$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft File: nlE6zE17kAFKhn-1KviSKeALpKw.mft (raw, json) Hash identifier: a27MLSsIYhrIo7Ooc/tfTTAdKrOV6piiraiI9lQ3oJ4= Subject key identifier: E2:6E:45:CE:84:F1:E9:00:04:76:46:92:90:C3:95:1E:81:0B:03:23 Authority key identifier: 9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC Certificate issuer: /CN=A91B2472/serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft Manifest number: CD Signing time: Sat 23 Aug 2025 05:52:48 +0000 Manifest this update: Sat 23 Aug 2025 05:52:47 +0000 Manifest next update: Sat 30 Aug 2025 05:52:47 +0000 Files and hashes: 1: nlE6zE17kAFKhn-1KviSKeALpKw.crl (hash: 6aAFGBNjSO8YKrOzLiY5UosBKSiUVQNyLjpxQZFq/fc=) 2: 1B4BDA5C48B011EF9D34415EC4F9AE02.roa (hash: /fW0UzdpOpiVi/4bzpgP5X5TzlzFOgXdGZfbyGjzbdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2472, serialNumber=9E513ACC4D7B90014A867FB52AF89229E00BA4AC Validity Not Before: Aug 23 05:52:47 2025 GMT Not After : Aug 30 05:52:47 2025 GMT Subject: CN=68a95730-fa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:92:28:fe:bc:e8:2e:f5:e7:be:55:4f:a0: 1b:c4:4f:6b:91:07:81:f8:9e:6d:ca:0c:17:8c:1c: e9:aa:3f:84:76:ef:4f:ad:52:46:f7:33:bf:fb:46: 34:e8:3e:0b:e7:36:bf:9a:02:0e:44:6c:4f:a8:d1: 74:80:88:b4:20:e7:12:42:e3:e8:e4:b6:a7:87:59: 46:60:cd:9f:c2:96:ee:d6:ab:96:96:31:0a:59:6e: a1:7d:79:5e:56:f9:15:cc:aa:5c:e3:3c:5e:88:26: 18:c7:2d:46:70:7c:99:f6:89:47:c0:58:81:3b:85: 51:a7:77:ca:80:49:bc:b3:a9:bd:af:b6:52:69:77: 47:e8:1c:fd:f1:2c:d7:22:4c:eb:3c:d9:ec:82:d6: 1d:67:c5:70:46:46:61:31:58:56:c3:1b:1a:f7:9f: 96:75:a4:12:2d:70:a6:fe:2a:6c:36:01:6c:2d:c2: d3:30:c9:50:7a:80:15:a0:d0:ac:ea:1f:f3:ac:0a: 81:69:b1:ff:0e:0f:21:a4:92:5f:08:85:7d:b5:79: 07:17:05:0a:91:05:6f:a3:62:34:35:47:fa:e7:52: 08:72:37:1c:8a:3e:c5:a5:84:b1:90:0d:b2:38:a7: 52:fb:7e:44:45:ee:9e:6c:60:7b:d4:d4:8f:63:3b: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6E:45:CE:84:F1:E9:00:04:76:46:92:90:C3:95:1E:81:0B:03:23 X509v3 Authority Key Identifier: keyid:9E:51:3A:CC:4D:7B:90:01:4A:86:7F:B5:2A:F8:92:29:E0:0B:A4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlE6zE17kAFKhn-1KviSKeALpKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2472/E62B735A481911EFB8BE4534C4F9AE02/nlE6zE17kAFKhn-1KviSKeALpKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:97:58:58:97:a9:53:f7:c5:95:e7:eb:dc:e1:4e:08:17:dd: