$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: tm5u+wmui8kSlPFWSyXjMNoyanZL4Q9HzRN9Ks+aMFU= Subject key identifier: CE:B6:33:CF:5D:BF:9F:88:23:8B:91:D1:B7:AB:CF:93:5E:D8:E7:12 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: A3 Signing time: Tue 01 Jul 2025 07:09:45 +0000 Manifest this update: Tue 01 Jul 2025 07:09:45 +0000 Manifest next update: Tue 08 Jul 2025 07:09:45 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: +oCJFSu28KV3hR8ikMny2O8tumjEDFumMI02OunsXqU=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Jul 1 07:09:45 2025 GMT Not After : Jul 8 07:09:45 2025 GMT Subject: CN=686389b9-bac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:e6:36:d4:68:ad:64:35:01:ee:af:d8:15: 1b:9b:05:c3:af:bc:97:e3:99:54:33:d9:c8:7f:fc: 8e:45:d5:28:29:6d:ac:05:9e:5d:d4:74:cd:cb:be: 84:d1:62:9a:b5:66:a5:74:70:30:36:a7:9f:44:17: d4:dd:52:62:01:cb:97:f1:77:1e:e0:ed:f3:bf:bf: d1:c8:7a:66:d5:ff:22:de:f8:db:e2:de:c1:b0:31: ea:95:35:9a:90:9a:19:af:30:f0:38:80:ce:42:df: da:48:90:be:d0:ad:71:38:ba:c6:96:15:81:88:eb: a9:0e:3e:fb:2f:8d:bf:c4:b8:35:a6:40:80:1c:cb: f1:e6:81:8b:15:7b:b6:85:d3:2f:f9:14:fa:1e:2d: a9:fe:9a:31:5b:dc:21:38:32:02:77:fc:f7:1d:cf: 49:9d:ff:07:0b:f1:12:47:3e:fe:ef:13:88:18:4a: 52:55:6d:fe:ac:34:64:7c:f8:f6:79:d8:f9:9b:d2: e4:ba:b2:39:59:5b:66:f3:d4:67:f9:f8:c2:cd:f0: 31:09:8c:7e:f4:32:05:40:5f:92:4e:a5:a0:99:4a: e9:7a:eb:86:68:a0:a5:4c:4a:b0:6b:23:21:b5:19: 76:28:0b:aa:b8:98:bf:79:b5:ef:7a:71:09:36:06: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:33:CF:5D:BF:9F:88:23:8B:91:D1:B7:AB:CF:93:5E:D8:E7:12 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:c3:0f:ad:f2:57:ba:d8:56:ad:ec:bb:6f:7d:c6:1a:66:23: 2a:b7:4b:d9:3c:84:fc:9a:f6:a7:50:ca:ce:5f:65:76:f7:35: aa:c3:d7:9d:39:0d:3a:66:17:08:68:64:a8:6f:aa:1b:74:c5: 37:48:98:61:bb:cc:ab:e0:de:26:dc:85:83:bd:9b:e3:40:a1: e5:a3:95:7d:bb:42:54:a6:04:58:e5:38:be:f6:a6:7d:5d:36: 60:ff:2d:4e:d1:2e:2c:cb:1c:f6:7b:ee:e2:44:48:e0:c7:6c: 2f:fe:a8:b9:75:ae:3b:c1:33:06:6b:69:e5:4d:44:86:8c:46: 25:2c:94:cf:e0:59:d1:c6:aa:90:8b:36:84:63:ab:11:03:4f: d6:4b:00:e8:d3:bf:c1:a2:e0:b6:6b:b3:45:d7:62:da:29:be: d9:a7:69:0a:f0:68:0d:f8:9d:8a:b5:ae:e4:c9:d8:39:6c:7f: a3:52:3b:81:8b:fa:ee:73:13:d0:7d:b1:c2:72:1a:82:8a:19: 22:98:d2:d4:98:99:6c:28:c9:e0:cf:2c:4f:8b:3b:dd:76:23: 5c:f7:3a:37:e6:0d:84:9f:da:c2:0e:97:00:b6:0c:38:37:38: 16:5e:49:d6:29:47:f5:8b:c8:28:60:1c:ec:a8:87:b9:86:70: 8b:96:66:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwNzAxMDcwOTQ1WhcNMjUwNzA4MDcwOTQ1WjAYMRYwFAYD VQQDEw02ODYzODliOS1iYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEXmNtRorWQ1Ae6v2BUbmwXDr7yX45lUM9nIf/yORdUoKW2sBZ5d1HTNy76E 0WKatWaldHAwNqefRBfU3VJiAcuX8Xce4O3zv7/RyHpm1f8i3vjb4t7BsDHqlTWa kJoZrzDwOIDOQt/aSJC+0K1xOLrGlhWBiOupDj77L42/xLg1pkCAHMvx5oGLFXu2 hdMv+RT6Hi2p/poxW9whODICd/z3Hc9Jnf8HC/ESRz7+7xOIGEpSVW3+rDRkfPj2 edj5m9LkurI5WVtm89Rn+fjCzfAxCYx+9DIFQF+STqWgmUrpeuuGaKClTEqwayMh tRl2KAuquJi/ebXvenEJNgbhpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM62M89d v5+II4uR0berz5Ne2OcSMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLww+t8le62Fat7LtvfcYaZiMqt0vZPIT8mvanUMrOX2V29zWqw9ed OQ06ZhcIaGSob6obdMU3SJhhu8yr4N4m3IWDvZvjQKHlo5V9u0JUpgRY5Ti+9qZ9 XTZg/y1O0S4syxz2e+7iREjgx2wv/qi5da47wTMGa2nlTUSGjEYlLJTP4FnRxqqQ izaEY6sRA0/WSwDo07/BouC2a7NF12LaKb7Zp2kK8GgN+J2Kta7kydg5bH+jUjuB i/rucxPQfbHCchqCihkimNLUmJlsKMngzyxPizvddiNc9zo35g2En9rCDpcAtgw4 NzgWXknWKUf1i8goYBzsqIe5hnCLlmbD -----END CERTIFICATE-----Generated at Wed Jul 2 20:01:31 2025 by rpki-client