$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: KKnC8/n0cePYi4kBFz6ZbOwOJmAciS2+skVsS6YvLgM= Subject key identifier: E8:0C:D2:63:47:EB:78:06:6C:F8:22:90:5D:84:C5:1B:D9:CE:7E:CB Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0542 Signing time: Fri 22 Aug 2025 23:39:21 +0000 Manifest this update: Fri 22 Aug 2025 23:39:20 +0000 Manifest next update: Fri 29 Aug 2025 23:39:20 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: 3OFvDIs7fUnST3hJES3RaACt2SNWLvzsG7ie7bV18HE=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Aug 22 23:39:20 2025 GMT Not After : Aug 29 23:39:20 2025 GMT Subject: CN=68a8ffa8-1ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e9:0a:9c:25:2f:f9:bb:20:8a:d9:00:98:41: a7:35:4a:60:8e:f5:99:1a:21:9e:1e:f1:e8:26:01: 2f:8d:9d:32:82:b2:5e:e2:b6:cf:f5:d2:77:db:3b: 65:2a:01:03:0f:ff:38:6a:81:f2:70:ab:26:16:d9: e6:e9:19:a6:b9:00:6a:9a:4c:e7:33:eb:fb:02:b5: f1:22:0d:a4:56:4c:31:d1:f0:16:ef:6d:c5:60:96: 21:cc:a9:e0:58:88:07:0b:29:6c:f9:0f:3f:e2:25: ef:9b:7e:b6:6f:6f:37:45:f7:a2:58:64:51:fc:c8: 41:35:dd:3d:31:36:99:e7:b7:73:a5:62:a8:e2:7b: 78:8b:20:c6:21:95:85:3d:3c:b3:ea:ce:8d:e7:eb: 0b:42:e0:16:36:33:e3:76:25:9a:e6:ca:3f:8d:55: f5:85:e3:12:25:5f:76:02:e4:45:58:78:51:03:51: a0:12:40:47:72:40:c8:10:14:53:29:ba:59:da:21: 91:61:1d:f0:3d:b1:7f:47:de:94:99:b0:f0:78:89: b0:f3:b4:70:54:f5:1f:cd:ba:97:fc:d1:0e:23:fc: 1b:65:de:35:36:2a:17:07:37:0a:74:7e:fc:49:21: bc:04:ad:5b:32:84:5f:06:af:6c:8d:93:7e:42:a5: 08:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:D2:63:47:EB:78:06:6C:F8:22:90:5D:84:C5:1B:D9:CE:7E:CB X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:2e:f2:ac:ba:10:41:5d:49:4f:a5:c5:81:bd:0b:80:38: 10:cf:b3:1f:83:ce:f5:14:1f:78:f4:17:04:be:a6:e6:b9:2b: 26:14:7b:31:17:a9:9c:15:53:ee:75:26:a6:18:95:60:0c:09: 25:4a:49:eb:ad:61:43:e2:c6:8b:aa:aa:fe:31:ed:a0:17:a5: c7:ce:ec:ea:bc:cf:11:a5:2f:3e:9a:cc:e5:97:e5:3e:78:d3: 34:18:2d:8b:50:40:fe:bf:e1:d8:f5:ed:57:d8:bd:6d:20:b2: e8:d3:41:7e:36:07:60:00:3a:59:88:ad:9e:d2:80:dc:6e:4a: 3d:a7:8b:b2:31:95:03:0c:82:62:6b:c7:55:1c:70:9a:81:e7: 79:d1:71:4f:96:66:62:ca:08:48:54:40:dc:54:a2:74:28:1f: 98:de:a9:79:4c:5a:3f:0c:72:fa:e6:50:0a:46:b3:0c:61:c8: f9:37:21:c4:04:8c:2c:60:51:bb:95:64:61:ad:44:ca:ff:65: 3b:ae:c7:10:df:74:26:77:91:66:10:e0:7e:0a:1f:d2:b5:38: 9a:11:06:4e:1e:0b:76:46:4e:41:91:b3:cb:23:3a:30:e7:db: cc:05:89:dd:73:37:aa:b1:c5:ab:b7:ae:e6:a7:3f:b8:8e:ba: 29:17:50:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwODIyMjMzOTIwWhcNMjUwODI5MjMzOTIwWjAYMRYwFAYD VQQDEw02OGE4ZmZhOC0xYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OkKnCUv+bsgitkAmEGnNUpgjvWZGiGeHvHoJgEvjZ0ygrJe4rbP9dJ32ztl KgEDD/84aoHycKsmFtnm6RmmuQBqmkznM+v7ArXxIg2kVkwx0fAW723FYJYhzKng WIgHCyls+Q8/4iXvm362b283RfeiWGRR/MhBNd09MTaZ57dzpWKo4nt4iyDGIZWF PTyz6s6N5+sLQuAWNjPjdiWa5so/jVX1heMSJV92AuRFWHhRA1GgEkBHckDIEBRT KbpZ2iGRYR3wPbF/R96UmbDweImw87RwVPUfzbqX/NEOI/wbZd41NioXBzcKdH78 SSG8BK1bMoRfBq9sjZN+QqUINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgM0mNH 63gGbPgikF2ExRvZzn7LMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZy7yrLoQQV1JT6XFgb0LgDgQz7Mfg871FB949BcEvqbmuSsmFHsx F6mcFVPudSamGJVgDAklSknrrWFD4saLqqr+Me2gF6XHzuzqvM8RpS8+mszll+U+ eNM0GC2LUED+v+HY9e1X2L1tILLo00F+NgdgADpZiK2e0oDcbko9p4uyMZUDDIJi a8dVHHCaged50XFPlmZiyghIVEDcVKJ0KB+Y3ql5TFo/DHL65lAKRrMMYcj5NyHE BIwsYFG7lWRhrUTK/2U7rscQ33Qmd5FmEOB+Ch/StTiaEQZOHgt2Rk5BkbPLIzow 59vMBYndczeqscWrt67mpz+4jropF1DK -----END CERTIFICATE-----Generated at Sun Aug 24 06:33:59 2025 by rpki-client