$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft File: nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft (raw, json) Hash identifier: aAPo9xBSn42pm6Y3h4UOkGOTrB/bD+5mxSdFFWGpswg= Subject key identifier: BD:BF:F9:7C:08:49:C7:25:C5:69:1A:4C:30:99:81:4A:F2:82:D4:98 Authority key identifier: 9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 Certificate issuer: /CN=A91AE8D7/serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:24:05 +0000 Manifest this update: Sat 23 Aug 2025 07:24:05 +0000 Manifest next update: Sat 30 Aug 2025 07:24:05 +0000 Files and hashes: 1: nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl (hash: b1Am7JR834GslfYc/DcQkgEa8/qtJZyOLN5B1nv8q0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=9E71FB71B6700C4045A5C340C18F130F0860AA39 Validity Not Before: Aug 23 07:24:05 2025 GMT Not After : Aug 30 07:24:05 2025 GMT Subject: CN=68a96c95-13ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:70:db:c4:b5:d9:86:8f:70:47:4a:37:94: 32:fa:90:58:db:af:02:d3:1b:d1:85:45:cf:ae:37: 09:15:e8:99:fe:ff:bd:ad:db:2a:db:7e:0d:3a:7d: f4:8c:b3:e5:d1:18:b5:88:42:53:48:0a:bb:45:f7: 48:5d:34:07:cb:19:ba:21:7f:ab:ea:30:2a:18:be: 0d:c2:cf:61:ba:8a:dc:2f:e8:e9:b6:95:d6:25:bf: 9c:0f:02:21:ce:c2:04:37:49:0b:ac:78:20:c8:d3: 40:94:18:60:80:ec:ce:7b:d2:c4:67:a1:0c:33:db: 74:f3:6f:a4:46:f3:c8:18:81:a4:e0:88:9f:aa:b9: 6d:61:58:5c:40:b6:92:22:af:99:61:42:1d:53:e2: c6:41:5b:cf:f5:c9:d7:bb:bf:61:d1:82:f1:b6:48: 6c:23:03:e1:04:4b:cc:ac:67:8e:86:66:e9:0b:22: f6:b7:bd:f1:ef:24:9b:1e:53:5a:a0:9f:5f:4a:82: 7d:3c:68:51:ea:19:74:4a:80:3f:60:70:77:0a:c2: b2:37:5a:58:f4:81:fb:fb:5c:2b:3b:73:fb:80:63: 76:7a:2e:15:83:2a:f4:48:56:8e:8c:9f:0e:78:fa: 45:e5:a1:fe:15:7f:95:a9:da:54:d9:30:0c:7d:af: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BF:F9:7C:08:49:C7:25:C5:69:1A:4C:30:99:81:4A:F2:82:D4:98 X509v3 Authority Key Identifier: keyid:9E:71:FB:71:B6:70:0C:40:45:A5:C3:40:C1:8F:13:0F:08:60:AA:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nnH7cbZwDEBFpcNAwY8TDwhgqjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/54666B3CF93F11EFB7EAB425C4F9AE02/nnH7cbZwDEBFpcNAwY8TDwhgqjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:7d:29:44:85:c2:e2:cd:e0:d5:2f:00:e1:1e:e1:4c:40:14: cc:1a:04:39:ad:11:35:d4:c0:63:43:58:14:9c:21:e9:ae:f7: 7d:a6:5d:33:69:73:6c:5c:eb:57:12:c2:97:c1:81:36:04:02: 1d:b6:94:d5:0c:92:31:95:80:75:89:ee:57:4b:03:47:c6:5e: 04:ec:ba:5b:52:24:49:4d:87:b5:24:e7:4b:cf:af:f6:f3:7b: 72:6c:45:6b:e3:a6:97:08:a5:20:98:b2:88:61:88:ea:65:2c: 50:a7:2a:cf:3c:e4:bc:56:82:5e:15:d9:a1:57:21:bf:c5:3b: a0:fd:ef:70:a6:54:f8:c6:27:38:d1:94:89:4a:6b:ad:3b:ec: bd:be:76:b7:43:05:74:51:12:6e:87:ff:87:06:20:4a:18:58: 27:a8:c8:70:2d:43:50:27:c2:b3:ac:bf:9b:2c:8c:29:82:be: 46:69:54:15:b8:b3:43:99:48:db:c6:d5:5c:4b:a1:55:c1:1b: ac:75:8f:18:9c:dc:15:28:49:7e:df:b9:ce:3c:9c:ab:28:d9: 6d:3b:f9:ef:55:8e:24:1a:f6:96:26:43:45:d5:3e:94:f5:af: 78:6e:0b:b5:3b:1d:3a:80:09:3a:be:5f:bb:48:54:6a:2c:f4: 0f:bd:f8:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoOUU3MUZCNzFCNjcwMEM0MDQ1QTVDMzQwQzE4RjEzMEYw ODYwQUEzOTAeFw0yNTA4MjMwNzI0MDVaFw0yNTA4MzAwNzI0MDVaMBgxFjAUBgNV BAMTDTY4YTk2Yzk1LTEzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5FXDbxLXZho9wR0o3lDL6kFjbrwLTG9GFRc+uNwkV6Jn+/72t2yrbfg06ffSM s+XRGLWIQlNICrtF90hdNAfLGbohf6vqMCoYvg3Cz2G6itwv6Om2ldYlv5wPAiHO wgQ3SQuseCDI00CUGGCA7M570sRnoQwz23Tzb6RG88gYgaTgiJ+quW1hWFxAtpIi r5lhQh1T4sZBW8/1yde7v2HRgvG2SGwjA+EES8ysZ46GZukLIva3vfHvJJseU1qg n19Kgn08aFHqGXRKgD9gcHcKwrI3Wlj0gfv7XCs7c/uAY3Z6LhWDKvRIVo6Mnw54 +kXlof4Vf5Wp2lTZMAx9r8NhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvb/5fAhJ xyXFaRpMMJmBSvKC1JgwHwYDVR0jBBgwFoAUnnH7cbZwDEBFpcNAwY8TDwhgqjkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzU0NjY2QjNDRjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVCRnBjTkF3WThURHdoZ3Fq ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm5IN2NiWndERUJGcGNOQXdZOFREd2hncWprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzU0NjY2QjNDRjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL25uSDdjYlp3REVC RnBjTkF3WThURHdoZ3Fqay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAp9KUSFwuLN4NUvAOEe4UxAFMwaBDmtETXUwGNDWBScIemu932mXTNp c2xc61cSwpfBgTYEAh22lNUMkjGVgHWJ7ldLA0fGXgTsultSJElNh7Uk50vPr/bz e3JsRWvjppcIpSCYsohhiOplLFCnKs885LxWgl4V2aFXIb/FO6D973CmVPjGJzjR lIlKa6077L2+drdDBXRREm6H/4cGIEoYWCeoyHAtQ1AnwrOsv5ssjCmCvkZpVBW4 s0OZSNvG1VxLoVXBG6x1jxic3BUoSX7fuc48nKso2W07+e9VjiQa9pYmQ0XVPpT1 r3huC7U7HTqACTq+X7tIVGos9A+9+G8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:04 2025 by rpki-client