$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft File: nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft (raw, json) Hash identifier: A8qZVorNPUq7cBdz1rnaT+b9FGeNMI19+W3ZcHLbiPU= Subject key identifier: CD:AD:21:DF:FD:5F:F1:FF:FD:BF:41:B4:F1:2C:A9:0B:D1:39:B7:ED Authority key identifier: 9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 Certificate issuer: /CN=A91DE8B4/serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft Manifest number: 0805 Signing time: Fri 22 Aug 2025 21:02:02 +0000 Manifest this update: Fri 22 Aug 2025 21:02:02 +0000 Manifest next update: Fri 29 Aug 2025 21:02:02 +0000 Files and hashes: 1: nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl (hash: udPr+UgtmT7LsZARDFGf655D5haUUnj1vK6ybPzkDHA=) 2: 149009E6EE8111EAABC5C05CC4F9AE02.roa (hash: ZuNx07Xi3l7zK6QE18qPa3KdYreh+VNjcsKw+zEu9qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8B4, serialNumber=9EAC83568ECE877C54B9230D639DA44F380D21E5 Validity Not Before: Aug 22 21:02:02 2025 GMT Not After : Aug 29 21:02:02 2025 GMT Subject: CN=68a8daca-f8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:05:68:70:ec:80:3d:13:e3:cb:f0:8d:cf: 3f:0c:0a:a9:4e:c0:8f:7b:81:9b:70:59:2f:32:9f: 8a:ab:7e:d7:c8:e3:8a:71:9d:03:b7:d7:45:fc:be: 4b:86:f0:0a:bc:ba:76:d3:07:0e:fa:e3:82:b3:60: 28:ec:2b:95:6e:85:f6:3c:46:28:45:01:69:86:eb: e4:e2:b1:08:e5:fd:a4:14:d5:b5:e0:4f:12:ab:60: b0:8d:bc:3b:8e:c1:86:3d:c2:67:1f:2b:7b:e1:59: c3:3d:60:ec:76:90:3c:a7:69:a7:6d:2c:6a:24:17: 4a:a7:f3:31:6c:22:fd:31:4a:76:54:4b:2f:fb:53: 00:16:13:1c:d1:ca:6d:45:04:3e:c7:5b:73:a7:36: 57:9b:c1:fd:44:fd:25:f8:bf:79:12:53:8c:2a:7f: 42:62:3f:e9:36:bf:d0:9b:11:6a:95:55:21:ff:9a: 8d:99:d7:c3:2c:98:0e:7d:64:b6:be:b3:56:4c:ed: 7c:9f:5b:c1:b7:53:f3:46:66:db:f7:db:db:8b:23: 9e:25:b0:b6:8b:15:c9:1e:6e:84:96:ff:1c:16:fe: 54:e0:3b:ae:ba:ec:5a:cf:1a:01:17:00:89:2c:23: 6f:09:df:ba:c5:0f:6d:d4:64:a1:60:70:6a:fa:4a: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AD:21:DF:FD:5F:F1:FF:FD:BF:41:B4:F1:2C:A9:0B:D1:39:B7:ED X509v3 Authority Key Identifier: keyid:9E:AC:83:56:8E:CE:87:7C:54:B9:23:0D:63:9D:A4:4F:38:0D:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqyDVo7Oh3xUuSMNY52kTzgNIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8B4/4A65EAC8EE8011EAA0F82C5CC4F9AE02/nqyDVo7Oh3xUuSMNY52kTzgNIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:5c:b5:fb:13:34:7a:cc:8f:d2:1a:28:ab:89:f0:05:cc: 