:80: d8:8f:2c:3e:6b:10:24:c4:56:95:97:85:ef:78:17: 44:1f:9d:b8:01:d5:9c:03:89:63:50:0a:1f:0d:5e: e6:1a:86:bd:f1:4c:cc:91:69:94:10:e5:51:09:57: 2d:f7:d6:1b:d5:20:9d:de:4d:7c:9e:4f:fd:d2:de: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:82:11:55:0E:6A:04:FC:A0:16:14:14:BD:6E:77:70:8D:54:16 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:61:09:2b:a1:a4:c9:40:e5:9c:68:33:14:ca:40:e0:bb:ac: 84:51:33:88:50:58:f2:c4:23:45:71:5e:8b:6e:77:72:f8:36: ed:cd:d4:3b:dd:92:62:e0:6b:f1:ad:f2:72:21:b9:13:c7:c3: c4:8f:15:dc:05:36:7c:c4:3e:22:0a:ec:12:9d:77:9a:8f:98: a4:e8:8e:bf:bc:59:13:d7:81:ad:bd:de:57:6d:07:03:d4:b5: 1e:0f:6d:6e:4e:a8:95:9f:b5:78:e5:6d:5a:c3:ef:03:64:c8: 05:62:09:58:34:23:7c:f8:92:ae:a2:e2:2a:c4:cc:81:f6:db: ff:f0:93:17:ba:b6:2f:c9:50:80:15:e3:e0:52:ec:30:57:45: 61:5e:76:85:5a:16:30:c7:06:c4:39:9b:48:76:e4:4e:19:60: f8:bf:a2:19:2a:df:d8:6c:50:ab:be:c7:5e:40:06:33:91:bf: 19:b2:61:3d:8b:27:68:79:10:16:de:6f:8f:5a:7d:43:78:cd: 02:52:a0:ae:2e:c1:7d:98:dd:f0:39:47:11:60:50:ba:bf:1c: 14:cf:27:b5:61:10:f4:f7:ca:ba:1e:01:f3:5d:a7:bd:81:2b: 34:1e:b7:f3:cb:5e:e2:b6:bf:3c:89:c6:b8:be:3c:5e:0f:60: 5f:6d:29:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjUwODA4MTcyNDUwWhcNMjUwODE1MTcyNDUwWjAYMRYwFAYD VQQDEw02ODk2MzJlMy0xM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQHBUOdyojDkEn9s/sBsVNXVc5ry6JAY8gD4mDoGZ0BirqSYOyXuxod8etIg xj60Zxv9zD/UHDBh28CulBkN+nSjSNfFP8k5RL53rjILGJpILBocdWt5KpFiOdhq ZmNeEiySGubk2okB5Fj3QDtIs5nTaUktl2h6Pxdy0pwwKoimhjVbFyCmdj9Jw+Yc 1eN3xZPzwkGCQL26DC6tc4GfrxchyIiwVajYgKSzZsuCQ/gswn41ymtnLkOoA3Ax QQYwwIDYjyw+axAkxFaVl4XveBdEH524AdWcA4ljUAofDV7mGoa98UzMkWmUEOVR CVct99Yb1SCd3k18nk/90t4PqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9zghFV DmoE/KAWFBS9bndwjVQWMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwYQkroaTJQOWcaDMUykDgu6yEUTOIUFjyxCNFcV6Lbndy+DbtzdQ7 3ZJi4GvxrfJyIbkTx8PEjxXcBTZ8xD4iCuwSnXeaj5ik6I6/vFkT14Gtvd5XbQcD 1LUeD21uTqiVn7V45W1aw+8DZMgFYglYNCN8+JKuouIqxMyB9tv/8JMXurYvyVCA FePgUuwwV0VhXnaFWhYwxwbEOZtIduROGWD4v6IZKt/YbFCrvsdeQAYzkb8ZsmE9 iydoeRAW3m+PWn1DeM0CUqCuLsF9mN3wOUcRYFC6vxwUzye1YRD098q6HgHzXae9 gSs0Hrfzy17itr88ica4vjxeD2BfbSmG -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:22 2025 by rpki-client