$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft File: nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json) Hash identifier: L7he1m+pO0d/bSUjepkQbC2Bj+F3HAfUbUNXgUGajMM= Subject key identifier: 14:4E:82:A7:DC:CD:10:49:7C:28:22:FF:4C:08:DD:ED:01:C9:93:B0 Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF Certificate issuer: /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft Manifest number: 0138 Signing time: Sat 23 Aug 2025 04:41:20 +0000 Manifest this update: Sat 23 Aug 2025 04:41:19 +0000 Manifest next update: Sat 30 Aug 2025 04:41:19 +0000 Files and hashes: 1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: XCZxTQQCBPG++jWQzvwA6PEx8PzrJjrp1EgGnxh27fw=) 2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: da2ZawdG5alxBTyeAyi7NwDwyDeUsxgI6h/wI95o9Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF Validity Not Before: Aug 23 04:41:19 2025 GMT Not After : Aug 30 04:41:19 2025 GMT Subject: CN=68a94670-e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:17:da:d1:24:18:bb:51:28:bd:2a:cf:73: 80:99:f1:b8:41:30:0e:4f:d7:b5:0f:e6:ff:72:4d: cb:f7:c0:85:47:41:12:5c:f9:ee:46:73:d5:6d:0e: 15:db:3f:25:18:e1:9e:c2:26:a3:ff:9c:c0:7f:3e: a6:ed:f7:dc:d6:0a:67:4f:ef:1d:de:47:6f:18:d3: 96:c4:7f:2a:89:2e:40:dd:6e:9d:b2:ea:d3:ae:ba: 08:c4:3d:b7:fd:bf:8d:8e:3c:51:52:3a:77:6a:93: 08:9c:a2:ce:2a:44:43:02:b2:cc:f3:ec:20:2f:08: fe:27:49:b6:3b:3d:18:7b:b5:f0:38:6c:d3:96:be: 3f:9e:d9:9c:2c:13:9d:0e:b1:98:68:80:1b:88:76: 2d:94:43:b2:3f:d4:d6:40:9d:85:03:39:4e:45:1a: e0:e1:fa:bb:4c:af:29:95:b7:ba:ae:bb:38:7c:9f: ef:1e:57:80:4a:14:24:19:59:3f:80:af:e6:45:da: 92:f3:5a:4c:00:46:1c:ee:61:e7:3a:93:77:44:76: cb:36:00:4e:94:df:c4:61:3f:70:d4:5c:9c:b9:7f: 9b:a2:03:80:51:a9:0d:32:8f:23:b1:dc:b4:32:08: 68:1f:bf:44:e3:8d:c4:d6:b4:63:8f:3a:46:20:5e: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4E:82:A7:DC:CD:10:49:7C:28:22:FF:4C:08:DD:ED:01:C9:93:B0 X509v3 Authority Key Identifier: keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ad:31:dd:29:e8:fe:2d:1e:9f:4c:ef:6e:e4:43:31:a3:d4: 6e:b7:63:b6:70:2b:c5:3c:f8:ea:a0:3d:af:6f:58:d5:72:4e: b4:35:5d:79:fa:69:33:c7:c0:2b:ab:55:57:76:2b:76:5b:68: 11:87:9d:fc:c2:4c:3e:a8:23:46:0a:26:ec:82:76:9f:ae:72: 50:a4:d3:7b:ef:b9:c0:78:e2:b7:b8:b7:49:c5:80:f4:fc:3f: 29:f0:92:82:80:e7:51:f5:2f:fa:3a:32:52:f1:45:b1:f3:41: da:f5:15:74:a0:25:ab:64:4f:3d:f4:b4:fd:50:00:a8:7e:71: 74:61:76:59:a0:8e:8a:fe:11:b9:31:63:2b:4d:a2:53:e5:c4: a4:7c:53:a0:0f:bd:77:71:87:b1:05:3e:d0:5b:a2:a5:05:48: 7e:83:b7:0c:93:f1:47:b3:f6:c2:54:aa:bc:65:3b:75:0f:54: 69:d9:21:ca:45:ba:ee:15:da:49:c1:00:d3:bf:55:1d:6a:34: dc:3a:49:bf:87:77:63:d4:07:d6:9c:e0:26:fc:cb:61:8e:d7: e5:5d:71:86:b0:97:de:2a:2e:eb:77:0a:8b:c9:2b:f4:69:d6: e0:81:89:77:4d:11:f2:70:bc:dd:0a:b1:5c:cf:8c:45:03:0d: 2e:cd:8f:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1 MzI2ODBDREYwHhcNMjUwODIzMDQ0MTE5WhcNMjUwODMwMDQ0MTE5WjAYMRYwFAYD VQQDEw02OGE5NDY3MC1lMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqkX2tEkGLtRKL0qz3OAmfG4QTAOT9e1D+b/ck3L98CFR0ESXPnuRnPVbQ4V 2z8lGOGewiaj/5zAfz6m7ffc1gpnT+8d3kdvGNOWxH8qiS5A3W6dsurTrroIxD23 /b+NjjxRUjp3apMInKLOKkRDArLM8+wgLwj+J0m2Oz0Ye7XwOGzTlr4/ntmcLBOd DrGYaIAbiHYtlEOyP9TWQJ2FAzlORRrg4fq7TK8plbe6rrs4fJ/vHleAShQkGVk/ gK/mRdqS81pMAEYc7mHnOpN3RHbLNgBOlN/EYT9w1FycuX+bogOAUakNMo8jsdy0 MghoH79E443E1rRjjzpGIF5BUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBROgqfc zRBJfCgi/0wI3e0ByZOwMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz N28xWFpYNzVsNGxUSm9ETjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdrTHdKej+LR6fTO9u5EMxo9Rut2O2cCvFPPjqoD2vb1jVck60NV15 +mkzx8Arq1VXdit2W2gRh538wkw+qCNGCibsgnafrnJQpNN777nAeOK3uLdJxYD0 /D8p8JKCgOdR9S/6OjJS8UWx80Ha9RV0oCWrZE899LT9UACofnF0YXZZoI6K/hG5 MWMrTaJT5cSkfFOgD713cYexBT7QW6KlBUh+g7cMk/FHs/bCVKq8ZTt1D1Rp2SHK RbruFdpJwQDTv1UdajTcOkm/h3dj1AfWnOAm/MthjtflXXGGsJfeKi7rdwqLySv0 adbggYl3TRHycLzdCrFcz4xFAw0uzY/W -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:52 2025 by rpki-client