$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft File: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft (raw, json) Hash identifier: 8V76hvyhCeXR6/yIGiNU7ihYKVAuVCdCUkP1RX/Y6YM= Subject key identifier: 44:8B:BC:24:4D:93:54:87:08:19:B7:DF:5C:A0:6D:CD:B8:29:47:43 Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft Manifest number: 0821 Signing time: Fri 22 Aug 2025 20:57:44 +0000 Manifest this update: Fri 22 Aug 2025 20:57:43 +0000 Manifest next update: Fri 29 Aug 2025 20:57:43 +0000 Files and hashes: 1: nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl (hash: supnv+/AZFiXVgOoQ+NHEAIwUqx8LiXigfPV2SH8lxc=) 2: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (hash: 6X9DRIYN2JCL/kdvqE4XHDfEtLiRnlrwHj3YHZE4kgg=) 3: 0C5564C2E3AC11EAAAC85761C4F9AE02.roa (hash: 6lqehcAyCNVs7/NRnq82eztxUGH8XbnYMN7Uvtot0JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Aug 22 20:57:43 2025 GMT Not After : Aug 29 20:57:43 2025 GMT Subject: CN=68a8d9c8-9d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:b3:96:30:d1:a2:8c:e9:53:00:39:40:85: 8e:f9:e5:dc:2b:ae:bc:f3:56:95:54:ae:c1:f5:9c: 9e:52:12:14:15:e7:50:19:fd:25:a2:c1:10:5c:ce: 4b:23:29:9a:82:03:53:c4:0d:1c:81:bd:c7:e8:54: b8:67:f5:75:0f:53:25:05:b6:7d:f2:a9:79:36:46: 00:5a:b8:6b:0f:1b:49:25:ff:c5:86:ec:f5:14:1f: ec:bb:96:ce:b5:ff:4d:b3:4c:cd:e0:95:e2:cb:98: 04:01:9b:1e:23:1d:6e:27:53:a5:6c:f1:6f:81:01: b1:8c:49:e6:52:b1:aa:10:ad:03:b4:0b:05:f8:f1: 5d:65:54:18:dc:a3:2a:a0:95:be:7c:c1:3a:c4:f3: 8d:99:27:f9:8b:7a:85:be:9d:48:8c:47:9c:67:47: 65:c3:e7:81:cf:ff:1b:b4:32:99:fb:b4:af:51:ef: 7a:dc:cb:8d:8d:3d:2d:8b:d8:cc:98:14:44:d4:e5: da:c0:d7:ed:60:83:5f:a8:2a:1e:e9:fb:7d:ad:8f: e8:9b:54:c7:60:a2:26:51:ad:2a:40:1d:c9:45:ef: 56:d1:18:9e:09:ec:eb:f5:27:eb:71:7c:6f:7d:c7: 8f:20:80:f0:d4:a1:ea:9c:33:b5:77:f1:38:cf:26: 72:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8B:BC:24:4D:93:54:87:08:19:B7:DF:5C:A0:6D:CD:B8:29:47:43 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:41:99:88:1e:6f:ed:b6:f9:4d:93:f0:d1:29:8e:99:7f:02: 82:92:19:b0:ae:3f:fc:61:c6:69:68:95:9e:40:3e:a2:8a:c7: c8:e6:98:5a:c6:6e:17:2f:f3:14:35:e9:88:59:a8:13:3e:5c: b2:6a:39:18:c5:59:51:2e:ae:e3:ee:30:d2:42:19:33:cc:60: 7d:0e:e2:0e:66:b7:fc:12:6d:a9:e2:4d:ee:17:44:80:ec:99: ca:e2:19:70:b2:9e:c3:cd:32:30:72:03:31:18:76:29:4f:78: 49:fe:ab:4e:94:56:30:06:89:15:6a:e8:dd:1c:0f:92:9a:6d: 22:df:6a:f2:dd:84:04:8f:68:57:0f:fc:d1:75:3e:dc:57:37: 31:04:c3:3e:07:29:b3:01:b0:e5:d8:9f:4d:d3:0a:8d:a2:8a: 8f:8e:08:e7:75:f6:d3:a8:b8:dd:07:40:a7:82:b3:69:9c:46: 70:cb:ba:3d:81:7c:d3:3d:67:30:13:ee:f7:5d:be:4b:29:87: 64:c0:7f:49:f8:4d:8c:93:17:ad:4e:16:0a:0a:99:32:b5:d7: db:6e:5e:3e:cc:e5:f7:3a:c1:d7:34:d6:18:46:4f:e3:9c:93: 1b:84:f9:86:78:6e:8c:7b:45:02:e9:ab:b3:04:71:a5:0b:ac: 52:de:ae:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwODIyMjA1NzQzWhcNMjUwODI5MjA1NzQzWjAYMRYwFAYD VQQDEw02OGE4ZDljOC05ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BezljDRoozpUwA5QIWO+eXcK66881aVVK7B9ZyeUhIUFedQGf0losEQXM5L IymaggNTxA0cgb3H6FS4Z/V1D1MlBbZ98ql5NkYAWrhrDxtJJf/Fhuz1FB/su5bO tf9Ns0zN4JXiy5gEAZseIx1uJ1OlbPFvgQGxjEnmUrGqEK0DtAsF+PFdZVQY3KMq oJW+fME6xPONmSf5i3qFvp1IjEecZ0dlw+eBz/8btDKZ+7SvUe963MuNjT0ti9jM mBRE1OXawNftYINfqCoe6ft9rY/om1THYKImUa0qQB3JRe9W0RieCezr9SfrcXxv fcePIIDw1KHqnDO1d/E4zyZyYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESLvCRN k1SHCBm331ygbc24KUdDMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTcwMi9FRjkxM0QyNkUzQUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBp eF85Vkt2dUs5UTJzRTlTYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjQZmIHm/ttvlNk/DRKY6ZfwKCkhmwrj/8YcZpaJWeQD6iisfI5pha xm4XL/MUNemIWagTPlyyajkYxVlRLq7j7jDSQhkzzGB9DuIOZrf8Em2p4k3uF0SA 7JnK4hlwsp7DzTIwcgMxGHYpT3hJ/qtOlFYwBokVaujdHA+Smm0i32ry3YQEj2hX D/zRdT7cVzcxBMM+BymzAbDl2J9N0wqNooqPjgjndfbTqLjdB0CngrNpnEZwy7o9 gXzTPWcwE+73Xb5LKYdkwH9J+E2MkxetThYKCpkytdfbbl4+zOX3OsHXNNYYRk/j nJMbhPmGeG6Me0UC6auzBHGlC6xS3q7i -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:27 2025 by rpki-client