e4:b4:4b:db:e4:12:76:b2:c8:f2:06:04:28:be:c2:ba:08:11: 65:9e:4c:23:ad:de:ce:21:10:13:3f:86:81:b8:66:b4:2c:3e: 03:e1:e1:30:9a:95:2a:5c:28:61:d6:50:25:61:00:12:c6:17: c1:90:d5:82:c3:25:56:39:1f:d0:71:c2:98:73:5b:5d:41:17: f0:2e:2c:f8:b2:22:d9:08:c0:93:d1:cb:93:05:82:4f:40:d7: d2:a1:df:75:a9:c8:7c:26:9b:89:c7:e5:d2:49:11:10:67:10: e8:e7:09:af:36:83:82:fb:f0:2f:07:a2:96:f8:49:79:6f:25: 82:b7:04:53:14:f6:31:b7:4b:bd:50:b4:b2:e6:d9:66:1d:41: c0:fa:3c:b5:a7:7b:ca:ef:28:ff:60:ff:bb:66:e5:e6:8e:20: 53:3d:ea:a2:4f:b7:0e:46:71:70:88:2a:0a:55:66:ff:7d:c0: dd:05:ec:af:f0:cd:70:ff:6d:9b:2d:a3:9b:5c:69:03:46:67: 5d:59:0d:61:23:24:48:b6:ff:16:b5:77:16:24:5b:54:2a:52: ee:5f:a6:f0:bf:a8:ab:ef:ed:1a:a5:a5:4b:f3:93:d8:66:f3: 98:78:e2:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0NzIxMTAvBgNVBAUTKDlFNTEzQUNDNEQ3QjkwMDE0QTg2N0ZCNTJBRjg5MjI5 RTAwQkE0QUMwHhcNMjUwODIzMDU1MjQ3WhcNMjUwODMwMDU1MjQ3WjAYMRYwFAYD VQQDEw02OGE5NTczMC1mYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KCSKP686C71575VT6AbxE9rkQeB+J5tygwXjBzpqj+Edu9PrVJG9zO/+0Y0 6D4L5za/mgIORGxPqNF0gIi0IOcSQuPo5Lanh1lGYM2fwpbu1quWljEKWW6hfXle VvkVzKpc4zxeiCYYxy1GcHyZ9olHwFiBO4VRp3fKgEm8s6m9r7ZSaXdH6Bz98SzX IkzrPNnsgtYdZ8VwRkZhMVhWwxsa95+WdaQSLXCm/ipsNgFsLcLTMMlQeoAVoNCs 6h/zrAqBabH/Dg8hpJJfCIV9tXkHFwUKkQVvo2I0NUf651IIcjccij7FpYSxkA2y OKdS+35ERe6ebGB71NSPYzuNAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJuRc6E 8ekABHZGkpDDlR6BCwMjMB8GA1UdIwQYMBaAFJ5ROsxNe5ABSoZ/tSr4kingC6Ss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ3Mi9FNjJCNzM1QTQ4 MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tBRktobi0xS3ZpU0tlQUxw S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sRTZ6RTE3a0FGS2huLTFLdmlTS2VBTHBLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ3Mi9FNjJCNzM1QTQ4MTkxMUVGQjhCRTQ1MzRDNEY5QUUwMi9ubEU2ekUxN2tB Rktobi0xS3ZpU0tlQUxwS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGl1hYl6lT98WV5+vc4U4IF93ktEvb5BJ2ssjyBgQovsK6CBFlnkwj rd7OIRATP4aBuGa0LD4D4eEwmpUqXChh1lAlYQASxhfBkNWCwyVWOR/QccKYc1td QRfwLiz4siLZCMCT0cuTBYJPQNfSod91qch8JpuJx+XSSREQZxDo5wmvNoOC+/Av B6KW+El5byWCtwRTFPYxt0u9ULSy5tlmHUHA+jy1p3vK7yj/YP+7ZuXmjiBTPeqi T7cORnFwiCoKVWb/fcDdBeyv8M1w/22bLaObXGkDRmddWQ1hIyRItv8WtXcWJFtU KlLuX6bwv6ir7+0apaVL85PYZvOYeOLf -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:25 2025 by rpki-client