$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: W1Ncf/QGtqiVd9tBba92YL5TCF4yDXvjEvs6281ITgQ= Subject key identifier: A9:49:0C:17:7E:BD:86:12:88:86:AE:67:78:EA:F2:49:2F:3C:FE:E3 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 34D1 Signing time: Fri 22 Aug 2025 14:43:29 +0000 Manifest this update: Fri 22 Aug 2025 14:43:28 +0000 Manifest next update: Fri 29 Aug 2025 14:43:28 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: k4NeLEXHxRAm14+NQ43Zk012kGf88SbqvvmOVbjV/Zw=) 2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: sVPCrnH4ijuCZYxExAGbTpSF6uDYt6PkZ4Y0+gIXmKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Aug 22 14:43:28 2025 GMT Not After : Aug 29 14:43:28 2025 GMT Subject: CN=68a88211-badd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:cf:20:36:38:1d:c4:5d:db:92:a5:3e:85: c6:56:d1:e5:fa:ab:e0:39:34:b5:0c:51:a8:08:fc: 77:25:f0:70:65:38:fb:6b:da:38:39:2a:32:73:1a: 66:bd:01:c4:90:bf:97:89:96:01:72:09:1e:90:3a: 11:89:0b:7a:62:60:8a:75:0b:de:4c:0b:f8:e2:07: 29:43:37:da:de:19:aa:5b:fb:f6:84:b8:a8:f5:7f: ec:6f:ea:d1:70:fb:8e:d7:c5:c8:8b:d7:a4:97:fe: a0:30:26:73:93:ca:6e:4c:bb:42:9f:f7:e1:12:d2: 68:3a:9c:7a:6f:0b:a9:92:0b:95:27:0b:ec:fc:aa: 6a:d7:08:2b:16:97:c7:6a:94:4f:c3:f3:ee:ca:b0: dc:82:98:b7:0a:e4:c4:64:49:ec:3b:d3:89:83:04: 67:2b:5e:ee:2a:04:d6:01:69:1f:79:a0:60:ff:28: ef:b1:2f:2b:7d:f7:44:15:82:a4:2b:6d:c5:a0:63: 7f:0c:0f:8d:e2:9c:5e:37:61:46:6f:5a:27:3f:92: 3f:6d:a5:8e:ca:00:51:55:02:ee:30:eb:c3:b8:f9: 3c:8e:6a:66:7e:47:73:10:5a:62:85:f2:de:fb:a5: 35:52:7e:00:92:5f:83:3c:d7:f1:c5:ef:14:e5:13: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:49:0C:17:7E:BD:86:12:88:86:AE:67:78:EA:F2:49:2F:3C:FE:E3 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6a:27:db:0e:10:0c:50:7b:1e:d9:74:f9:a5:0a:82:8d:74: 37:95:76:b8:b7:eb:4a:e0:b0:78:91:e4:48:e4:a6:43:d0:96: 4b:fc:71:8e:ce:a5:6f:67:96:6c:7a:9f:18:3b:fd:08:ed:c2: 40:ab:dd:9c:ab:a3:66:e1:d7:82:65:95:d5:85:f7:1d:8a:a7: 1a:63:e5:ea:ae:e9:4e:b2:d4:c3:8d:d8:9f:18:30:25:81:23: 44:59:83:d1:df:b3:2e:03:9d:95:c7:2b:4b:73:d5:d7:60:0d: a3:85:33:5c:3a:f3:15:b8:30:89:76:d5:db:ca:1f:d5:d8:49: 8d:ce:f2:54:25:a5:c4:14:8c:31:c7:e3:ba:15:cd:d2:95:51: ba:9e:64:3d:8f:55:5d:06:a3:b5:e3:e9:74:9d:17:49:4a:a5: 1a:64:50:f0:b0:4c:1f:54:b0:dc:7d:47:18:d4:92:d0:ba:57: 77:40:db:74:19:3a:1e:fb:79:58:22:4b:bd:fe:16:d9:36:da: c9:80:ef:f7:48:41:fa:bc:94:c8:32:94:1f:5a:9f:ab:e0:d2: 53:77:6f:8f:7c:b9:08:99:53:0a:90:b2:e3:57:a8:75:ca:d6: 60:74:2f:cc:7f:3d:aa:6f:d2:f7:1c:ca:8b:19:96:e7:9f:12: c1:fc:9c:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUwODIyMTQ0MzI4WhcNMjUwODI5MTQ0MzI4WjAYMRYwFAYD VQQDEw02OGE4ODIxMS1iYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt//PIDY4HcRd25KlPoXGVtHl+qvgOTS1DFGoCPx3JfBwZTj7a9o4OSoycxpm vQHEkL+XiZYBcgkekDoRiQt6YmCKdQveTAv44gcpQzfa3hmqW/v2hLio9X/sb+rR cPuO18XIi9ekl/6gMCZzk8puTLtCn/fhEtJoOpx6bwupkguVJwvs/Kpq1wgrFpfH apRPw/PuyrDcgpi3CuTEZEnsO9OJgwRnK17uKgTWAWkfeaBg/yjvsS8rffdEFYKk K23FoGN/DA+N4pxeN2FGb1onP5I/baWOygBRVQLuMOvDuPk8jmpmfkdzEFpihfLe +6U1Un4Akl+DPNfxxe8U5RNG0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlJDBd+ vYYSiIauZ3jq8kkvPP7jMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0aifbDhAMUHse2XT5pQqCjXQ3lXa4t+tK4LB4keRI5KZD0JZL/HGO zqVvZ5Zsep8YO/0I7cJAq92cq6Nm4deCZZXVhfcdiqcaY+XqrulOstTDjdifGDAl gSNEWYPR37MuA52VxytLc9XXYA2jhTNcOvMVuDCJdtXbyh/V2EmNzvJUJaXEFIwx x+O6Fc3SlVG6nmQ9j1VdBqO14+l0nRdJSqUaZFDwsEwfVLDcfUcY1JLQuld3QNt0 GToe+3lYIku9/hbZNtrJgO/3SEH6vJTIMpQfWp+r4NJTd2+PfLkImVMKkLLjV6h1 ytZgdC/Mfz2qb9L3HMqLGZbnnxLB/JzT -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:00 2025 by rpki-client