$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: 7PZ2tzC8rK8Bgt9l7olYeaxMV+8mYKBgy7JLdGMzatQ= Subject key identifier: 53:D5:6A:3D:68:89:F8:6E:A0:9C:2C:CF:3D:2B:91:4F:EF:3F:88:6E Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 1705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 16F8 Signing time: Fri 08 Aug 2025 16:48:51 +0000 Manifest this update: Fri 08 Aug 2025 16:48:51 +0000 Manifest next update: Fri 15 Aug 2025 16:48:51 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: ycpuuAap0NVotaDYt1yGKv7MakVtbWU/K898N1KQJp8=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5893 (0x1705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Aug 8 16:48:51 2025 GMT Not After : Aug 15 16:48:51 2025 GMT Subject: CN=68962a73-1caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:3f:c5:83:8a:b6:b5:14:83:26:e3:40:16: 71:b1:9b:b7:6e:14:09:de:0d:b8:9a:f6:88:ce:e6: 92:5a:1d:53:78:e1:df:57:ad:36:e9:00:dc:65:46: bf:e1:93:bd:48:1f:b1:10:1d:f1:b0:0a:b2:7e:85: 54:da:5c:b2:40:46:ee:51:cb:d2:4a:82:b5:30:90: 56:04:ae:dd:c2:b7:be:67:74:61:4c:b2:19:0d:26: 42:a1:75:5d:3d:8b:91:d8:7b:11:4f:5b:82:66:36: ab:12:99:74:74:4d:31:6a:0f:0e:bb:3b:6e:14:d5: 13:bd:2f:4b:1b:f9:e5:e3:d7:5d:cc:cc:08:e6:61: f9:dd:a4:a1:36:c8:28:9c:c9:04:1a:20:d1:37:7c: e3:16:33:5e:80:f6:b6:d1:a3:87:39:82:35:19:58: 88:9c:76:b2:cf:c3:3a:83:fe:c5:d0:84:ff:80:ad: 5d:de:80:42:fa:8b:1b:ea:c9:fc:33:8a:0f:f5:1c: 79:36:8f:23:bf:77:83:5b:cc:86:ff:fb:e4:ce:dc: c0:23:6f:a2:14:d5:1e:f7:d2:15:d3:c8:a1:43:71: 02:d8:14:9e:8e:1a:86:09:9a:cd:95:a3:b9:ec:66: bf:a9:77:cc:10:e1:49:5a:ea:1c:84:38:d1:fa:0b: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:6A:3D:68:89:F8:6E:A0:9C:2C:CF:3D:2B:91:4F:EF:3F:88:6E X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e4:4c:e4:0c:28:90:cc:cd:ad:6c:9e:28:97:31:dd:3d:16: 92:35:67:bf:9a:33:72:9d:cd:40:a1:b6:76:67:7d:3e:18:33: dd:df:d2:c0:f3:67:7d:c7:8e:33:e9:58:cc:b3:66:45:74:cf: e6:53:d4:3a:67:48:48:01:85:e4:23:a4:8a:fe:f3:06:9d:29: 50:dc:c5:95:14:9f:e4:5f:93:f7:de:8e:04:9a:4e:5b:85:ce: f0:67:07:7d:51:53:1c:72:88:42:52:56:c9:b3:22:13:7e:fb: 78:b7:a6:5d:b3:a8:b9:48:06:dd:11:e8:eb:00:ff:38:e6:cf: 09:a1:b1:41:67:c6:2f:c4:c3:44:b5:83:ff:f9:58:50:8a:58: cb:8a:74:76:f0:6a:b6:10:79:05:e3:70:1d:3c:3b:d8:50:b8: 73:5e:a7:51:85:cc:89:93:af:42:57:45:83:1d:98:61:64:8c: 05:9c:24:cd:35:a4:97:1d:76:cb:2f:8c:79:4c:63:7b:86:68: 81:cb:0a:63:93:23:62:d8:56:6e:42:03:c1:18:eb:8b:64:11: ed:9a:d7:a2:2b:40:26:2e:21:41:18:c6:5f:46:42:b1:48:b0: 09:3c:5f:f7:48:d9:d2:fe:5d:10:4c:19:7d:f7:2c:17:c4:af: 49:f9:c2:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUwODA4MTY0ODUxWhcNMjUwODE1MTY0ODUxWjAYMRYwFAYD VQQDEw02ODk2MmE3My0xY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo0/xYOKtrUUgybjQBZxsZu3bhQJ3g24mvaIzuaSWh1TeOHfV6026QDcZUa/ 4ZO9SB+xEB3xsAqyfoVU2lyyQEbuUcvSSoK1MJBWBK7dwre+Z3RhTLIZDSZCoXVd PYuR2HsRT1uCZjarEpl0dE0xag8OuztuFNUTvS9LG/nl49ddzMwI5mH53aShNsgo nMkEGiDRN3zjFjNegPa20aOHOYI1GViInHayz8M6g/7F0IT/gK1d3oBC+osb6sn8 M4oP9Rx5No8jv3eDW8yG//vkztzAI2+iFNUe99IV08ihQ3EC2BSejhqGCZrNlaO5 7Ga/qXfMEOFJWuochDjR+gt4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPVaj1o ifhuoJwszz0rkU/vP4huMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5EzkDCiQzM2tbJ4olzHdPRaSNWe/mjNync1AobZ2Z30+GDPd39LA 82d9x44z6VjMs2ZFdM/mU9Q6Z0hIAYXkI6SK/vMGnSlQ3MWVFJ/kX5P33o4Emk5b hc7wZwd9UVMccohCUlbJsyITfvt4t6Zds6i5SAbdEejrAP845s8JobFBZ8YvxMNE tYP/+VhQiljLinR28Gq2EHkF43AdPDvYULhzXqdRhcyJk69CV0WDHZhhZIwFnCTN NaSXHXbLL4x5TGN7hmiBywpjkyNi2FZuQgPBGOuLZBHtmteiK0AmLiFBGMZfRkKx SLAJPF/3SNnS/l0QTBl99ywXxK9J+cIB -----END CERTIFICATE-----Generated at Fri Aug 8 20:44:09 2025 by rpki-client