$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft File: 01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json) Hash identifier: AmCPIG6Zo7/cfNSqer3Eq64wWTdQDh/uZy8Jj3S12WQ= Subject key identifier: 6E:DE:88:51:1D:01:9A:E8:0C:0A:67:6E:CD:12:8E:C2:E4:B6:29:D9 Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 Certificate issuer: /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft Manifest number: D7 Signing time: Sat 23 Aug 2025 05:46:07 +0000 Manifest this update: Sat 23 Aug 2025 05:46:07 +0000 Manifest next update: Sat 30 Aug 2025 05:46:07 +0000 Files and hashes: 1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: JRCxnIQ1Z0RXo6/7k8bscdBZt+B2v7prtjvv9jIjye4=) 2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: pQpO0/PUmsk8Ne8Tm6dn6viR4Yd/Q34ajbz6wbYS9Zc=) 3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: sO/FcuusJDef8Jgb3m4tmdQe6il72ChJ0DAhA0al1Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472 Validity Not Before: Aug 23 05:46:07 2025 GMT Not After : Aug 30 05:46:07 2025 GMT Subject: CN=68a9559f-cc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:d6:bd:28:ae:08:77:43:0c:a0:92:7c:38: 26:e0:3e:18:c1:b3:9b:c4:68:14:f4:c2:67:ac:63: fc:bd:f8:30:3e:58:0f:bc:e6:87:a0:3e:f7:6e:cc: 31:6e:40:13:d0:01:be:1a:67:0a:d7:bd:27:df:dd: df:6b:84:f8:c8:40:48:2b:1e:da:ca:d8:fd:c1:c4: 9c:f9:e3:f3:d9:ea:4d:f9:0b:f3:f5:53:39:c3:b9: 46:73:4a:7b:bb:89:0e:60:9f:ce:50:1e:b0:ae:f0: 86:d3:d1:c7:d0:ea:5b:d8:fa:22:53:65:b6:da:e5: 5d:5a:1e:ee:9e:ad:c1:61:b0:b1:5a:88:c3:f8:24: 32:9f:47:30:4a:73:75:b9:00:d1:b5:ac:24:e7:b8: cc:a8:34:6c:96:64:ac:7f:03:3b:be:c7:d0:a9:d9: b0:99:6b:13:30:5a:24:71:a1:87:a4:17:03:ba:8e: dc:14:43:2b:ab:ca:f7:f8:c2:7a:1b:80:bb:8c:e8: 9e:b6:75:b9:c4:71:9f:2b:a0:35:2e:37:ae:11:20: 83:72:9d:7f:56:40:45:15:6a:1d:d7:b0:95:8b:73: 80:83:92:07:0d:1b:0d:b1:11:39:af:ab:a0:be:a9: 63:37:56:63:4f:6d:23:31:5e:eb:8e:17:5a:9f:c5: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DE:88:51:1D:01:9A:E8:0C:0A:67:6E:CD:12:8E:C2:E4:B6:29:D9 X509v3 Authority Key Identifier: keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:64:03:9e:4a:e4:0d:d2:ce:10:5a:fd:3e:33:b4:07:76:8d: 33:c7:8e:f8:dc:85:25:4e:f9:5d:c3:8a:58:fd:79:e3:b7:36: ef:f4:4a:73:fd:c8:15:0d:7c:62:40:14:22:b9:da:dd:a7:10: 30:c7:9d:63:2f:b2:6d:c3:b5:f7:90:d5:7d:02:6a:72:a1:b0: 5e:4a:d7:36:89:c1:70:32:e5:44:52:19:41:82:2f:b2:f8:62: 1f:ec:2b:cb:35:ed:2b:0d:99:a4:8d:41:4b:fa:87:a9:3a:5b: d9:02:8b:a3:2c:f6:59:fb:d5:33:49:55:a3:75:e0:b2:25:9e: 36:ad:a2:e9:f8:ae:62:f3:83:10:16:ef:21:5e:27:3b:ae:c7: f2:ba:f4:f0:30:be:15:6c:5e:d6:21:24:af:a9:ee:b8:52:fa: 9a:5b:ac:97:9e:bb:f4:b8:24:da:34:3c:34:be:5a:58:0e:ef: d7:57:ae:f7:bd:80:fe:dc:33:21:54:71:c6:ab:54:00:2a:c2: df:02:46:22:7d:43:22:1c:99:7b:31:01:ca:e9:4c:20:05:ac: 8b:99:fa:21:33:17:f8:b9:a7:84:41:1a:ea:55:e8:38:80:19: 98:05:cf:6d:8b:7d:9d:88:66:b9:ac:11:2a:90:0f:ef:34:bf: 38:54:18:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5 MENCOEQ0NzIwHhcNMjUwODIzMDU0NjA3WhcNMjUwODMwMDU0NjA3WjAYMRYwFAYD VQQDEw02OGE5NTU5Zi1jYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKDWvSiuCHdDDKCSfDgm4D4YwbObxGgU9MJnrGP8vfgwPlgPvOaHoD73bswx bkAT0AG+GmcK170n393fa4T4yEBIKx7aytj9wcSc+ePz2epN+Qvz9VM5w7lGc0p7 u4kOYJ/OUB6wrvCG09HH0Opb2PoiU2W22uVdWh7unq3BYbCxWojD+CQyn0cwSnN1 uQDRtawk57jMqDRslmSsfwM7vsfQqdmwmWsTMFokcaGHpBcDuo7cFEMrq8r3+MJ6 G4C7jOietnW5xHGfK6A1LjeuESCDcp1/VkBFFWod17CVi3OAg5IHDRsNsRE5r6ug vqljN1ZjT20jMV7rjhdan8XkYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7eiFEd AZroDApnbs0SjsLktinZMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUIxQi9GOUZFRTA0NjNDRjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4 U0Q4NjFxUU1DQTZReTQxSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtZAOeSuQN0s4QWv0+M7QHdo0zx4743IUlTvldw4pY/Xnjtzbv9Epz /cgVDXxiQBQiudrdpxAwx51jL7Jtw7X3kNV9AmpyobBeStc2icFwMuVEUhlBgi+y +GIf7CvLNe0rDZmkjUFL+oepOlvZAoujLPZZ+9UzSVWjdeCyJZ42raLp+K5i84MQ Fu8hXic7rsfyuvTwML4VbF7WISSvqe64UvqaW6yXnrv0uCTaNDw0vlpYDu/XV673 vYD+3DMhVHHGq1QAKsLfAkYifUMiHJl7MQHK6UwgBayLmfohMxf4uaeEQRrqVeg4 gBmYBc9ti32diGa5rBEqkA/vNL84VBgx -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:00 2025 by rpki-client