09:5f:9b:cb:12:ff:91:87:f0:5b:fa:9b:b5:05:3a:0d:e9:e9: d3:07:72:6d:f0:bb:f3:c1:02:c9:82:af:41:89:11:a3:8e:9c: 8e:60:c5:b1:6e:b4:b3:5c:1f:1a:4e:1c:3e:d8:16:7f:12:47: a9:56:5e:02:cd:99:09:a7:38:89:bb:20:4e:84:05:0d:50:ba: 1b:6c:7c:c1:43:e9:18:45:93:0e:cb:18:01:3e:80:d4:b5:a5: b4:e6:28:6e:07:6b:2b:f7:8b:1c:e1:bf:00:a1:64:b2:31:73: 28:02:ca:c3:83:89:39:62:63:73:23:53:f2:96:ad:b9:bf:2b: b6:f9:74:29:82:4d:cd:60:8f:e8:06:58:ed:38:d9:be:75:93: 90:b3:cc:66:7f:da:d0:21:07:c4:ab:da:5e:9f:e4:f9:e3:e6: 62:1c:01:77:5e:a6:30:61:d1:44:b7:5a:ab:fa:76:ca:9d:89: ec:d5:b7:2c:cf:bf:23:66:22:8b:b8:00:05:0a:41:00:11:a1: 87:8e:d7:78:e0:59:e2:6b:bb:39:ba:94:e8:57:a4:e8:62:0c: 5a:c1:4b:af:67:9f:8f:a2:f0:60:97:68:97:82:3b:9a:ff:3c: 44:83:d8:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QjQxMTAvBgNVBAUTKDlFQUM4MzU2OEVDRTg3N0M1NEI5MjMwRDYzOURBNDRG MzgwRDIxRTUwHhcNMjUwODIyMjEwMjAyWhcNMjUwODI5MjEwMjAyWjAYMRYwFAYD VQQDEw02OGE4ZGFjYS1mOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37UFaHDsgD0T48vwjc8/DAqpTsCPe4GbcFkvMp+Kq37XyOOKcZ0Dt9dF/L5L hvAKvLp20wcO+uOCs2Ao7CuVboX2PEYoRQFphuvk4rEI5f2kFNW14E8Sq2Cwjbw7 jsGGPcJnHyt74VnDPWDsdpA8p2mnbSxqJBdKp/MxbCL9MUp2VEsv+1MAFhMc0cpt RQQ+x1tzpzZXm8H9RP0l+L95ElOMKn9CYj/pNr/QmxFqlVUh/5qNmdfDLJgOfWS2 vrNWTO18n1vBt1PzRmbb99vbiyOeJbC2ixXJHm6Elv8cFv5U4DuuuuxazxoBFwCJ LCNvCd+6xQ9t1GShYHBq+kpclQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2tId/9 X/H//b9BtPEsqQvRObftMB8GA1UdIwQYMBaAFJ6sg1aOzod8VLkjDWOdpE84DSHl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThCNC80QTY1RUFDOEVF ODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gzeFV1U01OWTUya1R6Z05J ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25xeURWbzdPaDN4VXVTTU5ZNTJrVHpnTkllVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThCNC80QTY1RUFDOEVFODAxMUVBQTBGODJDNUNDNEY5QUUwMi9ucXlEVm83T2gz eFV1U01OWTUya1R6Z05JZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC81y1+xM0esyP0hooq4nwBcwJX5vLEv+Rh/Bb+pu1BToN6enTB3Jt 8LvzwQLJgq9BiRGjjpyOYMWxbrSzXB8aThw+2BZ/EkepVl4CzZkJpziJuyBOhAUN ULobbHzBQ+kYRZMOyxgBPoDUtaW05ihuB2sr94sc4b8AoWSyMXMoAsrDg4k5YmNz I1Pylq25vyu2+XQpgk3NYI/oBljtONm+dZOQs8xmf9rQIQfEq9pen+T54+ZiHAF3 XqYwYdFEt1qr+nbKnYns1bcsz78jZiKLuAAFCkEAEaGHjtd44Fnia7s5upToV6To YgxawUuvZ5+PovBgl2iXgjua/zxEg9jb -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:17 2025 by rpki-client