$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft File: _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json) Hash identifier: lcKVsqnDs6K37GLavPrFRve+ABjVhUCAGIWondjF15o= Subject key identifier: 29:8F:25:3E:44:26:0F:2F:52:7C:A8:53:77:EE:3C:62:CA:4A:8C:8E Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 Certificate issuer: /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:01:29 +0000 Manifest this update: Sat 23 Aug 2025 07:01:29 +0000 Manifest next update: Sat 30 Aug 2025 07:01:29 +0000 Files and hashes: 1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: DqPync+UTU/Tz9oDfOpjy3l1X7qWhU/DNlUMHce+Trc=) 2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: OQsiNqk/6UEhG+WoM7b9x1Qk45e1mg8EolKiz0N5DwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1 Validity Not Before: Aug 23 07:01:29 2025 GMT Not After : Aug 30 07:01:29 2025 GMT Subject: CN=68a96749-ae9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:04:da:02:85:e2:f5:d7:6a:35:84:15:5c: 44:9f:10:aa:8b:88:8c:61:9c:b8:de:9f:c9:e1:76: 3f:85:65:c7:cc:9f:4e:7f:ac:c2:1f:e8:65:d3:8c: b0:7d:2a:29:dc:5e:f2:86:cb:1c:bc:9c:b8:9e:f5: 8c:09:59:b7:fb:55:21:a7:38:b6:12:0f:97:8d:12: 9b:fb:7d:c1:94:0b:b1:f9:77:da:3d:b4:e5:e8:4d: 0d:e3:41:81:7f:11:db:13:04:18:17:31:6a:7a:df: 4e:93:48:73:12:cf:65:06:94:ed:88:0e:36:df:24: d6:82:f2:b4:0c:34:03:9a:f6:df:70:25:01:f1:08: 4c:da:ac:eb:fc:eb:13:84:1a:c2:40:9d:c0:45:62: ac:be:d0:55:09:38:8a:09:3a:f0:b1:12:d5:21:47: 64:1b:66:66:13:5f:e4:c4:e8:fb:a3:84:6e:e0:d3: e8:fb:c1:9b:77:41:42:8e:d5:3f:90:a5:05:52:3c: 0f:6d:7b:35:7f:26:51:08:93:98:f1:14:b2:df:0f: 4c:10:cc:38:b1:09:95:1e:13:be:40:39:16:29:66: 7b:a4:1c:0e:d0:e5:15:3b:01:19:b6:2f:90:eb:cb: 74:6a:19:62:7b:21:d4:44:fe:43:a4:3d:91:5c:2d: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8F:25:3E:44:26:0F:2F:52:7C:A8:53:77:EE:3C:62:CA:4A:8C:8E X509v3 Authority Key Identifier: keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:ad:e6:b2:cf:46:d8:86:b0:5c:44:1d:53:60:5a:6a:c8: f8:a4:7d:2f:ac:4e:b3:3a:b1:49:61:df:ec:98:2b:cb:fd:24: 48:14:3b:98:8f:29:d8:e4:60:78:92:98:f0:10:56:b0:3b:ef: 4c:ee:5d:19:3f:f6:ef:db:02:91:c7:b8:b9:ac:8f:91:e1:61: a9:4b:82:26:53:56:c5:40:58:65:8a:d3:06:9c:33:28:12:52: 1b:53:0c:21:84:1c:7f:da:31:18:f9:82:d8:48:7d:89:a3:2d: 72:8c:42:f1:54:49:81:97:8a:1a:25:56:84:43:af:a1:e2:97: cf:4a:6e:31:5f:3f:a4:5d:75:8b:77:28:94:b2:33:0d:1a:bc: 93:6b:97:df:6c:27:62:2f:1b:cc:12:57:62:70:68:33:9d:69: fe:60:60:e6:ae:0a:44:8e:6f:47:75:91:c2:74:2a:d7:cc:1f: 75:2f:f7:8b:b2:9a:82:a5:bf:aa:3a:7b:d7:31:5a:c8:54:ef: 42:a6:de:fb:76:4a:35:39:a1:d0:3d:b8:18:6e:f2:65:66:d6: 34:3b:fc:3a:56:f1:78:4e:2d:06:4a:4c:69:18:9a:b6:4a:72: 65:d4:23:41:40:c7:55:3b:fa:12:75:1a:ba:e0:4c:7b:38:34: 7a:77:a1:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDA0RjExMC8GA1UEBRMoRkU3Q0M4RDEyQzhDQjk0MEQwNkVBRURCNUIwQUQ0M0Qw NTAzNjJGMTAeFw0yNTA4MjMwNzAxMjlaFw0yNTA4MzAwNzAxMjlaMBgxFjAUBgNV BAMTDTY4YTk2NzQ5LWFlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOqATaAoXi9ddqNYQVXESfEKqLiIxhnLjen8nhdj+FZcfMn05/rMIf6GXTjLB9 KincXvKGyxy8nLie9YwJWbf7VSGnOLYSD5eNEpv7fcGUC7H5d9o9tOXoTQ3jQYF/ EdsTBBgXMWp6306TSHMSz2UGlO2IDjbfJNaC8rQMNAOa9t9wJQHxCEzarOv86xOE GsJAncBFYqy+0FUJOIoJOvCxEtUhR2QbZmYTX+TE6PujhG7g0+j7wZt3QUKO1T+Q pQVSPA9tezV/JlEIk5jxFLLfD0wQzDixCZUeE75AORYpZnukHA7Q5RU7ARm2L5Dr y3RqGWJ7IdRE/kOkPZFcLTfBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKY8lPkQm Dy9SfKhTd+48YspKjI4wHwYDVR0jBBgwFoAU/nzI0SyMuUDQbq7bWwrUPQUDYvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MDRGL0Q1RDBGRUI0Q0JG NzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX256STBTeU11VURRYnE3Yld3clVQUVVEWXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MDRGL0Q1RDBGRUI0Q0JGNzExRUY4NjlDOTA0RkM0RjlBRTAyL19uekkwU3lNdVVE UWJxN2JXd3JVUFFVRFl2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB1creayz0bYhrBcRB1TYFpqyPikfS+sTrM6sUlh3+yYK8v9JEgUO5iP KdjkYHiSmPAQVrA770zuXRk/9u/bApHHuLmsj5HhYalLgiZTVsVAWGWK0wacMygS UhtTDCGEHH/aMRj5gthIfYmjLXKMQvFUSYGXiholVoRDr6Hil89KbjFfP6RddYt3 KJSyMw0avJNrl99sJ2IvG8wSV2JwaDOdaf5gYOauCkSOb0d1kcJ0KtfMH3Uv94uy moKlv6o6e9cxWshU70Km3vt2SjU5odA9uBhu8mVm1jQ7/DpW8XhOLQZKTGkYmrZK cmXUI0FAx1U7+hJ1GrrgTHs4NHp3oQ8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:17 2025 by rpki-client