$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: V1+YBkMxiHDKCO7Tjoorhy9kIdLRYmOEzHudjkAMArM= Subject key identifier: 08:FB:58:17:2E:9F:C1:77:AB:3B:A0:02:B6:F9:2F:77:1D:9B:20:73 Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 0927 Signing time: Fri 22 Aug 2025 20:22:46 +0000 Manifest this update: Fri 22 Aug 2025 20:22:45 +0000 Manifest next update: Fri 29 Aug 2025 20:22:45 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: NJZnVfvAAFZfpd+MPU1kVkZNfp+wzc4G7Hs7rO42hCY=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: Dqc2A2nNp9iRWlHOyQUrLEGAECqLcbkzGYQ/tB1zbpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Aug 22 20:22:45 2025 GMT Not After : Aug 29 20:22:45 2025 GMT Subject: CN=68a8d195-b092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:d9:c6:81:80:5f:16:97:9c:14:14:5a:02: fb:13:96:43:67:e6:22:88:2e:0e:95:ea:99:ae:0e: 98:d8:db:85:91:59:8d:54:c5:c1:ed:1e:f5:be:0e: 78:78:a0:4d:cc:1f:42:33:30:fd:11:d9:e0:6b:2b: 92:ba:bb:61:48:61:a5:b9:9f:8a:a4:07:7c:32:72: c5:67:2b:76:aa:e6:45:b8:e1:92:72:a8:c0:95:3f: ee:01:99:1c:4e:a3:a9:5f:c3:ff:ba:0d:cb:fa:72: 00:f2:4d:12:a2:6c:c4:a4:b3:17:23:74:73:d7:e5: f6:4f:1e:fe:60:fd:ac:db:1e:a1:77:ae:a2:b4:19: ed:15:cf:26:bb:6b:07:57:e8:0f:42:d8:d2:cb:6e: 0d:29:ad:28:f7:75:50:36:20:67:05:6f:aa:13:52: f3:0d:29:af:56:9a:2c:66:3c:40:a2:c7:40:c7:90: c6:b9:80:b0:60:d7:42:db:b0:22:e1:c4:de:91:fb: 5f:25:7e:ad:e3:85:29:a9:12:ad:6b:fd:1b:f0:cb: 24:0f:fa:2e:ae:a9:77:b6:10:bd:e0:34:3a:56:42: 6f:cb:a3:d0:05:75:96:e2:bc:e0:ad:9f:ab:6a:b6: fb:37:1a:3e:4c:ff:e8:cb:b7:9b:da:f1:cb:ee:8c: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FB:58:17:2E:9F:C1:77:AB:3B:A0:02:B6:F9:2F:77:1D:9B:20:73 X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:70:b0:c8:b8:52:a9:52:08:fa:3b:dc:57:c0:a1:2d:f9:6b: 01:f0:64:ff:89:9e:f1:b2:0f:37:b7:04:20:f3:95:49:e5:e7: b6:6b:19:84:b9:1f:ec:40:3b:66:77:88:ed:10:ae:a3:a5:a6: 85:24:bf:23:3a:56:18:47:5f:e4:57:18:bf:58:61:93:9a:a9: f0:fd:03:45:c3:29:46:74:fc:48:3f:a0:19:ae:44:59:a1:6a: ba:a3:11:ec:ab:ea:58:e4:2b:8a:f5:a3:09:8a:6c:d9:8b:b5: 01:79:9a:88:2d:41:94:9c:ec:56:dc:1d:cf:b5:fb:08:ab:49: b8:26:f1:24:71:36:92:08:d6:30:72:cf:c5:1e:31:c5:14:9c: 62:b5:75:0c:4c:53:80:74:86:86:4e:f6:ad:1d:95:98:6b:ee: 5a:d3:b9:9e:e5:fb:c5:1d:f9:db:18:fa:c8:3a:b8:92:fc:6d: 91:db:3a:95:74:88:14:24:c1:b0:7f:1c:b1:d8:0b:ef:c0:01: 93:1d:35:0a:9d:06:57:a3:63:aa:e8:d2:b8:b6:2f:93:57:cd: 3a:41:75:f2:ca:9c:d6:cd:ec:bc:4a:f7:ca:e8:ac:ba:db:fa: b0:ac:a2:4c:4a:e7:4c:7c:d5:ec:a4:00:95:ba:69:41:df:be: b4:d8:37:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUwODIyMjAyMjQ1WhcNMjUwODI5MjAyMjQ1WjAYMRYwFAYD VQQDEw02OGE4ZDE5NS1iMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmHZxoGAXxaXnBQUWgL7E5ZDZ+YiiC4OleqZrg6Y2NuFkVmNVMXB7R71vg54 eKBNzB9CMzD9EdngayuSurthSGGluZ+KpAd8MnLFZyt2quZFuOGScqjAlT/uAZkc TqOpX8P/ug3L+nIA8k0SomzEpLMXI3Rz1+X2Tx7+YP2s2x6hd66itBntFc8mu2sH V+gPQtjSy24NKa0o93VQNiBnBW+qE1LzDSmvVposZjxAosdAx5DGuYCwYNdC27Ai 4cTekftfJX6t44UpqRKta/0b8MskD/ourql3thC94DQ6VkJvy6PQBXWW4rzgrZ+r arb7Nxo+TP/oy7eb2vHL7ow0EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj7WBcu n8F3qzugArb5L3cdmyBzMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhcLDIuFKpUgj6O9xXwKEt+WsB8GT/iZ7xsg83twQg85VJ5ee2axmE uR/sQDtmd4jtEK6jpaaFJL8jOlYYR1/kVxi/WGGTmqnw/QNFwylGdPxIP6AZrkRZ oWq6oxHsq+pY5CuK9aMJimzZi7UBeZqILUGUnOxW3B3PtfsIq0m4JvEkcTaSCNYw cs/FHjHFFJxitXUMTFOAdIaGTvatHZWYa+5a07me5fvFHfnbGPrIOriS/G2R2zqV dIgUJMGwfxyx2AvvwAGTHTUKnQZXo2Oq6NK4ti+TV806QXXyypzWzey8SvfK6Ky6 2/qwrKJMSudMfNXspACVumlB37602Dfu -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:37 2025 by rpki-client