$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft File: nGj0A_AkAXvdJtbdDSAnpAK58oE.mft (raw, json) Hash identifier: KJAwQSUurP1I+dSCunmBe1XZWCtwyssfJoxjADK7pwU= Subject key identifier: 2D:73:08:9C:37:AF:40:0C:77:68:1B:4D:F2:84:0B:14:C2:40:AF:1C Authority key identifier: 9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 Certificate issuer: /CN=A91B190F/serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft Manifest number: 90 Signing time: Thu 03 Jul 2025 06:38:33 +0000 Manifest this update: Thu 03 Jul 2025 06:38:32 +0000 Manifest next update: Thu 10 Jul 2025 06:38:32 +0000 Files and hashes: 1: nGj0A_AkAXvdJtbdDSAnpAK58oE.crl (hash: TWye1L6l1rPGaweJKgafLTR7vDWcM/KNpYph74TzLu8=) 2: 262A51D67BED11EF9BAF751AC4F9AE02.roa (hash: Se4X5BCi6S9clBdJBFWLU+YP4g35YhqfcEGf60R+i8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=9C68F403F024017BDD26D6DD0D2027A402B9F281 Validity Not Before: Jul 3 06:38:32 2025 GMT Not After : Jul 10 06:38:32 2025 GMT Subject: CN=68662568-3a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:12:28:75:d4:e3:fd:3a:e3:c7:a7:f7:47: 3e:1e:f4:ab:6e:c2:24:31:b1:61:c6:72:8c:a2:7b: 7d:35:20:89:60:d1:65:4a:1d:e3:85:21:1a:51:6d: 3e:20:28:60:f4:0a:90:ba:7d:3c:ef:30:bb:cc:a3: 06:1f:2b:41:a0:60:64:e3:ef:4d:28:ff:21:00:05: 08:b2:14:13:0f:2b:92:a1:36:4c:38:0f:04:9f:ce: 6a:e2:95:76:fa:ed:a7:46:97:3b:3c:e1:b1:2a:71: ec:d8:8d:ea:83:21:f1:17:f9:27:3f:45:9d:44:23: 8b:d7:1a:19:28:73:d7:52:52:fc:d5:07:53:3a:6b: 72:9c:98:aa:2c:7f:7a:5b:7e:6e:ef:8c:bf:23:4e: b4:98:92:8f:67:b2:57:cd:7b:b7:e0:4e:89:01:e1: 23:8f:19:6b:37:57:d4:fd:bc:79:48:7a:bd:5a:6b: 9b:6c:4d:15:52:28:5f:c8:68:e8:f5:c1:d8:9e:ac: 3f:f2:d4:da:a6:b0:82:e8:f9:5c:d6:e0:cf:5e:cc: 38:31:ed:b5:de:25:f4:98:f7:22:e6:f5:b1:f7:bf: bd:f1:45:52:c1:22:8b:f0:b2:ec:d3:58:e2:59:a9: e3:ec:09:bc:12:d9:0c:3f:5a:78:87:07:37:be:cb: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:08:9C:37:AF:40:0C:77:68:1B:4D:F2:84:0B:14:C2:40:AF:1C X509v3 Authority Key Identifier: keyid:9C:68:F4:03:F0:24:01:7B:DD:26:D6:DD:0D:20:27:A4:02:B9:F2:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0A_AkAXvdJtbdDSAnpAK58oE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/BFA96FAA7BEC11EF999FBC19C4F9AE02/nGj0A_AkAXvdJtbdDSAnpAK58oE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ac:37:fc:97:bf:07:74:2e:1b:18:54:5a:90:b1:51:3d:23: 77:32:6e:5a:4b:97:c4:2d:53:b1:f3:b3:7f:c6:9e:bc:fc:55: 91:8f:94:30:2e:5e:87:42:ad:66:c3:24:85:1c:c1:10:ba:73: 82:d1:a8:d3:f7:82:94:5a:cf:34:a5:48:de:9e:58:2f:c2:e2: 54:84:0c:37:bd:99:b7:ad:c6:46:9f:2b:ae:8e:49:0e:9e:43: 48:3e:75:67:a0:ca:52:73:0b:42:29:36:73:33:20:af:e0:56: 5f:c2:60:8b:0c:95:10:54:89:cf:f7:6d:57:79:61:cc:6e:55: 35:fd:f4:3c:e0:07:97:a7:41:f5:31:b5:a7:e9:d1:0b:d7:90: 08:74:80:ad:00:12:a5:77:24:06:5a:e2:26:9f:d3:47:80:75: 3b:f4:9b:a7:17:19:31:3c:dd:7e:01:1b:35:ee:14:e7:35:9b: e3:6b:ab:fb:e1:9d:e3:0a:c9:a7:04:bd:4b:da:2a:74:d4:4b: 56:dd:9e:b1:fb:cf:83:36:7a:a0:2b:ef:0b:b2:ee:37:11:be: 24:3c:96:8c:ae:ab:3a:e6:29:bd:e3:27:6a:bc:71:bf:f1:cd: fe:15:00:63:ad:23:b8:b8:2e:ea:1f:ca:4a:8f:bb:b2:c0:fc: 27:50:26:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDlDNjhGNDAzRjAyNDAxN0JERDI2RDZERDBEMjAyN0E0 MDJCOUYyODEwHhcNMjUwNzAzMDYzODMyWhcNMjUwNzEwMDYzODMyWjAYMRYwFAYD VQQDEw02ODY2MjU2OC0zYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JISKHXU4/0648en90c+HvSrbsIkMbFhxnKMont9NSCJYNFlSh3jhSEaUW0+ IChg9AqQun087zC7zKMGHytBoGBk4+9NKP8hAAUIshQTDyuSoTZMOA8En85q4pV2 +u2nRpc7POGxKnHs2I3qgyHxF/knP0WdRCOL1xoZKHPXUlL81QdTOmtynJiqLH96 W35u74y/I060mJKPZ7JXzXu34E6JAeEjjxlrN1fU/bx5SHq9WmubbE0VUihfyGjo 9cHYnqw/8tTaprCC6Plc1uDPXsw4Me213iX0mPci5vWx97+98UVSwSKL8LLs01ji Wanj7Am8EtkMP1p4hwc3vstqEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1zCJw3 r0AMd2gbTfKECxTCQK8cMB8GA1UdIwQYMBaAFJxo9APwJAF73SbW3Q0gJ6QCufKB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9CRkE5NkZBQTdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FYdmRKdGJkRFNBbnBBSzU4 b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25HajBBX0FrQVh2ZEp0YmREU0FucEFLNThvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9CRkE5NkZBQTdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9uR2owQV9Ba0FY dmRKdGJkRFNBbnBBSzU4b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSrDf8l78HdC4bGFRakLFRPSN3Mm5aS5fELVOx87N/xp68/FWRj5Qw Ll6HQq1mwySFHMEQunOC0ajT94KUWs80pUjenlgvwuJUhAw3vZm3rcZGnyuujkkO nkNIPnVnoMpScwtCKTZzMyCv4FZfwmCLDJUQVInP921XeWHMblU1/fQ84AeXp0H1 MbWn6dEL15AIdICtABKldyQGWuImn9NHgHU79JunFxkxPN1+ARs17hTnNZvja6v7 4Z3jCsmnBL1L2ip01EtW3Z6x+8+DNnqgK+8Lsu43Eb4kPJaMrqs65im94ydqvHG/ 8c3+FQBjrSO4uC7qH8pKj7uywPwnUCaz -----END CERTIFICATE-----Generated at Thu Jul 3 20:07:12 2025 by rpki-client