$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: Emv/nYUbzM/pMlAXk660Nx/gE8UT2rCNgk8OEW6C/bY= Subject key identifier: 04:A5:6F:63:0A:6D:37:D6:30:5B:A4:54:27:6E:EB:2B:CF:8B:BF:9D Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03D8 Signing time: Sat 23 Aug 2025 00:50:30 +0000 Manifest this update: Sat 23 Aug 2025 00:50:29 +0000 Manifest next update: Sat 30 Aug 2025 00:50:29 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: 18E0ryZ3FPTv3AOe5TlSAQjZi66rbTa5ZxHkxfVAnhU=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Aug 23 00:50:29 2025 GMT Not After : Aug 30 00:50:29 2025 GMT Subject: CN=68a91055-216b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:06:b3:b8:8c:96:ce:5e:57:95:34:f2:e8: f6:46:cb:01:f5:ec:c7:2e:62:56:51:8d:de:37:e4: b7:7f:92:81:d2:cd:e0:d1:17:ea:b2:8e:37:5d:76: 41:70:8b:8a:2c:14:d2:a4:e9:5b:dc:3b:95:e8:57: 2f:06:ed:e9:b9:81:f4:ac:fb:50:5f:fe:9e:94:b1: c5:22:14:92:45:46:be:dd:06:fc:41:9f:32:1c:6c: 15:05:ae:98:e4:f0:de:c0:dc:52:78:28:31:c3:52: 44:e9:99:4a:4f:4f:9b:c0:53:06:82:51:f2:01:67: c1:d6:2c:fe:32:db:f2:a6:13:db:02:4c:aa:e0:e0: 84:a4:77:df:ba:59:3d:84:ef:09:75:4a:41:3c:44: 7a:85:31:76:ad:7e:71:9b:46:68:b4:d8:8e:18:ab: 67:92:a7:b3:82:31:5c:b1:fa:ee:ac:2a:fa:65:6b: 44:5b:9d:f4:f7:92:c0:1d:07:c9:8a:8c:c0:0d:ff: 32:73:98:1d:db:32:aa:82:3e:f5:75:36:7a:6b:0c: 70:7e:34:53:12:92:59:96:e8:5c:eb:92:d2:1f:a6: 79:3b:5d:cd:bd:d2:59:bd:0d:e7:bf:77:c4:df:59: 4a:d1:6c:82:cd:0a:76:ed:0e:07:aa:cb:0a:2b:56: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:6F:63:0A:6D:37:D6:30:5B:A4:54:27:6E:EB:2B:CF:8B:BF:9D X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4b:fb:17:8c:14:ff:3b:e6:c7:49:e9:8b:32:39:9f:29:70: af:5f:4c:b3:2c:ae:81:0a:68:ac:fb:58:ae:7f:f8:48:df:2a: 09:66:81:a5:5e:c5:38:db:8f:c2:56:df:64:22:56:bc:12:a1: 6e:cf:b7:6a:58:cd:6b:79:ba:81:f3:ce:4d:28:9d:59:e8:18: 92:7c:d4:26:6f:bc:67:12:4f:e8:4b:1d:59:8a:58:67:f6:9e: 5e:5a:ab:91:99:b9:78:95:58:28:04:14:fa:b0:27:9c:40:65: bb:1e:87:36:0c:02:fb:ab:f3:ee:88:39:86:bd:7e:ef:af:00: 82:9f:8b:66:a1:70:81:fa:44:cd:e9:b5:c4:9c:81:5b:3a:23: 15:67:9b:f5:d1:2f:e5:1e:7e:fc:db:1c:af:ca:ea:f0:89:b5: 4b:b6:bf:82:09:11:ba:14:13:4e:e0:35:8d:f4:e7:db:50:29: 84:f3:5b:06:17:a9:fc:18:e5:a8:b8:67:b6:3c:47:4b:02:6b: e5:35:0e:a9:77:52:4d:3f:64:23:50:62:aa:97:75:10:c3:73: fb:eb:88:90:86:a4:8e:5c:52:83:b7:46:06:f4:7d:3d:d7:6f: bd:01:4d:2a:36:1b:df:d3:7d:9a:fa:8a:99:ac:b9:a4:19:66: 74:64:77:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwODIzMDA1MDI5WhcNMjUwODMwMDA1MDI5WjAYMRYwFAYD VQQDEw02OGE5MTA1NS0yMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1moGs7iMls5eV5U08uj2RssB9ezHLmJWUY3eN+S3f5KB0s3g0Rfqso43XXZB cIuKLBTSpOlb3DuV6FcvBu3puYH0rPtQX/6elLHFIhSSRUa+3Qb8QZ8yHGwVBa6Y 5PDewNxSeCgxw1JE6ZlKT0+bwFMGglHyAWfB1iz+MtvyphPbAkyq4OCEpHffulk9 hO8JdUpBPER6hTF2rX5xm0ZotNiOGKtnkqezgjFcsfrurCr6ZWtEW53095LAHQfJ iozADf8yc5gd2zKqgj71dTZ6awxwfjRTEpJZluhc65LSH6Z5O13NvdJZvQ3nv3fE 31lK0WyCzQp27Q4HqssKK1YDYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASlb2MK bTfWMFukVCdu6yvPi7+dMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1S/sXjBT/O+bHSemLMjmfKXCvX0yzLK6BCmis+1iuf/hI3yoJZoGl XsU424/CVt9kIla8EqFuz7dqWM1rebqB885NKJ1Z6BiSfNQmb7xnEk/oSx1Zilhn 9p5eWquRmbl4lVgoBBT6sCecQGW7Hoc2DAL7q/PuiDmGvX7vrwCCn4tmoXCB+kTN 6bXEnIFbOiMVZ5v10S/lHn782xyvyurwibVLtr+CCRG6FBNO4DWN9OfbUCmE81sG F6n8GOWouGe2PEdLAmvlNQ6pd1JNP2QjUGKql3UQw3P764iQhqSOXFKDt0YG9H09 12+9AU0qNhvf032a+oqZrLmkGWZ0ZHcG -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:09 2025 by rpki-client