$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: T1cRLIgj20ajA4s/hwMp5o3eA/YWVExiUJnUJjFQiP4= Subject key identifier: E2:2F:F6:E1:F3:76:93:10:91:C2:BF:03:A8:80:BA:0D:D3:FD:05:C8 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 010E Signing time: Sat 09 Aug 2025 05:41:57 +0000 Manifest this update: Sat 09 Aug 2025 05:41:57 +0000 Manifest next update: Sat 16 Aug 2025 05:41:57 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: s1GXc1jgWI3mqObzJqB5XDioGqXFruIZrKUBzBaVZ8I=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Aug 9 05:41:57 2025 GMT Not After : Aug 16 05:41:57 2025 GMT Subject: CN=6896dfa5-4566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:9d:24:e6:cb:42:cb:80:81:b5:b7:e5:32: dd:89:d5:cb:de:98:c3:c4:78:7b:ad:92:25:18:26: 7e:c5:44:6d:5e:1a:da:95:cc:60:1a:11:bc:60:20: 9b:8f:2f:d5:ad:4b:44:4c:d3:f5:26:91:2a:36:95: 64:8d:b4:3f:03:71:a2:45:a9:34:36:62:7d:0d:cf: 58:9d:f3:23:d5:37:a8:c9:bb:8a:13:ee:84:7b:6a: 29:d4:bc:f1:8c:c2:49:d8:22:ff:70:b6:61:26:50: b9:8c:62:4b:11:ef:4a:cf:a3:b9:68:d5:82:40:28: c3:0f:c3:84:3f:c5:17:c2:ec:cd:49:3c:ac:2e:55: fa:6f:cf:64:d5:8b:86:c0:dc:52:30:fd:bc:cb:10: 13:d6:3b:b5:43:0d:da:89:b1:58:f4:b6:45:6d:b0: f7:35:fd:82:10:e8:3c:d0:94:80:6a:72:fe:8f:a3: d0:b1:44:0a:03:1e:cd:b0:16:27:c6:82:b4:a5:56: 17:59:c9:25:c2:47:c1:b9:f8:31:bf:f7:f3:8a:d0: 9e:a4:34:fd:64:1d:bd:66:48:35:aa:02:61:dd:13: 82:23:cd:0b:45:7b:b3:e2:df:5b:9b:61:3f:d8:a6: 88:35:58:19:b1:d6:9c:1c:c4:e2:51:7c:51:e7:9f: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:F6:E1:F3:76:93:10:91:C2:BF:03:A8:80:BA:0D:D3:FD:05:C8 X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f3:15:67:32:be:f3:1b:5f:c5:4f:68:58:5d:60:a4:80:48: ec:e5:b5:83:8d:d5:b3:3c:37:ce:1c:d2:fd:9a:f3:d0:64:90: 89:1c:9e:c7:08:27:df:cb:dc:35:0e:b1:c3:93:77:96:d7:6e: 91:1c:07:e7:dd:0d:f5:74:a1:4e:ff:6f:8e:30:7f:23:70:54: 32:9e:ef:5b:49:ca:ca:43:1d:95:5d:1c:f2:c5:e2:3f:53:0a: 82:71:ad:4f:18:4a:1b:c8:72:d8:62:b2:e9:79:cd:13:a1:bb: 2c:3f:e9:2f:00:a8:11:7e:d2:98:08:b5:2f:be:55:2e:e6:ca: 5e:af:e8:b1:86:a9:de:94:51:94:9c:35:10:a3:76:50:ec:b6: b2:2e:6f:ad:9c:51:a6:b8:d6:35:a9:d0:f9:b5:2a:2b:0c:ab: 26:47:94:79:a2:e5:55:9f:15:38:2e:97:22:c5:77:b5:1d:91: e4:22:50:44:f3:de:f4:ba:18:cf:38:af:8d:c8:81:60:a5:5c: b7:d7:85:bd:e0:37:74:af:e5:da:c8:cb:b6:0e:de:6f:5c:51: e2:4c:8b:9d:93:22:28:dc:4b:dc:ac:20:32:5a:7e:de:7b:8c: 1a:51:7b:01:ab:bd:8a:8a:92:f5:8b:22:74:96:a3:f3:e9:fc: 0e:88:98:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwODA5MDU0MTU3WhcNMjUwODE2MDU0MTU3WjAYMRYwFAYD VQQDEw02ODk2ZGZhNS00NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXCdJObLQsuAgbW35TLdidXL3pjDxHh7rZIlGCZ+xURtXhralcxgGhG8YCCb jy/VrUtETNP1JpEqNpVkjbQ/A3GiRak0NmJ9Dc9YnfMj1TeoybuKE+6Ee2op1Lzx jMJJ2CL/cLZhJlC5jGJLEe9Kz6O5aNWCQCjDD8OEP8UXwuzNSTysLlX6b89k1YuG wNxSMP28yxAT1ju1Qw3aibFY9LZFbbD3Nf2CEOg80JSAanL+j6PQsUQKAx7NsBYn xoK0pVYXWcklwkfBufgxv/fzitCepDT9ZB29Zkg1qgJh3ROCI80LRXuz4t9bm2E/ 2KaINVgZsdacHMTiUXxR55/tDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIv9uHz dpMQkcK/A6iAug3T/QXIMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU8xVnMr7zG1/FT2hYXWCkgEjs5bWDjdWzPDfOHNL9mvPQZJCJHJ7H CCffy9w1DrHDk3eW126RHAfn3Q31dKFO/2+OMH8jcFQynu9bScrKQx2VXRzyxeI/ UwqCca1PGEobyHLYYrLpec0TobssP+kvAKgRftKYCLUvvlUu5sper+ixhqnelFGU nDUQo3ZQ7LayLm+tnFGmuNY1qdD5tSorDKsmR5R5ouVVnxU4LpcixXe1HZHkIlBE 8970uhjPOK+NyIFgpVy314W94Dd0r+XayMu2Dt5vXFHiTIudkyIo3EvcrCAyWn7e e4waUXsBq72KipL1iyJ0lqPz6fwOiJgr -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:09 2025 by rpki-client