$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: mikhpPSAQ15xbk6KaTFDYyja2IlTSfUd4kByq7TXeZM= Subject key identifier: B3:36:60:A5:A5:EC:E6:3B:66:B7:93:1D:71:0C:5B:88:0C:20:75:CC Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:16:39 +0000 Manifest this update: Sat 23 Aug 2025 08:16:38 +0000 Manifest next update: Sat 30 Aug 2025 08:16:38 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: Nzdt1zGInsDTOxyWaPEhCud4oUf7Z/VIfWAWiSO8ilU=) 2: CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa (hash: I4V72owrg5qiCod5LgKXA3su1gxxiAdnYcB+BZWhJ8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Aug 23 08:16:38 2025 GMT Not After : Aug 30 08:16:38 2025 GMT Subject: CN=68a978e6-ed27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:2e:41:dc:ab:4e:11:7a:79:ae:41:0e:5e: 40:9b:f7:9b:bb:23:04:6d:08:f4:36:d2:a5:08:1d: b1:96:4a:ab:86:5a:4b:f4:c5:90:65:9d:73:11:25: 3c:3f:d1:f6:0b:7b:1f:67:96:20:b6:4c:1a:62:37: 63:4e:12:d5:7c:82:20:75:e8:d5:c7:c8:62:67:6f: 42:6a:ee:3c:8c:4f:bc:3f:c7:8f:77:ea:c0:22:bb: da:04:25:21:5d:b5:a8:f5:c9:18:2b:db:43:50:75: 27:38:0b:69:b4:40:68:6a:b3:94:2b:76:7e:ce:3f: 8f:c7:ac:84:18:7d:1c:de:17:38:88:3b:e6:dc:79: ef:53:b9:b0:f6:39:c0:d2:e1:d9:e1:73:ff:38:0d: 17:e3:eb:03:cb:a9:09:0e:f0:d8:21:bb:9c:cd:3e: 5b:3d:e4:09:8c:65:a9:92:56:e1:f1:54:c8:7f:62: 9f:0d:7d:98:14:f0:f5:e7:3c:fc:db:24:84:b9:ca: 84:17:4c:e3:40:0f:47:7d:2a:23:b1:42:84:f4:9e: 4f:1c:3c:85:d5:4e:a0:35:79:0f:d9:d0:33:10:31: 2a:99:07:23:dc:8a:e1:5a:13:a1:b2:be:29:c1:6d: 62:00:a7:d5:c6:97:3d:bd:bb:fa:df:11:48:92:73: 81:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:60:A5:A5:EC:E6:3B:66:B7:93:1D:71:0C:5B:88:0C:20:75:CC X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:18:81:6c:7b:74:72:d3:fa:2f:06:07:b5:13:e4:95:00:6f: 34:0d:a2:1b:49:82:af:23:25:a2:38:4c:ef:12:66:bb:c4:2d: 8d:93:f6:9e:5b:53:8c:98:2f:b0:9d:38:57:4e:a8:1f:77:fd: 4f:cc:60:08:0c:0d:62:ed:e1:3d:f8:6b:9d:ba:00:ff:91:14: be:8b:35:7a:58:a7:62:38:e9:3d:d0:6c:b5:f0:75:02:14:62: f0:44:f0:b3:e2:2b:20:1f:ee:7f:af:81:fe:d4:5d:95:97:35: 88:1e:60:fb:05:b2:1d:81:64:f1:a1:1f:58:30:7b:ca:33:68: f2:79:a5:85:f3:19:ca:d7:f6:69:51:94:2e:d3:fd:28:12:a5: 6a:01:a4:3b:8e:11:2f:37:0b:a9:07:49:c7:45:05:29:c5:d1: 9f:07:1a:9e:4e:dc:8c:45:e5:9c:fb:01:b2:60:24:f2:5e:e0: d7:af:10:df:d5:fe:a1:1b:73:1f:e2:b0:b9:62:ce:56:e9:99: 51:45:de:01:12:36:69:be:d2:6d:0e:b2:e7:16:bb:97:ca:00: 4b:83:2f:dc:b7:9b:6f:c8:82:c0:51:04:4f:c6:5a:e6:6e:f5: d8:84:3f:83:43:fc:2a:01:ec:29:7f:97:68:0f:67:5f:07:6d: aa:2d:c7:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3 RkU1NDA2QTAeFw0yNTA4MjMwODE2MzhaFw0yNTA4MzAwODE2MzhaMBgxFjAUBgNV BAMTDTY4YTk3OGU2LWVkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ0i5B3KtOEXp5rkEOXkCb95u7IwRtCPQ20qUIHbGWSquGWkv0xZBlnXMRJTw/ 0fYLex9nliC2TBpiN2NOEtV8giB16NXHyGJnb0Jq7jyMT7w/x4936sAiu9oEJSFd taj1yRgr20NQdSc4C2m0QGhqs5Qrdn7OP4/HrIQYfRzeFziIO+bcee9TubD2OcDS 4dnhc/84DRfj6wPLqQkO8Nghu5zNPls95AmMZamSVuHxVMh/Yp8NfZgU8PXnPPzb JIS5yoQXTONAD0d9KiOxQoT0nk8cPIXVTqA1eQ/Z0DMQMSqZByPciuFaE6GyvinB bWIAp9XGlz29u/rfEUiSc4GrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUszZgpaXs 5jtmt5MdcQxbiAwgdcwwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NUMzLzIzMjZDNjNFNjYwNDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3ds REJhRVlEQ29JQlhfbFFHby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwYgWx7dHLT+i8GB7UT5JUAbzQNohtJgq8jJaI4TO8SZrvELY2T9p5b U4yYL7CdOFdOqB93/U/MYAgMDWLt4T34a526AP+RFL6LNXpYp2I46T3QbLXwdQIU YvBE8LPiKyAf7n+vgf7UXZWXNYgeYPsFsh2BZPGhH1gwe8ozaPJ5pYXzGcrX9mlR lC7T/SgSpWoBpDuOES83C6kHScdFBSnF0Z8HGp5O3IxF5Zz7AbJgJPJe4NevEN/V /qEbcx/isLlizlbpmVFF3gESNmm+0m0OsucWu5fKAEuDL9y3m2/IgsBRBE/GWuZu 9diEP4ND/CoB7Cl/l2gPZ18Hbaotx8M= -----END CERTIFICATE-----Generated at Sat Aug 23 22:14:03 2025 by rpki-client