$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: EgqWSjCtVDAOkWigHlCKpTvOhaCFtyaKgZFpIqGq3Kg= Subject key identifier: 9F:D5:C6:82:F4:A3:53:E7:DB:AB:85:04:DA:DF:1F:84:83:55:73:2C Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0163 Signing time: Mon 11 Aug 2025 04:10:30 +0000 Manifest this update: Mon 11 Aug 2025 04:10:30 +0000 Manifest next update: Mon 18 Aug 2025 04:10:30 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: jfNcTH4usbnSDhlCHiNo4PpTYPz1aVbaw6e+ucHgu7s=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Aug 11 04:10:30 2025 GMT Not After : Aug 18 04:10:30 2025 GMT Subject: CN=68996d36-d87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:69:04:5d:dc:81:8b:95:d8:5b:b9:a7:77: 6f:f9:4d:d6:65:f4:12:f3:69:b4:bc:0b:42:f5:76: 34:54:cf:e4:8a:9a:1f:ca:5a:6e:25:b0:6e:e2:f2: 1b:b9:b1:73:75:8a:8b:48:cc:b4:a1:c3:e8:63:91: 30:dd:41:95:3e:32:88:28:35:8e:a1:ca:af:03:ed: d9:89:9b:dd:57:e3:87:0e:a7:01:5c:79:19:02:3f: 0e:db:d1:e1:92:b4:9b:01:49:42:d1:75:f5:61:55: 4b:4b:d4:b6:89:11:ca:67:6f:81:96:45:02:56:61: 8a:4d:fe:b8:0c:01:3f:7b:5e:24:c5:53:ad:2c:2f: f5:56:f0:6f:e4:e9:0c:6c:3b:39:a6:a4:de:45:15: 6d:2a:67:0d:40:ac:c5:90:25:5e:54:3f:87:0a:b9: 4b:85:aa:19:f3:07:2d:62:0a:51:6f:01:a7:15:dc: 6e:69:16:97:8e:e2:08:77:be:8a:2c:36:ca:82:c8: 7e:85:ef:d4:af:fb:7f:ae:17:16:b9:c1:19:d2:ee: e0:da:2e:da:94:d4:4b:4a:ae:75:12:93:5c:f1:d6: b4:ee:65:6b:7b:18:bd:09:19:ac:d1:26:a5:d4:c5: d8:d1:ce:ac:be:60:1c:6b:dc:f3:bb:68:65:75:77: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D5:C6:82:F4:A3:53:E7:DB:AB:85:04:DA:DF:1F:84:83:55:73:2C X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e5:af:58:15:d2:5f:5e:c2:66:60:08:7e:f8:e7:0a:1e:f4: f5:27:4a:85:c5:73:6e:b2:10:d6:40:0a:d5:d0:2b:ce:fb:2a: 96:b8:82:f1:85:e2:10:1e:aa:48:1d:05:fc:90:16:cc:ec:c6: e1:25:93:98:8d:62:e1:97:f8:35:62:8c:7c:7e:a4:cf:06:05: 30:d7:46:8b:3a:80:e3:48:ec:0a:3c:3c:60:39:ba:62:7a:c1: 58:f4:15:98:9b:96:3b:76:dd:eb:4f:18:aa:d6:86:f1:04:f2: 89:b1:1a:4d:9e:f3:20:1a:55:73:08:62:8f:f9:47:89:8c:57: cf:77:42:b6:e7:d3:c2:ef:05:3d:ee:00:d3:f6:29:8c:fd:f9: ec:03:a7:a0:10:13:49:42:1c:db:38:71:c3:a3:14:ca:1c:82: 02:bf:a3:23:5e:42:54:d2:3a:fd:08:f2:a3:70:9e:1f:60:8c: 12:5f:80:d4:fb:19:54:06:11:6d:8c:f3:ed:72:c5:87:db:51: 38:93:0a:27:71:07:1c:fe:ec:f1:6b:0b:2d:ff:82:33:e5:7d: e1:5d:8f:6f:c2:14:3f:d5:43:11:dc:0b:c7:be:c9:a8:f6:e1: 4f:20:41:85:95:2f:13:60:90:23:c0:40:61:25:60:ba:ea:de: e1:24:be:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwODExMDQxMDMwWhcNMjUwODE4MDQxMDMwWjAYMRYwFAYD VQQDEw02ODk5NmQzNi1kODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EZpBF3cgYuV2Fu5p3dv+U3WZfQS82m0vAtC9XY0VM/kipofylpuJbBu4vIb ubFzdYqLSMy0ocPoY5Ew3UGVPjKIKDWOocqvA+3ZiZvdV+OHDqcBXHkZAj8O29Hh krSbAUlC0XX1YVVLS9S2iRHKZ2+BlkUCVmGKTf64DAE/e14kxVOtLC/1VvBv5OkM bDs5pqTeRRVtKmcNQKzFkCVeVD+HCrlLhaoZ8wctYgpRbwGnFdxuaRaXjuIId76K LDbKgsh+he/Ur/t/rhcWucEZ0u7g2i7alNRLSq51EpNc8da07mVrexi9CRms0Sal 1MXY0c6svmAca9zzu2hldXeTcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/VxoL0 o1Pn26uFBNrfH4SDVXMsMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe5a9YFdJfXsJmYAh++OcKHvT1J0qFxXNushDWQArV0CvO+yqWuILx heIQHqpIHQX8kBbM7MbhJZOYjWLhl/g1Yox8fqTPBgUw10aLOoDjSOwKPDxgObpi esFY9BWYm5Y7dt3rTxiq1obxBPKJsRpNnvMgGlVzCGKP+UeJjFfPd0K259PC7wU9 7gDT9imM/fnsA6egEBNJQhzbOHHDoxTKHIICv6MjXkJU0jr9CPKjcJ4fYIwSX4DU +xlUBhFtjPPtcsWH21E4kwoncQcc/uzxawst/4Iz5X3hXY9vwhQ/1UMR3AvHvsmo 9uFPIEGFlS8TYJAjwEBhJWC66t7hJL5q -----END CERTIFICATE-----Generated at Wed Aug 13 02:46:07 2025 by rpki-client