$ rpki-client -vvf rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft File: nberk64z9kYWgi3wP_2Bd2jx6Y8.mft (raw, json) Hash identifier: pO9QnJGzXk0zvGafaR1oAzp9GVJ6nkuiziDgn1BNf98= Subject key identifier: 28:90:4D:D5:B3:60:3A:E0:CE:66:BB:6B:66:FD:CC:7E:79:A9:69:1B Authority key identifier: 9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F Certificate issuer: /CN=A91810E3/serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft Manifest number: 015C Signing time: Sat 23 Aug 2025 04:14:19 +0000 Manifest this update: Sat 23 Aug 2025 04:14:19 +0000 Manifest next update: Sat 30 Aug 2025 04:14:19 +0000 Files and hashes: 1: nberk64z9kYWgi3wP_2Bd2jx6Y8.crl (hash: PlWOngnb6NNMMxM/dAHWEzL0PFYUoHHW1sGNgmGxDaM=) 2: A56F3A8A718811EEADDA430AC4F9AE02.roa (hash: q1gVEbmNzPAYit/PZzlFgDk+Tc1AUGMImEJ9QqP60MQ=) 3: 497917BA719B11EEA5D8F416C4F9AE02.roa (hash: RXrmTRENl+7Zg6y5wMLjJWSZiSVWcqVyL1CzU9Mm2gA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810E3, serialNumber=9DB7AB93AE33F64616822DF03FFD817768F1E98F Validity Not Before: Aug 23 04:14:19 2025 GMT Not After : Aug 30 04:14:19 2025 GMT Subject: CN=68a9401b-1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:44:5d:63:60:80:4f:e9:bc:af:ce:9e:a1: 28:cc:83:46:87:4f:29:1b:25:ba:b1:59:e7:98:ed: 4c:bd:ef:82:6d:80:07:16:5b:df:b3:08:8d:1e:a2: f9:4e:84:95:e5:a1:08:e1:dd:24:41:4b:93:4e:3d: a7:e9:24:ee:78:77:12:e9:f8:90:61:6d:34:2a:ac: bf:5f:13:95:b2:89:64:16:bf:1e:2f:60:d7:1b:50: 08:bb:b9:02:0a:b7:93:27:9e:12:e1:c2:62:c9:ad: 5c:ba:2c:90:2d:39:72:cf:d8:9b:7e:1f:49:ce:27: 49:49:72:5c:aa:46:2f:19:5f:c4:de:f9:0f:7e:0b: 76:37:f5:be:69:cd:ed:81:59:bf:d2:02:24:26:e6: e9:d1:b7:51:02:b8:cb:94:e4:47:0f:1c:15:79:0e: 6c:30:68:aa:c0:be:49:9c:a1:40:ee:95:0a:80:62: f4:9d:22:5d:12:61:7c:67:b4:a1:25:ae:10:30:77: bc:88:58:a8:30:1f:20:8c:18:0e:90:57:c6:13:56: 86:21:6c:4e:57:9a:16:4e:32:8c:e3:0f:62:10:96: 72:80:ca:34:e8:99:94:f7:67:ba:0a:0f:f8:aa:a0: 50:35:fc:8f:7c:25:13:a9:c0:b5:12:53:83:45:99: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:90:4D:D5:B3:60:3A:E0:CE:66:BB:6B:66:FD:CC:7E:79:A9:69:1B X509v3 Authority Key Identifier: keyid:9D:B7:AB:93:AE:33:F6:46:16:82:2D:F0:3F:FD:81:77:68:F1:E9:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nberk64z9kYWgi3wP_2Bd2jx6Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810E3/339314C8717D11EE89EF6236C4F9AE02/nberk64z9kYWgi3wP_2Bd2jx6Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:46:4f:21:f4:a2:6e:b2:63:f0:83:89:c5:a4:aa:78:31:9f: 