$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft File: NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json) Hash identifier: XjeJ6oZULtzmulJhxiHe2RqoVFsjgtt+gqaTbzan3VM= Subject key identifier: D3:94:A9:D0:25:08:EA:2A:DE:E8:8D:AE:30:65:7D:FB:AF:11:5E:51 Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C Certificate issuer: /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft Manifest number: 01D8 Signing time: Sat 23 Aug 2025 02:51:08 +0000 Manifest this update: Sat 23 Aug 2025 02:51:07 +0000 Manifest next update: Sat 30 Aug 2025 02:51:07 +0000 Files and hashes: 1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: i8YC941RB9+uB9caE0lV2fxVS38dw6KnpsR1jPE/MTA=) 2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: WkJCgrbBmelQA5c6twQaEqrtwUH2ZoyRfcoaWRVuiIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C Validity Not Before: Aug 23 02:51:07 2025 GMT Not After : Aug 30 02:51:07 2025 GMT Subject: CN=68a92c9c-4919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:48:65:af:a1:44:38:fd:01:01:8b:c3:f6: b6:64:d3:a3:02:8d:ed:c9:3f:c3:c6:3f:81:58:33: 6f:66:9f:03:bf:19:c2:30:17:04:19:8f:06:7b:b5: d6:7f:75:dc:f6:54:6c:62:8e:17:c0:4b:de:ad:34: 3a:6c:d2:63:29:aa:3f:77:d5:05:c5:d6:2a:71:ae: 9c:69:26:5a:14:85:2f:14:2a:08:16:6a:97:0b:d7: ca:24:a8:ab:35:2b:e8:27:ac:c3:40:a4:ca:eb:e3: bd:ad:68:6e:f2:1d:bf:5e:79:48:2a:27:9e:d5:0e: af:da:2b:6a:10:6a:5c:7f:59:ad:7f:b8:7e:e6:a0: 36:b9:9b:05:6d:75:88:69:38:26:ac:56:de:fe:5f: 23:87:17:ec:d6:1d:97:0d:71:55:98:54:31:90:74: d2:87:8a:11:c5:f3:7c:be:fe:f2:e4:87:94:ee:f4: 22:2b:10:b9:21:b6:8a:bc:1b:dc:89:b3:98:fc:ef: 33:84:0b:54:9e:84:8f:15:18:e3:8b:4b:f3:4b:ae: d5:0f:11:df:9f:e3:3f:5d:84:b9:2b:59:75:55:3b: d5:b3:c0:45:29:7b:d9:e3:f6:cb:7d:ee:da:00:88: d1:24:ae:b0:e4:2c:2a:a9:50:cb:9f:87:4b:f1:42: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:A9:D0:25:08:EA:2A:DE:E8:8D:AE:30:65:7D:FB:AF:11:5E:51 X509v3 Authority Key Identifier: keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2b:65:e6:63:a9:ae:52:66:56:98:09:19:27:98:4b:32:97: 7b:6b:f9:b5:61:af:77:c0:0a:29:2c:e2:a1:2a:e5:e5:08:b8: 91:62:94:dd:5c:aa:eb:8e:10:e6:af:3a:fe:5f:d5:d5:9e:d1: 43:6d:35:4e:dc:03:f8:79:13:de:fb:a3:17:63:57:e2:05:9e: 4a:b4:cf:de:71:06:6e:6d:38:5d:28:ec:13:83:33:4a:f0:38: 19:c7:c6:34:10:69:3a:c9:e0:33:fa:a2:c7:fe:84:87:26:41: a1:b4:93:3b:27:c1:ef:a9:77:62:54:26:a5:ee:ce:ab:1a:be: 24:d6:4f:7f:2e:33:3e:b8:30:e7:ef:0d:f7:2c:5a:fe:a2:27: 78:9c:df:e2:29:04:52:e3:c4:57:85:8c:77:1a:e8:70:20:f3: ff:d3:0a:d7:c5:a7:bc:22:cd:f8:a6:2b:62:4e:f2:c4:fc:86: 52:58:bf:55:bb:01:69:80:14:a8:1b:26:99:03:35:cf:85:87: 53:a7:0c:b2:9a:cb:6d:91:7a:a8:21:c0:fa:ce:10:2c:1b:0e: bd:d2:e5:f5:22:32:91:d3:4a:3f:50:66:91:0b:c6:72:9d:83: 12:5e:34:a9:8f:d2:c2:e9:3a:e2:60:61:66:6a:bb:fe:0e:42: 01:63:52:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF MTE5Mzc0NEMwHhcNMjUwODIzMDI1MTA3WhcNMjUwODMwMDI1MTA3WjAYMRYwFAYD VQQDEw02OGE5MmM5Yy00OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyflIZa+hRDj9AQGLw/a2ZNOjAo3tyT/Dxj+BWDNvZp8DvxnCMBcEGY8Ge7XW f3Xc9lRsYo4XwEverTQ6bNJjKao/d9UFxdYqca6caSZaFIUvFCoIFmqXC9fKJKir NSvoJ6zDQKTK6+O9rWhu8h2/XnlIKiee1Q6v2itqEGpcf1mtf7h+5qA2uZsFbXWI aTgmrFbe/l8jhxfs1h2XDXFVmFQxkHTSh4oRxfN8vv7y5IeU7vQiKxC5IbaKvBvc ibOY/O8zhAtUnoSPFRjji0vzS67VDxHfn+M/XYS5K1l1VTvVs8BFKXvZ4/bLfe7a AIjRJK6w5CwqqVDLn4dL8UJx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOUqdAl COoq3uiNrjBlffuvEV5RMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO WXFQZWlQWHotaVRoR1RkRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvK2XmY6muUmZWmAkZJ5hLMpd7a/m1Ya93wAopLOKhKuXlCLiRYpTd XKrrjhDmrzr+X9XVntFDbTVO3AP4eRPe+6MXY1fiBZ5KtM/ecQZubThdKOwTgzNK 8DgZx8Y0EGk6yeAz+qLH/oSHJkGhtJM7J8HvqXdiVCal7s6rGr4k1k9/LjM+uDDn 7w33LFr+oid4nN/iKQRS48RXhYx3GuhwIPP/0wrXxae8Is34pitiTvLE/IZSWL9V uwFpgBSoGyaZAzXPhYdTpwyymsttkXqoIcD6zhAsGw690uX1IjKR00o/UGaRC8Zy nYMSXjSpj9LC6TriYGFmarv+DkIBY1JH -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:24 2025 by rpki-client