$ rpki-client -vvf rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft File: nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft (raw, json) Hash identifier: f1WW7ysyUhRaSLCWItq3roeydcpO66S13kSLI0m5X9w= Subject key identifier: 47:DC:21:F2:97:EB:76:63:D0:96:1E:AA:BF:83:CF:31:F1:B2:CD:12 Authority key identifier: 9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 Certificate issuer: /CN=A91113E7/serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft Manifest number: DC Signing time: Sat 23 Aug 2025 05:38:43 +0000 Manifest this update: Sat 23 Aug 2025 05:38:43 +0000 Manifest next update: Sat 30 Aug 2025 05:38:43 +0000 Files and hashes: 1: nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl (hash: 11NFVF1z/wmMWeH4ALsOfexLlNEJC6rBD8FJuce6ons=) 2: 6375B8642F5811EF93FCF427C4F9AE02.roa (hash: C3woTmy4KRh8oZfuokqoz+ySn5YpmljqQzslPnXWG7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113E7, serialNumber=9D6C750CE0393C200ABF8A671C1F2C206A0CB471 Validity Not Before: Aug 23 05:38:43 2025 GMT Not After : Aug 30 05:38:43 2025 GMT Subject: CN=68a953e3-e1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:98:79:66:40:24:19:ed:50:c8:dc:c2:8b: 26:fb:3f:a9:80:b8:fc:6b:06:c4:c3:03:16:4d:36: 3d:a1:bd:ba:85:79:ef:f1:6d:2f:ac:df:d4:2d:57: 32:37:22:e4:b3:ef:33:82:1b:2c:76:61:79:b3:35: be:fe:70:e0:d7:7e:1a:92:51:0d:e8:80:87:7e:18: 8a:2d:88:02:91:20:27:d7:ab:92:d2:49:61:b6:ef: f0:48:9c:d2:49:82:2f:96:c6:e6:1e:e1:a4:a0:bd: 5b:6a:28:b0:c5:3e:d7:51:71:22:05:81:12:b7:d6: ef:ec:b2:02:4c:8e:0b:c8:9e:bc:46:05:df:7d:19: 88:0f:c4:05:e5:e1:c4:52:0c:06:65:c6:59:95:c9: d8:9e:0b:77:2f:2e:54:29:0d:51:de:91:b7:64:72: 5f:90:8f:a8:72:2f:32:02:de:dd:e3:5f:7c:09:8c: dd:b2:b9:0e:42:fc:2b:f8:02:a5:86:54:8f:1e:3c: 64:cc:3b:92:a1:35:69:bf:fe:f8:75:ac:5e:64:27: 27:fc:6a:c9:0c:89:54:24:16:0a:4f:a8:28:77:8e: 74:e5:a0:9b:0f:2e:74:92:68:8a:4b:14:32:e0:df: 1c:1d:16:56:74:8b:47:63:01:54:76:2a:fd:cb:bc: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:21:F2:97:EB:76:63:D0:96:1E:AA:BF:83:CF:31:F1:B2:CD:12 X509v3 Authority Key Identifier: keyid:9D:6C:75:0C:E0:39:3C:20:0A:BF:8A:67:1C:1F:2C:20:6A:0C:B4:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nWx1DOA5PCAKv4pnHB8sIGoMtHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113E7/9D3A20002F5611EFA23E5A23C4F9AE02/nWx1DOA5PCAKv4pnHB8sIGoMtHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5c:f7:a6:0b:70:ba:e7:08:e3:da:dc:c0:65:4f:3e:9a:5e: 60:b4:66:4b:1e:68:39:fc:10:2c:bb:bf:10:0b:89:13:8d:10: aa:95:ac:28:8b:9e:bb:bf:17:52:43:ad:d5:e5:60:d5:c9:7f: ab:20:df:b1:f3:cd:ce:09:dd:73:70:bb:b5:18:87:45:a3:c9: 14:af:d2:20:a3:3b:40:94:84:b4:a8:9b:49:69:52:2c:b0:e6: 3b:e5:9b:78:2e:3c:d4:bf:d6:0c:9f:39:f2:eb:49:b3:ca:5c: 03:c2:cf:70:d4:27:4a:87:e5:96:96:bf:70:42:16:59:7b:5f: d6:2e:96:1e:9a:ed:a0:bf:a1:87:34:ac:b4:88:61:34:99:38: 86:ee:19:40:75:88:54:ac:6e:58:c7:85:57:4b:a9:cb:e9:28: 66:63:26:49:3f:f7:80:e3:b6:04:1d:b9:cd:a3:81:f5:ca:f8: de:05:74:82:9d:93:7e:59:e1:fb:49:6e:f6:13:a3:36:15:02: 45:81:5b:43:69:e7:a4:f5:e4:d4:f3:ff:3d:b2:cc:bb:c6:b6: b0:40:1e:81:6b:ac:a9:c4:aa:81:e2:34:69:0b:e2:a1:0e:61: 88:ff:08:11:66:20:2a:01:2c:84:e9:b7:06:e4:60:02:06:8a: ba:f7:66:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzRTcxMTAvBgNVBAUTKDlENkM3NTBDRTAzOTNDMjAwQUJGOEE2NzFDMUYyQzIw NkEwQ0I0NzEwHhcNMjUwODIzMDUzODQzWhcNMjUwODMwMDUzODQzWjAYMRYwFAYD VQQDEw02OGE5NTNlMy1lMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPGYeWZAJBntUMjcwosm+z+pgLj8awbEwwMWTTY9ob26hXnv8W0vrN/ULVcy NyLks+8zghssdmF5szW+/nDg134aklEN6ICHfhiKLYgCkSAn16uS0klhtu/wSJzS SYIvlsbmHuGkoL1baiiwxT7XUXEiBYESt9bv7LICTI4LyJ68RgXffRmID8QF5eHE UgwGZcZZlcnYngt3Ly5UKQ1R3pG3ZHJfkI+oci8yAt7d4198CYzdsrkOQvwr+AKl hlSPHjxkzDuSoTVpv/74daxeZCcn/GrJDIlUJBYKT6god4505aCbDy50kmiKSxQy 4N8cHRZWdItHYwFUdir9y7yXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfcIfKX 63Zj0JYeqr+DzzHxss0SMB8GA1UdIwQYMBaAFJ1sdQzgOTwgCr+KZxwfLCBqDLRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTNFNy85RDNBMjAwMDJG NTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBDQUt2NHBuSEI4c0lHb010 SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25XeDFET0E1UENBS3Y0cG5IQjhzSUdvTXRIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTNFNy85RDNBMjAwMDJGNTYxMUVGQTIzRTVBMjNDNEY5QUUwMi9uV3gxRE9BNVBD QUt2NHBuSEI4c0lHb010SEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRXPemC3C65wjj2tzAZU8+ml5gtGZLHmg5/BAsu78QC4kTjRCqlawo i567vxdSQ63V5WDVyX+rIN+x883OCd1zcLu1GIdFo8kUr9IgoztAlIS0qJtJaVIs sOY75Zt4LjzUv9YMnzny60mzylwDws9w1CdKh+WWlr9wQhZZe1/WLpYemu2gv6GH NKy0iGE0mTiG7hlAdYhUrG5Yx4VXS6nL6ShmYyZJP/eA47YEHbnNo4H1yvjeBXSC nZN+WeH7SW72E6M2FQJFgVtDaeek9eTU8/89ssy7xrawQB6Ba6ypxKqB4jRpC+Kh DmGI/wgRZiAqASyE6bcG5GACBoq692aY -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:52 2025 by rpki-client