$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: H4zcteuhdCYvXPrZqm78wi/YF4OYtGKENjA051en94I= Subject key identifier: 10:7C:64:54:E8:C5:4C:58:1E:57:AE:94:03:DE:5E:0B:DE:71:FF:C0 Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 016B Signing time: Sat 23 Aug 2025 04:02:22 +0000 Manifest this update: Sat 23 Aug 2025 04:02:21 +0000 Manifest next update: Sat 30 Aug 2025 04:02:21 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: 8SZYb1RlCO/ebuSuqKa2gq4n1j2MISoow6DtjwVmyIY=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: 0taDnwo0qjXesfO3FrAvUEEfUHs3YxCMYz8QGg31osQ=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: xPqI8byEZA0kbH+t1Ot9il53KHXLD5VMa8Lng8oAAuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Aug 23 04:02:21 2025 GMT Not After : Aug 30 04:02:21 2025 GMT Subject: CN=68a93d4d-283a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:f0:2b:29:50:f0:2e:5a:9f:97:57:b1:f3: db:32:d8:02:4d:55:80:90:eb:6f:be:1f:7a:d1:6f: 51:43:bb:a4:cc:99:d4:ae:7a:29:61:d9:de:4b:12: 68:20:ed:4e:e6:02:cc:6a:c2:a1:bf:e1:9a:24:6d: aa:94:1b:e8:0f:2e:c2:70:60:cf:1a:88:dc:b9:20: d0:38:41:9b:91:c7:5a:42:79:cf:6e:cd:42:bc:ff: 21:79:80:8e:b2:ae:d8:96:e0:95:1b:33:6b:dd:4b: 8f:b7:8b:75:80:4d:34:d3:01:93:9c:23:49:d0:58: af:5a:c0:77:7b:c4:c7:9e:68:62:6c:1a:5e:21:27: 93:96:86:b4:fb:4a:0e:7a:2b:fa:ca:32:5d:ef:c4: a4:18:45:e4:47:a5:7e:eb:f8:ba:2f:d9:51:f2:ca: e6:77:3c:1d:7c:83:b9:22:be:8c:bd:11:0e:c4:28: 74:65:b0:9c:99:5a:cf:5d:0e:bb:8b:56:b1:37:dc: e0:af:95:b7:a6:23:b4:4d:65:97:39:a1:98:6c:45: de:c6:3d:17:a2:c2:60:e9:e2:ec:4b:d4:9a:bd:7c: 92:cd:06:38:41:f9:78:84:c5:5f:e0:c9:35:16:ac: 91:55:a2:c5:af:67:bc:b6:18:fd:e5:a0:af:01:20: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:64:54:E8:C5:4C:58:1E:57:AE:94:03:DE:5E:0B:DE:71:FF:C0 X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:68:6a:0b:f8:f1:82:f0:fb:57:11:40:7c:5c:c4:89:0f:ac: c8:8e:c1:7d:55:85:8e:6a:2e:bf:56:39:d0:05:06:31:fc:26: dd:7a:50:0a:eb:a7:d7:fc:e5:c2:00:01:b1:b6:29:89:0b:2f: 86:d8:fd:64:e1:5c:55:c9:5e:fa:6d:2f:7d:59:05:aa:44:74: 09:83:85:ee:69:e5:6b:81:10:c1:32:a1:3a:a3:8d:84:a7:79: 3e:32:19:98:76:8d:15:6e:b2:ba:0f:00:a5:d6:21:e3:81:86: 5f:6c:31:e8:3a:df:e0:d6:38:a6:22:cf:43:0e:31:62:36:37: d1:db:f0:3a:21:77:2f:49:87:0f:6c:f2:b7:a8:36:80:5c:9e: 7c:a6:9a:c7:b2:d2:75:1e:a6:f1:26:84:c8:36:18:b5:59:e8: a6:23:14:4c:7f:ae:21:15:cf:59:cf:50:c3:93:63:3a:13:03: 44:c8:63:2e:21:69:aa:29:37:92:fa:aa:71:1e:45:a7:47:fe: 67:a8:c6:ea:8e:13:e0:a2:22:9a:ca:41:4d:bd:3f:92:3b:18: c3:28:c6:c5:57:fe:fe:9f:7a:fe:f8:6b:95:14:1d:ce:b9:c2: 83:3f:09:d4:db:61:a0:3a:35:6a:98:49:56:2b:86:f1:a3:bb: 38:aa:3b:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwODIzMDQwMjIxWhcNMjUwODMwMDQwMjIxWjAYMRYwFAYD VQQDEw02OGE5M2Q0ZC0yODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VzwKylQ8C5an5dXsfPbMtgCTVWAkOtvvh960W9RQ7ukzJnUrnopYdneSxJo IO1O5gLMasKhv+GaJG2qlBvoDy7CcGDPGojcuSDQOEGbkcdaQnnPbs1CvP8heYCO sq7YluCVGzNr3UuPt4t1gE000wGTnCNJ0FivWsB3e8THnmhibBpeISeTloa0+0oO eiv6yjJd78SkGEXkR6V+6/i6L9lR8srmdzwdfIO5Ir6MvREOxCh0ZbCcmVrPXQ67 i1axN9zgr5W3piO0TWWXOaGYbEXexj0XosJg6eLsS9SavXySzQY4Qfl4hMVf4Mk1 FqyRVaLFr2e8thj95aCvASBvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB8ZFTo xUxYHleulAPeXgvecf/AMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChaGoL+PGC8PtXEUB8XMSJD6zIjsF9VYWOai6/VjnQBQYx/CbdelAK 66fX/OXCAAGxtimJCy+G2P1k4VxVyV76bS99WQWqRHQJg4XuaeVrgRDBMqE6o42E p3k+MhmYdo0VbrK6DwCl1iHjgYZfbDHoOt/g1jimIs9DDjFiNjfR2/A6IXcvSYcP bPK3qDaAXJ58pprHstJ1HqbxJoTINhi1WeimIxRMf64hFc9Zz1DDk2M6EwNEyGMu IWmqKTeS+qpxHkWnR/5nqMbqjhPgoiKaykFNvT+SOxjDKMbFV/7+n3r++GuVFB3O ucKDPwnU22GgOjVqmElWK4bxo7s4qjvq -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:32 2025 by rpki-client