$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft File: nag9eBUvVmRHEvSlgLqVNV-IgUc.mft (raw, json) Hash identifier: WMuCmWAt2n4RbPxo7Br/R1lvO/ZXXTp4aMSRWLSWdDw= Subject key identifier: 32:1C:09:14:C9:36:E5:F3:2E:32:7E:72:28:E5:18:82:23:9D:CF:CD Authority key identifier: 9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 Certificate issuer: /CN=A91C8E33/serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft Manifest number: 090A Signing time: Mon 30 Jun 2025 20:29:21 +0000 Manifest this update: Mon 30 Jun 2025 20:29:21 +0000 Manifest next update: Mon 07 Jul 2025 20:29:21 +0000 Files and hashes: 1: nag9eBUvVmRHEvSlgLqVNV-IgUc.crl (hash: H4HMehBxJl+UhTiohx46JuGcqiEv9N46iSTXJNByyoc=) 2: 9C3E2D18A98111EAB4B3FD50C4F9AE02.roa (hash: uVDqEWvFSoFCutjWZ+pfrsUVRlgkPu0drLynarAKc08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8E33, serialNumber=9DA83D78152F56644712F4A580BA95355F888147 Validity Not Before: Jun 30 20:29:21 2025 GMT Not After : Jul 7 20:29:21 2025 GMT Subject: CN=6862f3a1-f585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:97:6c:7e:04:c8:df:c4:b3:1a:41:ac:9c: f0:04:7d:4f:04:88:95:8f:12:f4:a6:50:21:03:95: dc:9a:7e:58:a8:29:59:4f:3f:6a:de:ab:a4:26:8d: d3:71:a5:35:46:27:86:f7:8f:42:65:29:cf:55:11: 92:5f:a5:7c:e7:06:43:e2:fa:bb:69:84:99:8e:80: ae:0e:00:50:2b:48:5c:30:50:06:13:d5:67:31:a8: db:7c:d4:bc:cb:44:00:24:f6:82:ae:82:a4:72:7d: 01:0b:a6:6c:cf:39:ee:fa:e6:f9:38:0f:43:b3:d6: b5:55:64:65:08:93:6a:fc:b7:b4:bd:df:62:7b:6c: 4d:7e:0d:e7:ef:9e:7c:f5:6d:4f:bf:2d:3b:f2:dd: 0a:0d:30:57:2c:13:6e:d7:02:76:07:ca:0c:10:38: aa:83:0e:a7:8c:f5:a6:f1:61:f7:c7:cf:7f:ac:61: 88:53:e4:c9:29:02:a2:93:48:a4:b1:c2:35:9f:6e: 03:93:69:26:b2:db:93:cf:8f:9c:11:5c:a7:6f:22: 54:b3:27:48:d8:ae:a5:f5:69:f2:21:5f:b5:c7:78: 68:7d:25:7f:28:e6:ca:ce:93:b1:d0:cd:31:39:a3: 03:a4:10:b8:6f:6c:83:21:a0:7a:2e:02:39:1e:57: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:09:14:C9:36:E5:F3:2E:32:7E:72:28:E5:18:82:23:9D:CF:CD X509v3 Authority Key Identifier: keyid:9D:A8:3D:78:15:2F:56:64:47:12:F4:A5:80:BA:95:35:5F:88:81:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nag9eBUvVmRHEvSlgLqVNV-IgUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8E33/AD2CF21EA97F11EABF43EF4AC4F9AE02/nag9eBUvVmRHEvSlgLqVNV-IgUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e0:cc:7a:e3:20:e5:92:e8:b5:35:6c:5d:7b:3f:96:3f:75: 