$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: nz4NE7cpnLbHjPMmCYjsouDxdTW6EzSs4+B2U67f3sE= Subject key identifier: 31:CD:9F:D4:69:11:D3:E1:DA:11:D7:5E:8D:41:64:72:C7:F2:11:06 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 051F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 23:58:20 +0000 Manifest this update: Fri 22 Aug 2025 23:58:19 +0000 Manifest next update: Fri 29 Aug 2025 23:58:19 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: vFH0evRREzr/4zS2INFM4w5thMy/w5mhNdemm7Mx+gQ=) 2: D2D714387F6A11F0932D5109C4F9AE02.roa (hash: yUGreVj4o/HUDna6xAxmrZnhHq4vIsdMCondMWB4PTE=) 3: FBBECF1A694111F08D368069C4F9AE02.roa (hash: wEabHfOcZR2ozkEALTKl4Ms/qtp14KK9fqycKrZErhM=) 4: ED7FCE247F6A11F08CC2EF09C4F9AE02.roa (hash: 4xO0M3A8eWj3l1woS8d1c3cyXJ3kJ09e5TpdtfjybXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1311 (0x51f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Aug 22 23:58:19 2025 GMT Not After : Aug 29 23:58:19 2025 GMT Subject: CN=68a9041b-0ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:30:34:f9:27:16:c2:4b:d7:1c:73:1e:ba: aa:35:0b:6e:60:99:fa:21:03:ec:40:66:94:0d:89: da:2b:79:ff:c3:e4:37:51:3b:4f:98:31:d8:ff:f2: 0c:28:64:7e:0a:9f:d7:26:fa:db:3c:07:3c:e0:0f: 46:a4:63:82:ad:9e:38:7f:34:e9:d3:f9:a2:ee:ae: 62:a4:c2:68:fa:45:c6:51:6e:34:f7:bc:ba:aa:49: 6d:e5:36:a0:93:59:cf:19:b0:1c:d9:e2:b9:b9:68: e5:9a:8c:26:02:e5:82:f0:c2:eb:7c:b0:df:1b:b4: bf:7b:1d:81:71:c8:05:8a:5d:18:63:e8:1f:83:44: 14:95:14:10:da:d9:a1:7f:25:d4:b5:db:5e:bf:4b: 9d:49:74:2f:70:81:b0:0f:dc:09:d6:c2:6e:da:99: 09:cc:77:61:4f:6e:37:56:af:e0:f1:d0:ab:b4:86: a3:30:d3:75:e7:77:67:2d:20:51:a8:1d:0d:b1:07: d1:aa:3d:71:fe:7d:31:dd:96:ff:92:c7:a0:34:59: 45:19:c8:a9:00:0b:6b:be:f2:bc:15:a9:66:d2:9a: 14:07:2b:2e:b7:5c:2d:b1:e7:57:c9:09:fd:09:57: 8d:20:b0:8c:b2:05:6d:bf:d7:01:6c:51:d8:32:7c: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:9F:D4:69:11:D3:E1:DA:11:D7:5E:8D:41:64:72:C7:F2:11:06 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3b:b7:d9:68:a7:f9:bf:bd:ab:a3:70:4f:bd:bf:83:19:1a: 06:b7:84:54:17:59:fa:a9:48:ad:cd:7f:cd:1b:83:8b:07:74: ee:df:17:5d:82:45:a5:67:e7:c3:5f:2a:fb:68:d6:0e:10:b9: 56:65:e3:8e:84:95:e1:00:47:f7:b0:54:04:3a:80:d1:43:41: 73:bb:b1:6c:4d:69:d1:55:3a:ad:82:fd:e8:ba:71:86:39:38: 45:cd:b2:68:bd:22:05:94:8d:dd:76:36:56:b0:39:70:ce:06: 01:61:b8:54:3e:10:04:10:0d:cb:60:21:a3:c3:2a:41:66:2f: d3:09:db:d9:19:f9:65:57:84:ff:79:23:d4:78:91:ce:b1:13: a1:c2:02:37:16:35:a2:2b:7f:ec:23:32:d5:ee:29:57:c5:35: ce:e3:91:ee:69:39:db:17:cd:93:af:02:04:8d:51:ee:3e:46: aa:61:48:b9:a5:d8:07:ce:d3:f0:ed:a1:f2:08:84:a2:b2:61: cc:e2:27:52:12:f3:5c:13:5e:61:b2:7a:f1:e3:b5:f2:b9:c7: 37:0b:bb:28:09:de:d1:7c:b1:f5:93:95:7c:fb:81:86:90:c5: 97:a7:30:95:7f:53:b0:45:f3:61:c6:7a:05:7a:80:5a:29:b5: 2a:4d:8c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwODIyMjM1ODE5WhcNMjUwODI5MjM1ODE5WjAYMRYwFAYD VQQDEw02OGE5MDQxYi0wZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUYwNPknFsJL1xxzHrqqNQtuYJn6IQPsQGaUDYnaK3n/w+Q3UTtPmDHY//IM KGR+Cp/XJvrbPAc84A9GpGOCrZ44fzTp0/mi7q5ipMJo+kXGUW4097y6qklt5Tag k1nPGbAc2eK5uWjlmowmAuWC8MLrfLDfG7S/ex2BccgFil0YY+gfg0QUlRQQ2tmh fyXUtdtev0udSXQvcIGwD9wJ1sJu2pkJzHdhT243Vq/g8dCrtIajMNN153dnLSBR qB0NsQfRqj1x/n0x3Zb/ksegNFlFGcipAAtrvvK8Falm0poUBysut1wtsedXyQn9 CVeNILCMsgVtv9cBbFHYMnwpTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHNn9Rp EdPh2hHXXo1BZHLH8hEGMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjO7fZaKf5v72ro3BPvb+DGRoGt4RUF1n6qUitzX/NG4OLB3Tu3xdd gkWlZ+fDXyr7aNYOELlWZeOOhJXhAEf3sFQEOoDRQ0Fzu7FsTWnRVTqtgv3ounGG OThFzbJovSIFlI3ddjZWsDlwzgYBYbhUPhAEEA3LYCGjwypBZi/TCdvZGfllV4T/ eSPUeJHOsROhwgI3FjWiK3/sIzLV7ilXxTXO45HuaTnbF82TrwIEjVHuPkaqYUi5 pdgHztPw7aHyCISismHM4idSEvNcE15hsnrx47Xyucc3C7soCd7RfLH1k5V8+4GG kMWXpzCVf1OwRfNhxnoFeoBaKbUqTYxF -----END CERTIFICATE-----Generated at Sat Aug 23 10:29:59 2025 by rpki-client