$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: 2tFBFr63pQySMYejY7OIB5+gk3iV1mMBxHfGuNT7lj4= Subject key identifier: CA:D2:2A:DA:D2:61:D7:0B:AD:5E:42:A8:FC:1B:2E:05:53:68:A7:70 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 0166 Signing time: Sat 23 Aug 2025 04:03:24 +0000 Manifest this update: Sat 23 Aug 2025 04:03:23 +0000 Manifest next update: Sat 30 Aug 2025 04:03:23 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: isLOAmLRPoGxnFmdpETaMNWKzSot0Xxgx48mr4D3TiI=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Aug 23 04:03:23 2025 GMT Not After : Aug 30 04:03:23 2025 GMT Subject: CN=68a93d8c-4c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:e4:04:f0:3d:e8:d6:33:dc:a3:a4:e3:19: fd:b7:72:93:e6:58:1c:10:24:24:eb:51:27:38:22: dc:fa:1e:04:8f:54:3b:43:0b:61:b3:99:3d:0e:91: 69:69:e7:c4:37:96:ca:3c:d9:be:6d:c6:77:ae:ce: d3:21:f0:0e:7f:bc:1c:dd:39:8e:4a:b7:6a:af:83: 8c:d5:56:ea:8c:aa:e3:dd:29:52:53:25:9d:f0:1d: a2:0a:2b:a0:25:e4:57:97:2e:46:8e:39:5b:1b:e2: 24:4a:7e:38:83:f8:20:f7:2b:c3:0e:df:af:0b:48: de:91:1f:5b:1a:e1:8b:14:6d:3b:83:b0:00:c3:14: ec:7a:54:cb:51:07:1c:2b:d7:c4:15:d1:04:ec:c1: 79:d8:9d:10:b4:31:b9:a5:d6:0c:cc:b7:74:4e:08: 69:e6:07:29:94:9e:c3:78:73:7a:d2:7b:66:94:ee: 2f:84:08:43:68:b6:13:ff:6f:b1:0f:0f:33:8f:4f: f2:73:ab:6d:19:15:5c:07:42:7c:a6:a2:2e:16:96: f6:7d:2f:c9:09:f9:0f:1d:07:f2:d0:00:34:4f:e4: 16:65:bb:35:f3:40:c8:8b:11:fa:d7:39:b0:97:f5: c2:8c:29:20:a2:67:97:88:02:27:25:7b:73:72:c3: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:2A:DA:D2:61:D7:0B:AD:5E:42:A8:FC:1B:2E:05:53:68:A7:70 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a2:9a:b8:37:ee:d7:85:55:7a:82:f6:f9:19:d0:36:28:dd: 3a:d4:a3:e4:06:e9:68:a4:4e:6e:36:44:20:df:ec:c6:2e:c2: db:5b:66:c4:22:bd:58:c1:1d:39:75:9c:71:76:33:14:c4:ef: f5:5d:ae:24:6b:0a:3f:6a:e4:d3:5b:e9:75:2b:98:fe:13:2e: 09:87:23:cb:22:1c:cb:62:85:c4:b0:dd:c5:00:87:a9:ea:c3: 65:d3:dc:bc:04:f9:51:be:c2:77:a8:fc:cc:8b:88:db:16:52: a7:ec:8b:7f:99:a0:6a:37:81:c8:3c:d4:82:42:92:6e:f7:d7: 75:cd:f4:73:ca:3b:9a:0e:38:1a:cf:fa:83:8d:58:ae:10:45: b2:3b:a3:35:52:10:1e:ef:95:cd:b2:c5:b1:2d:af:ba:ed:4a: e1:14:8c:ad:ef:8e:95:02:ac:65:b4:6a:30:df:69:55:65:c4: ff:3d:58:e7:27:0f:4e:aa:d7:af:09:3a:00:d0:37:b0:75:cb: 6a:71:42:7b:ec:ea:bc:d8:a8:0e:36:8a:15:a1:cd:47:77:8a: de:14:0e:e3:ae:5d:cb:c5:8a:72:a8:47:9e:6f:4d:30:ae:ed: 4e:b1:51:8a:95:07:77:47:6e:b5:2c:bd:9d:03:8a:bf:6c:6f: 08:38:c0:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwODIzMDQwMzIzWhcNMjUwODMwMDQwMzIzWjAYMRYwFAYD VQQDEw02OGE5M2Q4Yy00YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XrkBPA96NYz3KOk4xn9t3KT5lgcECQk61EnOCLc+h4Ej1Q7Qwths5k9DpFp aefEN5bKPNm+bcZ3rs7TIfAOf7wc3TmOSrdqr4OM1VbqjKrj3SlSUyWd8B2iCiug JeRXly5GjjlbG+IkSn44g/gg9yvDDt+vC0jekR9bGuGLFG07g7AAwxTselTLUQcc K9fEFdEE7MF52J0QtDG5pdYMzLd0Tghp5gcplJ7DeHN60ntmlO4vhAhDaLYT/2+x Dw8zj0/yc6ttGRVcB0J8pqIuFpb2fS/JCfkPHQfy0AA0T+QWZbs180DIixH61zmw l/XCjCkgomeXiAInJXtzcsMh3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrSKtrS YdcLrV5CqPwbLgVTaKdwMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfopq4N+7XhVV6gvb5GdA2KN061KPkBulopE5uNkQg3+zGLsLbW2bE Ir1YwR05dZxxdjMUxO/1Xa4kawo/auTTW+l1K5j+Ey4JhyPLIhzLYoXEsN3FAIep 6sNl09y8BPlRvsJ3qPzMi4jbFlKn7It/maBqN4HIPNSCQpJu99d1zfRzyjuaDjga z/qDjViuEEWyO6M1UhAe75XNssWxLa+67UrhFIyt746VAqxltGow32lVZcT/PVjn Jw9OqtevCToA0DewdctqcUJ77Oq82KgONooVoc1Hd4reFA7jrl3LxYpyqEeeb00w ru1OsVGKlQd3R261LL2dA4q/bG8IOMCB -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:06 2025 by rpki-client