54:b0:42:cb:71:21:f8:8c:0e:8b:ab:90:8e:bf:6a:ec:df:ba: 7a:13:25:f5:0b:e8:59:c3:f4:10:f9:7c:13:f6:c0:16:4f:a5: 7d:c0:17:89:c0:9c:6d:51:4e:ab:5a:11:90:75:ed:98:72:a8: 0f:47:cc:41:46:d3:00:da:f4:17:75:9d:3e:45:16:c8:0c:c2: cf:13:83:89:31:07:4e:28:38:9f:84:c6:17:a2:33:b8:82:58: 73:6d:90:a9:5d:3c:b9:f3:f5:f1:d8:98:06:1a:e1:bf:7e:c4: 50:38:4a:5d:7c:71:cc:a4:df:2f:42:a6:54:bd:58:e2:31:f8: 0f:23:70:20:87:e8:1f:45:bc:af:be:16:7f:f3:72:0b:dd:a2: 55:4b:7b:65:bf:75:fc:da:d2:c7:0a:46:d4:0d:92:2f:c3:44: 82:cc:c5:44:36:fa:d9:a0:00:01:3f:c6:de:05:5e:23:1e:60: 19:1c:b4:d4:7e:39:b9:2e:45:68:4b:83:01:b7:e1:69:ec:2e: 61:ab:3d:74:99:6e:cd:ed:b0:31:a7:3a:e0:56:09:e9:28:0a: 15:e5:4a:83:16:4e:1b:f7:27:40:9b:48:fa:db:63:79:48:fa: 35:77:22:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFMzMxMTAvBgNVBAUTKDlEQTgzRDc4MTUyRjU2NjQ0NzEyRjRBNTgwQkE5NTM1 NUY4ODgxNDcwHhcNMjUwNjMwMjAyOTIxWhcNMjUwNzA3MjAyOTIxWjAYMRYwFAYD VQQDEw02ODYyZjNhMS1mNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DiXbH4EyN/EsxpBrJzwBH1PBIiVjxL0plAhA5Xcmn5YqClZTz9q3qukJo3T caU1RieG949CZSnPVRGSX6V85wZD4vq7aYSZjoCuDgBQK0hcMFAGE9VnMajbfNS8 y0QAJPaCroKkcn0BC6Zszznu+ub5OA9Ds9a1VWRlCJNq/Le0vd9ie2xNfg3n7558 9W1Pvy078t0KDTBXLBNu1wJ2B8oMEDiqgw6njPWm8WH3x89/rGGIU+TJKQKik0ik scI1n24Dk2kmstuTz4+cEVynbyJUsydI2K6l9WnyIV+1x3hofSV/KObKzpOx0M0x OaMDpBC4b2yDIaB6LgI5Hle9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIcCRTJ NuXzLjJ+cijlGIIjnc/NMB8GA1UdIwQYMBaAFJ2oPXgVL1ZkRxL0pYC6lTVfiIFH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEUzMy9BRDJDRjIxRUE5 N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZtUkhFdlNsZ0xxVk5WLUln VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25hZzllQlV2Vm1SSEV2U2xnTHFWTlYtSWdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEUzMy9BRDJDRjIxRUE5N0YxMUVBQkY0M0VGNEFDNEY5QUUwMi9uYWc5ZUJVdlZt UkhFdlNsZ0xxVk5WLUlnVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV4Mx64yDlkui1NWxdez+WP3VUsELLcSH4jA6Lq5COv2rs37p6EyX1 C+hZw/QQ+XwT9sAWT6V9wBeJwJxtUU6rWhGQde2YcqgPR8xBRtMA2vQXdZ0+RRbI DMLPE4OJMQdOKDifhMYXojO4glhzbZCpXTy58/Xx2JgGGuG/fsRQOEpdfHHMpN8v QqZUvVjiMfgPI3Agh+gfRbyvvhZ/83IL3aJVS3tlv3X82tLHCkbUDZIvw0SCzMVE NvrZoAABP8beBV4jHmAZHLTUfjm5LkVoS4MBt+Fp7C5hqz10mW7N7bAxpzrgVgnp KAoV5UqDFk4b9ydAm0j622N5SPo1dyIc -----END CERTIFICATE-----Generated at Tue Jul 1 20:39:30 2025 by rpki-client