$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: ixR5SZVhK6uqWn3PXpBHuKS7/fthW+aXGu+5vcVw4sU= Subject key identifier: 9D:78:F2:2F:06:3A:EB:26:B1:59:35:78:85:A7:92:D6:B0:A1:85:F1 Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 09C3 Signing time: Sun 10 Aug 2025 20:01:28 +0000 Manifest this update: Sun 10 Aug 2025 20:01:28 +0000 Manifest next update: Sun 17 Aug 2025 20:01:28 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: qxzaX8J1UY8UTmpeIjahwE37wZyVFn0thiMErCD2fkI=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: MZTRHkBugOG0/w9DN1EvKjeTW8go+K0xNXADKQ+F2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 20:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Aug 10 20:01:28 2025 GMT Not After : Aug 17 20:01:28 2025 GMT Subject: CN=6898fa98-d671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:8f:4e:1c:02:e9:ed:16:9e:3c:5c:72:97: 82:69:96:07:94:af:86:3d:b1:98:f3:68:79:db:8b: ad:19:56:df:fd:e2:8b:e8:d9:70:95:c2:e4:a1:7b: 10:80:3d:4c:cf:ff:eb:68:89:ff:5f:9d:11:2a:54: 97:48:9f:d3:bf:f8:8f:97:b7:4e:f5:af:8f:01:42: 8e:5c:2f:fd:04:c3:27:c8:70:a6:15:cb:d8:36:52: ca:83:a7:c2:ea:49:83:6f:35:8d:20:9e:34:81:d3: c3:72:cf:15:cf:c9:16:38:ed:b6:91:38:20:e4:70: 14:4e:aa:38:bd:70:6c:7e:ea:10:43:fb:41:92:ac: e3:1a:01:6a:19:cd:81:51:0d:21:7b:5e:15:a7:c9: 54:32:a7:6d:cc:1d:91:ba:11:c8:8a:59:ed:36:c1: 9e:92:3e:b8:4f:60:cc:08:89:db:14:9c:9c:ac:cd: 40:6b:86:5e:f8:3e:08:9e:98:5f:fb:a4:ac:44:22: 42:dc:fe:5a:f8:f2:3c:59:c0:cf:59:0a:d5:f4:02: ce:93:ab:a7:cc:71:fc:07:3a:82:80:34:c8:12:3f: 38:97:b9:8c:e2:e2:b0:2d:c5:49:85:9b:7c:47:07: 0d:da:c0:b4:68:40:15:61:bf:11:8c:d6:fd:64:66: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:F2:2F:06:3A:EB:26:B1:59:35:78:85:A7:92:D6:B0:A1:85:F1 X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:cb:4a:ef:e8:bf:9d:da:22:25:c2:8b:43:4c:c3:ef:74:39: ed:5d:24:ac:5e:33:87:78:6d:c1:64:69:0c:ee:3d:2d:8c:5e: 79:ad:c5:46:18:d3:cc:6b:be:c2:7d:0e:08:e2:e7:56:6f:cf: ed:9b:e8:de:c0:6e:86:67:a5:b1:72:e2:a7:91:17:25:17:44: 74:e3:ec:9a:51:45:b8:a4:f1:f9:17:6f:f4:24:83:51:3a:36: 48:71:ea:d1:4d:d4:23:de:97:8d:5a:83:24:ec:53:ba:fd:f5: b4:fc:66:42:87:29:d8:bb:ad:88:db:da:c2:c0:e7:36:95:ac: 5a:e6:19:a4:03:81:0e:a6:12:47:a7:0d:99:92:51:5c:d9:48: 2d:45:16:34:d8:d5:fe:0c:bd:ca:43:d8:99:c2:f6:29:6c:ec: 79:66:71:5a:99:16:f3:6d:47:8f:a4:e7:2e:aa:fc:7c:4b:45: c7:6e:95:3f:83:cc:3e:d5:40:01:3b:e8:04:16:04:a0:94:84: d1:ac:54:48:98:12:67:1d:9d:0b:bf:ca:7b:ec:97:dd:dc:7c: ad:92:04:05:62:1a:e1:ee:39:22:91:2d:1a:c5:5a:be:74:fb: ca:69:22:ce:44:19:33:58:80:a6:dd:32:32:c7:d1:6a:11:43: 47:1f:6e:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwODEwMjAwMTI4WhcNMjUwODE3MjAwMTI4WjAYMRYwFAYD VQQDEw02ODk4ZmE5OC1kNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzG+PThwC6e0WnjxccpeCaZYHlK+GPbGY82h524utGVbf/eKL6NlwlcLkoXsQ gD1Mz//raIn/X50RKlSXSJ/Tv/iPl7dO9a+PAUKOXC/9BMMnyHCmFcvYNlLKg6fC 6kmDbzWNIJ40gdPDcs8Vz8kWOO22kTgg5HAUTqo4vXBsfuoQQ/tBkqzjGgFqGc2B UQ0he14Vp8lUMqdtzB2RuhHIilntNsGekj64T2DMCInbFJycrM1Aa4Ze+D4Inphf +6SsRCJC3P5a+PI8WcDPWQrV9ALOk6unzHH8BzqCgDTIEj84l7mM4uKwLcVJhZt8 RwcN2sC0aEAVYb8RjNb9ZGa7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ148i8G OusmsVk1eIWnktawoYXxMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXy0rv6L+d2iIlwotDTMPvdDntXSSsXjOHeG3BZGkM7j0tjF55rcVG GNPMa77CfQ4I4udWb8/tm+jewG6GZ6WxcuKnkRclF0R04+yaUUW4pPH5F2/0JINR OjZIcerRTdQj3peNWoMk7FO6/fW0/GZChynYu62I29rCwOc2laxa5hmkA4EOphJH pw2ZklFc2UgtRRY02NX+DL3KQ9iZwvYpbOx5ZnFamRbzbUePpOcuqvx8S0XHbpU/ g8w+1UABO+gEFgSglITRrFRImBJnHZ0Lv8p77Jfd3HytkgQFYhrh7jkikS0axVq+ dPvKaSLORBkzWICm3TIyx9FqEUNHH27D -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:38 2025 by rpki-client