$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: AsZPsFIPMxGC0oAlEDftNJ3y2NqRLBM4qJFevF1jaRo= Subject key identifier: 81:B4:A9:BF:E9:00:70:1F:B1:EF:A8:75:A6:05:E2:45:C1:51:6A:D1 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: BE Signing time: Sat 23 Aug 2025 06:20:18 +0000 Manifest this update: Sat 23 Aug 2025 06:20:18 +0000 Manifest next update: Sat 30 Aug 2025 06:20:18 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: KBEjgRILbKiLtxt84FWmJsxGlOJ6dQ0w5enIlJNtHXY=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Aug 23 06:20:18 2025 GMT Not After : Aug 30 06:20:18 2025 GMT Subject: CN=68a95da2-1b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:9d:4b:46:ed:8a:9b:7b:b6:25:0b:49:48: 7d:a2:be:8f:e3:22:a9:60:9e:8b:bd:2f:90:47:c4: 4f:89:25:0a:fb:ef:34:d9:93:33:f6:9c:02:47:e0: 74:29:4f:53:17:d6:0a:fb:cb:ba:ee:30:4d:dd:6d: af:c9:67:11:90:1a:52:6a:08:1c:b3:74:93:4f:de: 9f:66:9a:81:68:78:03:79:72:b9:7f:ba:76:9b:0a: 53:81:4e:f4:79:07:54:bc:8f:af:2a:50:7e:20:54: 9f:a3:f7:ac:13:74:2b:3d:42:2c:09:13:d1:fc:ad: 77:97:6e:4d:3e:15:ab:4e:21:bf:6a:47:2f:8a:c4: f7:1a:33:9f:07:71:f1:65:13:f9:ea:7a:4d:71:1a: 57:fe:c9:bf:8c:32:dd:17:23:d4:92:49:d9:e8:38: 34:d7:cf:33:91:43:d8:2b:29:0f:51:94:5c:9b:70: d3:42:d6:78:d6:2c:a2:c5:44:f6:e7:b7:b6:88:77: df:a5:a5:dc:ef:35:2d:2b:7e:39:cf:01:9a:2a:97: 4b:b2:e6:d6:e8:24:77:be:12:69:59:0c:9e:d7:82: d3:d4:33:f6:91:3b:cc:95:16:86:fd:6e:78:8e:41: ec:2e:d5:fb:44:fa:a5:a6:8e:0c:a5:1f:8d:fa:ac: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:A9:BF:E9:00:70:1F:B1:EF:A8:75:A6:05:E2:45:C1:51:6A:D1 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:04:30:de:e8:bf:04:a7:57:1a:a2:cc:f1:b8:45:b5:42:27: b3:38:9b:bf:81:5d:cf:20:17:0d:c6:6e:40:d6:bc:a2:6b:da: 0e:ea:0d:43:f2:91:97:c5:46:b4:be:55:19:df:91:c4:cb:cd: 74:12:7f:be:21:f0:82:49:20:59:1d:f6:d9:62:cf:e2:54:8e: 83:12:ae:76:3c:11:a7:90:4e:dd:32:b6:22:67:9f:47:9a:cd: c1:25:68:99:64:21:2c:b1:fd:72:24:cd:ea:9c:93:88:94:02: 6b:b1:5f:11:63:ce:7e:a8:5e:55:96:64:d2:c5:e0:8f:07:84: a7:93:d5:8f:d6:a1:42:1e:35:be:51:d4:2e:d0:20:c1:76:10: e5:c0:e4:73:47:98:45:81:58:92:12:42:be:f5:2f:f0:62:1f: 0f:ff:6f:e5:03:7a:6a:18:0e:60:46:d9:c0:40:f0:bb:e8:62: 39:8d:39:bd:b1:15:0d:42:81:09:81:7d:54:c6:39:76:c1:01: e9:2c:0e:2c:b6:67:4f:ea:ae:1c:e4:ed:a3:10:92:d8:3a:ac: b4:9b:d2:17:cf:e6:5f:bb:ac:da:94:ad:73:e9:ab:59:94:f6: c0:96:87:89:de:bf:ec:86:bd:05:1b:21:32:b7:3c:b8:47:a5: 48:c1:aa:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwODIzMDYyMDE4WhcNMjUwODMwMDYyMDE4WjAYMRYwFAYD VQQDEw02OGE5NWRhMi0xYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPCdS0btipt7tiULSUh9or6P4yKpYJ6LvS+QR8RPiSUK++802ZMz9pwCR+B0 KU9TF9YK+8u67jBN3W2vyWcRkBpSaggcs3STT96fZpqBaHgDeXK5f7p2mwpTgU70 eQdUvI+vKlB+IFSfo/esE3QrPUIsCRPR/K13l25NPhWrTiG/akcvisT3GjOfB3Hx ZRP56npNcRpX/sm/jDLdFyPUkknZ6Dg0188zkUPYKykPUZRcm3DTQtZ41iyixUT2 57e2iHffpaXc7zUtK345zwGaKpdLsubW6CR3vhJpWQye14LT1DP2kTvMlRaG/W54 jkHsLtX7RPqlpo4MpR+N+qwjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG0qb/p AHAfse+odaYF4kXBUWrRMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0BDDe6L8Ep1caoszxuEW1QiezOJu/gV3PIBcNxm5A1ryia9oO6g1D 8pGXxUa0vlUZ35HEy810En++IfCCSSBZHfbZYs/iVI6DEq52PBGnkE7dMrYiZ59H ms3BJWiZZCEssf1yJM3qnJOIlAJrsV8RY85+qF5VlmTSxeCPB4Snk9WP1qFCHjW+ UdQu0CDBdhDlwORzR5hFgViSEkK+9S/wYh8P/2/lA3pqGA5gRtnAQPC76GI5jTm9 sRUNQoEJgX1Uxjl2wQHpLA4stmdP6q4c5O2jEJLYOqy0m9IXz+Zfu6zalK1z6atZ lPbAloeJ3r/shr0FGyEytzy4R6VIwaq2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:55 2025 by rpki-client