63:91:e1:90:0f:cb:d6:f5:0c:1c:ae:27:cb:48:2a:32:02:cd: 57:2d:e3:b8:0e:86:bd:e7:37:50:58:c3:e7:8e:f6:54:82:dd: d9:c9:98:01:8a:4c:b0:e6:9a:72:fb:00:46:2f:82:71:61:91: d0:45:aa:92:32:73:56:12:06:71:f6:ca:5d:d6:4f:b4:2e:1b: ae:06:14:56:e7:f2:53:f0:1c:ab:13:a9:9b:41:4d:a3:70:29: 07:ec:35:2f:bf:bc:a3:a0:5d:eb:18:b8:25:8b:c2:ab:c2:d2: e5:ed:eb:0d:25:c9:47:aa:e7:d2:fa:6d:cf:23:13:57:28:83: 70:ac:1c:b4:46:65:94:0b:09:f4:4d:7e:d0:41:c7:7f:d6:9c: 3d:a1:24:33:01:81:79:7e:4d:4d:d9:2e:77:92:83:53:d6:40: 6e:ec:f7:f0:8d:d5:df:fd:8e:fd:67:33:73:21:18:7f:3a:0b: 35:4b:36:4d:7b:fb:dc:8a:99:4f:a2:47:57:6d:32:d1:9f:43: 5e:8d:0f:4e:48:c4:46:3f:80:c4:7a:f9:bf:a0:aa:67:35:fb: ea:c3:86:88:d4:c1:e7:a6:45:e4:9f:0c:8d:93:7f:59:6d:a9: b1:80:55:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwRTMxMTAvBgNVBAUTKDlEQjdBQjkzQUUzM0Y2NDYxNjgyMkRGMDNGRkQ4MTc3 NjhGMUU5OEYwHhcNMjUwODIzMDQxNDE5WhcNMjUwODMwMDQxNDE5WjAYMRYwFAYD VQQDEw02OGE5NDAxYi0xYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyytEXWNggE/pvK/OnqEozINGh08pGyW6sVnnmO1Mve+CbYAHFlvfswiNHqL5 ToSV5aEI4d0kQUuTTj2n6STueHcS6fiQYW00Kqy/XxOVsolkFr8eL2DXG1AIu7kC CreTJ54S4cJiya1cuiyQLTlyz9ibfh9JzidJSXJcqkYvGV/E3vkPfgt2N/W+ac3t gVm/0gIkJubp0bdRArjLlORHDxwVeQ5sMGiqwL5JnKFA7pUKgGL0nSJdEmF8Z7Sh Ja4QMHe8iFioMB8gjBgOkFfGE1aGIWxOV5oWTjKM4w9iEJZygMo06JmU92e6Cg/4 qqBQNfyPfCUTqcC1ElODRZkDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiQTdWz YDrgzma7a2b9zH55qWkbMB8GA1UdIwQYMBaAFJ23q5OuM/ZGFoIt8D/9gXdo8emP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBFMy8zMzkzMTRDODcx N0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlrWVdnaTN3UF8yQmQyang2 WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iZXJrNjR6OWtZV2dpM3dQXzJCZDJqeDZZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBFMy8zMzkzMTRDODcxN0QxMUVFODlFRjYyMzZDNEY5QUUwMi9uYmVyazY0ejlr WVdnaTN3UF8yQmQyang2WTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARRk8h9KJusmPwg4nFpKp4MZ9jkeGQD8vW9QwcrifLSCoyAs1XLeO4 Doa95zdQWMPnjvZUgt3ZyZgBikyw5ppy+wBGL4JxYZHQRaqSMnNWEgZx9spd1k+0 LhuuBhRW5/JT8ByrE6mbQU2jcCkH7DUvv7yjoF3rGLgli8KrwtLl7esNJclHqufS +m3PIxNXKINwrBy0RmWUCwn0TX7QQcd/1pw9oSQzAYF5fk1N2S53koNT1kBu7Pfw jdXf/Y79ZzNzIRh/Ogs1SzZNe/vciplPokdXbTLRn0NejQ9OSMRGP4DEevm/oKpn Nfvqw4aI1MHnpkXknwyNk39ZbamxgFWl -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:32 2025 by rpki-client