$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: A2jU2FCpK70EnGhaTC6NnsCv+UmsCFslDixJxQpBPOE= Subject key identifier: 18:5C:AE:A9:C4:6B:C4:CA:56:87:D8:A0:C4:66:08:B3:8C:F1:2D:9D Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: AA Signing time: Sat 23 Aug 2025 06:21:22 +0000 Manifest this update: Sat 23 Aug 2025 06:21:22 +0000 Manifest next update: Sat 30 Aug 2025 06:21:22 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: hOCodK9OzGtzfUWVQ73HuvXG/jJRNDoK+adgEW6mP7U=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Aug 23 06:21:22 2025 GMT Not After : Aug 30 06:21:22 2025 GMT Subject: CN=68a95de2-28d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:95:20:ff:89:1b:50:c4:69:18:3f:68:84: 48:99:a2:02:f5:db:46:38:0a:e5:b4:69:b9:36:e0: 71:a9:52:43:fb:ac:c0:a2:d8:22:0d:23:13:8c:ef: 96:38:f6:9d:7a:4c:df:a0:4d:7e:cb:c2:72:34:4a: 20:b0:68:f9:57:62:9a:ce:87:c0:33:e6:d5:74:5f: b5:fa:b3:5a:ce:38:58:8a:4f:22:02:b0:4c:ef:30: 64:97:c8:6e:cf:79:b7:99:22:46:e0:4b:8b:0f:2f: bb:fd:3b:29:fc:8d:3c:39:c7:db:c8:3d:48:fd:91: a2:e5:9b:70:d1:6f:4a:29:b8:51:13:7d:03:99:b6: ec:f7:90:9d:a8:2d:f2:83:68:59:40:6f:50:44:75: 59:7d:11:53:49:2a:02:ed:d2:a7:1e:ac:8c:c3:b6: 8b:1a:c9:38:a6:e9:73:b0:33:ee:c7:01:10:04:31: c9:46:a2:46:6c:0f:0b:ec:0e:2d:17:86:b2:95:51: 76:a9:7b:37:ac:04:67:53:1c:84:af:c9:43:d5:18: 61:5e:ff:c4:76:ba:82:cf:7f:9c:95:f7:ad:30:37: e0:64:86:5d:55:60:88:cc:a5:04:31:3e:e0:4a:5f: f6:f9:bf:60:d4:42:fe:8e:47:7c:10:ea:23:07:cd: bb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:AE:A9:C4:6B:C4:CA:56:87:D8:A0:C4:66:08:B3:8C:F1:2D:9D X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:90:b5:7d:fc:29:32:7b:1d:b0:6b:8c:5e:21:75:45:41:c0: 96:e4:2f:2c:c0:22:93:39:9b:c9:b1:45:7b:05:2c:31:0f:b9: 42:d0:cb:62:83:d0:90:6b:68:7e:38:ee:f7:91:e2:b3:09:c0: 6e:51:f7:10:cb:94:c8:45:e2:d4:45:0b:a8:3a:f0:fc:39:46: 94:80:80:36:45:ad:7e:3e:9e:f2:b5:cf:f0:53:a8:7c:3a:cb: 6e:ee:8e:44:65:94:db:e1:d8:ee:4a:69:dc:a6:42:09:22:52: e7:9f:ed:58:b8:15:2f:09:17:06:35:26:ca:95:7c:7f:19:d2: 08:8b:30:4e:7d:dd:12:2e:8c:d7:d2:ac:7e:32:29:97:cb:c6: a5:f7:1e:a9:a2:e5:28:61:61:f4:e8:95:53:90:53:27:42:37: 89:59:fb:62:bf:3c:53:ff:f1:1c:a2:7a:1d:36:43:0f:83:11: ba:82:fe:db:61:78:38:3d:b4:ca:05:d8:50:57:36:5e:86:ee: c5:e5:8b:87:41:33:65:6f:f4:56:ad:13:d5:63:4d:e2:d5:28: 2e:82:96:ec:d3:4c:f0:57:b6:bc:d0:9a:86:c6:82:34:df:f0: 90:39:52:8d:c7:a9:5f:a0:87:1a:af:69:ed:37:66:f5:3a:61: 3c:5e:eb:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwODIzMDYyMTIyWhcNMjUwODMwMDYyMTIyWjAYMRYwFAYD VQQDEw02OGE5NWRlMi0yOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qWVIP+JG1DEaRg/aIRImaIC9dtGOArltGm5NuBxqVJD+6zAotgiDSMTjO+W OPadekzfoE1+y8JyNEogsGj5V2KazofAM+bVdF+1+rNazjhYik8iArBM7zBkl8hu z3m3mSJG4EuLDy+7/Tsp/I08OcfbyD1I/ZGi5Ztw0W9KKbhRE30Dmbbs95CdqC3y g2hZQG9QRHVZfRFTSSoC7dKnHqyMw7aLGsk4pulzsDPuxwEQBDHJRqJGbA8L7A4t F4aylVF2qXs3rARnUxyEr8lD1RhhXv/EdrqCz3+clfetMDfgZIZdVWCIzKUEMT7g Sl/2+b9g1EL+jkd8EOojB827kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhcrqnE a8TKVofYoMRmCLOM8S2dMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6kLV9/Ckyex2wa4xeIXVFQcCW5C8swCKTOZvJsUV7BSwxD7lC0Mti g9CQa2h+OO73keKzCcBuUfcQy5TIReLURQuoOvD8OUaUgIA2Ra1+Pp7ytc/wU6h8 Ostu7o5EZZTb4djuSmncpkIJIlLnn+1YuBUvCRcGNSbKlXx/GdIIizBOfd0SLozX 0qx+MimXy8al9x6pouUoYWH06JVTkFMnQjeJWftivzxT//EconodNkMPgxG6gv7b YXg4PbTKBdhQVzZehu7F5YuHQTNlb/RWrRPVY03i1Sgugpbs00zwV7a80JqGxoI0 3/CQOVKNx6lfoIcar2ntN2b1OmE8XutK -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:48 2025 by rpki-client