$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: HbYGG7G1JPDZIHZWQn6o99rt7AwZtiSSHUnJXqIjLcg= Subject key identifier: 91:4A:C2:A2:4E:6A:69:D4:83:EA:CB:BD:4E:7E:E9:4A:7C:78:B4:1E Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 067C Signing time: Fri 08 Aug 2025 22:46:49 +0000 Manifest this update: Fri 08 Aug 2025 22:46:49 +0000 Manifest next update: Fri 15 Aug 2025 22:46:49 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: CdE+myP3hHb3MiL5LOpEoQUe1r1WkTDMBXCBCGiun0A=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Aug 8 22:46:49 2025 GMT Not After : Aug 15 22:46:49 2025 GMT Subject: CN=68967e59-9149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:7a:cc:43:33:5f:d0:8c:5b:86:3c:6e:4e: 3d:c4:16:b2:35:3a:a9:00:4c:2a:66:16:03:a3:49: e8:dc:4e:47:11:21:1c:28:4a:d1:29:05:f0:13:d0: ff:c7:2e:5e:b5:7d:77:1e:53:ad:4b:8c:fc:ec:4f: f0:a6:9c:16:b8:64:ae:af:fd:8d:02:49:62:9d:12: de:43:2c:32:0d:70:fe:a7:5f:08:6f:99:e0:e4:64: ed:9e:d3:30:34:82:77:0c:54:6b:77:64:e6:12:77: f3:7c:d6:bd:48:fa:13:c5:82:84:86:7c:26:c1:07: 2c:27:4f:08:a0:0b:4d:a8:ad:9f:5f:89:97:27:4f: 1a:4d:8d:8a:e3:f6:38:53:93:77:0b:cf:c6:d2:83: 7e:9a:40:9c:55:23:53:26:6c:cb:69:db:45:ec:a0: 7e:01:78:37:1a:5e:bc:5f:97:5e:1b:4c:38:b8:64: e7:1b:ec:a1:8b:07:57:7a:91:d1:ac:5a:61:81:72: fa:d1:23:5b:fc:f0:e3:77:86:40:06:6a:fb:4b:fe: 3e:ff:62:7a:86:19:13:63:ab:53:2a:f5:cc:50:01: 66:3e:17:ec:06:a1:ec:4d:40:94:7a:d4:7c:91:d2: c1:91:e1:ae:38:f8:2e:2c:b7:de:c1:95:4f:17:0f: 08:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4A:C2:A2:4E:6A:69:D4:83:EA:CB:BD:4E:7E:E9:4A:7C:78:B4:1E X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4c:47:b4:49:1c:cd:e1:e1:a5:a3:4b:a0:93:6e:fb:81:f4: 3e:06:ef:77:97:e0:1f:9d:72:ea:8a:2f:07:68:d7:37:98:1c: d4:2e:8b:66:4d:fb:3b:60:e2:84:70:cb:bc:31:17:87:f0:3b: 46:d7:78:f0:1a:dc:d2:4f:de:37:39:60:11:0c:7a:74:51:69: 6d:e3:f6:26:04:a8:8b:f2:0a:c3:08:ca:c2:92:c5:9d:2d:a1: 5b:9b:e7:6d:36:da:29:75:0f:bf:a9:c4:33:c0:5a:44:da:14: b3:3b:ca:ca:22:8a:8b:26:26:7b:8b:f2:04:46:0f:5c:0e:7b: 08:80:0d:28:f6:46:bc:94:58:e1:74:55:cd:fe:fe:0c:7a:4f: ce:df:76:74:ce:2f:e7:b9:0b:6d:1b:af:c9:19:60:32:53:d4: cb:13:e4:d9:ef:e2:ff:85:be:1c:17:cb:4f:ba:16:1e:74:75: c1:79:3a:5b:5d:5c:38:95:f3:be:a2:9b:f3:c2:f0:df:44:62: 86:b4:49:4d:5e:56:5e:a3:d8:56:8b:9b:94:7a:f7:e2:48:83: 43:5f:00:c0:e1:c9:67:99:65:61:f3:6c:58:92:f6:02:13:69: ac:f5:76:44:42:86:27:59:75:78:d0:51:77:38:69:3f:d7:30: ec:1b:5f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUwODA4MjI0NjQ5WhcNMjUwODE1MjI0NjQ5WjAYMRYwFAYD VQQDEw02ODk2N2U1OS05MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubJ6zEMzX9CMW4Y8bk49xBayNTqpAEwqZhYDo0no3E5HESEcKErRKQXwE9D/ xy5etX13HlOtS4z87E/wppwWuGSur/2NAklinRLeQywyDXD+p18Ib5ng5GTtntMw NIJ3DFRrd2TmEnfzfNa9SPoTxYKEhnwmwQcsJ08IoAtNqK2fX4mXJ08aTY2K4/Y4 U5N3C8/G0oN+mkCcVSNTJmzLadtF7KB+AXg3Gl68X5deG0w4uGTnG+yhiwdXepHR rFphgXL60SNb/PDjd4ZABmr7S/4+/2J6hhkTY6tTKvXMUAFmPhfsBqHsTUCUetR8 kdLBkeGuOPguLLfewZVPFw8I+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFKwqJO amnUg+rLvU5+6Up8eLQeMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAETEe0SRzN4eGlo0ugk277gfQ+Bu93l+AfnXLqii8HaNc3mBzULotm Tfs7YOKEcMu8MReH8DtG13jwGtzST943OWARDHp0UWlt4/YmBKiL8grDCMrCksWd LaFbm+dtNtopdQ+/qcQzwFpE2hSzO8rKIoqLJiZ7i/IERg9cDnsIgA0o9ka8lFjh dFXN/v4Mek/O33Z0zi/nuQttG6/JGWAyU9TLE+TZ7+L/hb4cF8tPuhYedHXBeTpb XVw4lfO+opvzwvDfRGKGtElNXlZeo9hWi5uUevfiSINDXwDA4clnmWVh82xYkvYC E2ms9XZEQoYnWXV40FF3OGk/1zDsG1/G -----END CERTIFICATE-----Generated at Sun Aug 10 04:23:14 2025 by rpki-client