$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: 4+ZAxvDuUIvC64zD75fM4P24WlmHRpuHE9fpuyXMAFg= Subject key identifier: 3A:E3:5E:8E:9F:FE:9E:87:AE:4A:FE:DA:71:F2:77:07:A3:3D:15:3F Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: 26 Signing time: Sat 23 Aug 2025 08:01:47 +0000 Manifest this update: Sat 23 Aug 2025 08:01:46 +0000 Manifest next update: Sat 30 Aug 2025 08:01:46 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: R0341NrQaJsePbP2gGJVV0bBjjBv+1PRWPdjfJji/Vw=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2Lm246NHiIIsj3yU5G9cofOj46hOe93SJKM95sww3VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Aug 23 08:01:46 2025 GMT Not After : Aug 30 08:01:46 2025 GMT Subject: CN=68a9756a-9894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:65:36:fc:e8:81:61:40:00:8a:ab:da:1f: 27:04:72:7b:be:8c:53:d4:2a:70:c8:d6:6e:a4:d8: 97:e8:d6:e6:43:48:92:51:dc:78:8a:0f:e4:c6:59: 36:ed:84:cd:81:ef:0c:fe:d6:47:a5:32:aa:d0:b7: 96:77:db:49:df:c9:fa:0e:30:91:3e:03:43:a2:fa: 8c:8a:31:7f:bb:17:f0:5a:82:e4:83:73:88:7b:76: cc:7b:21:6f:80:60:8b:57:97:c3:bf:e8:81:8c:cf: 84:0f:8c:62:4b:c7:64:df:01:ca:e9:f8:fc:49:f2: 58:5a:17:d8:86:1c:d6:99:40:39:cb:2d:04:b8:07: f1:d6:7e:a2:db:58:13:47:19:21:de:b8:c1:18:ff: a7:5b:b7:bd:bf:b4:c0:de:a9:f7:8e:ae:0c:e5:8c: ae:16:2c:e9:73:b1:5d:04:d4:ae:5c:f5:51:d0:b0: 12:a8:04:d9:30:46:b7:6c:c6:ee:00:5c:b6:81:6b: 18:42:ff:f8:97:6c:c7:66:17:29:e0:83:ff:af:3d: 1f:f1:c7:18:9e:63:1f:3e:ce:5e:ba:26:95:68:6d: e8:f1:e6:7e:f4:de:ed:50:ec:67:f2:94:c1:ea:66: 3d:c7:75:db:12:73:20:21:76:3a:6e:31:42:44:c0: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:5E:8E:9F:FE:9E:87:AE:4A:FE:DA:71:F2:77:07:A3:3D:15:3F X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:09:e5:24:4b:a3:e2:7f:83:fa:64:d1:fc:c6:1f:55:55: b7:3e:ab:b1:b5:0b:1e:bd:46:c8:6c:61:8d:de:bc:7b:f1:92: cf:ca:74:7b:9d:82:c7:d8:fd:77:2c:9b:c5:9a:dd:2a:af:94: b7:3e:5e:0b:6c:40:97:97:b0:fb:a7:1f:54:d3:8c:2d:2e:13: 47:dd:36:b7:54:80:1b:9e:b7:7f:90:79:88:8b:dc:48:5e:d5: 46:d4:74:e3:3a:6e:2f:b3:61:61:a1:a8:bc:00:23:78:04:32: b7:63:91:93:81:36:8b:42:3e:89:17:38:1a:dc:5c:02:87:bd: 70:3a:ff:6e:41:02:4e:1c:10:ef:e8:9d:c9:da:40:6d:2a:f9: 6f:8b:66:58:17:50:3b:71:90:de:7e:97:bd:ab:2e:5f:12:fb: 80:1e:1a:a5:7a:4b:b0:97:17:49:69:ad:31:75:2d:7a:f4:9d: df:43:9d:3b:70:0d:de:79:e1:e5:e2:4e:7e:8d:eb:0e:c1:a6: 26:32:25:e0:c8:c7:2f:3f:da:a9:71:96:f9:81:04:5a:df:6e: 6e:cc:57:43:3b:7a:22:36:12:fa:bd:18:f3:bf:6f:2d:ba:3c: cc:73:f5:96:45:17:aa:f8:3b:e8:30:7b:c8:01:a2:31:1e:40: b9:7b:62:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MkVGRjExMC8GA1UEBRMoMzU0MzNDOUVDNDA4MDk5RjcwMThCQzUxNDQxRDIyQzRD MTFGQzM4NTAeFw0yNTA4MjMwODAxNDZaFw0yNTA4MzAwODAxNDZaMBgxFjAUBgNV BAMTDTY4YTk3NTZhLTk4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDatGU2/OiBYUAAiqvaHycEcnu+jFPUKnDI1m6k2Jfo1uZDSJJR3HiKD+TGWTbt hM2B7wz+1kelMqrQt5Z320nfyfoOMJE+A0Oi+oyKMX+7F/BaguSDc4h7dsx7IW+A YItXl8O/6IGMz4QPjGJLx2TfAcrp+PxJ8lhaF9iGHNaZQDnLLQS4B/HWfqLbWBNH GSHeuMEY/6dbt72/tMDeqfeOrgzljK4WLOlzsV0E1K5c9VHQsBKoBNkwRrdsxu4A XLaBaxhC//iXbMdmFyngg/+vPR/xxxieYx8+zl66JpVobejx5n703u1Q7GfylMHq Zj3HddsScyAhdjpuMUJEwJoFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOuNejp/+ noeuSv7acfJ3B6M9FT8wHwYDVR0jBBgwFoAUNUM8nsQICZ9wGLxRRB0ixMEfw4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyRUZGL0FCOTc1QkNFNDg0 OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlVNOG5zUUlDWjl3R0x4UlJCMGl4TUVmdzRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy RUZGL0FCOTc1QkNFNDg0OTExRjBCRjA3MDM3MEM0RjlBRTAyL05VTThuc1FJQ1o5 d0dMeFJSQjBpeE1FZnc0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3LCeUkS6Pif4P6ZNH8xh9VVbc+q7G1Cx69RshsYY3evHvxks/KdHud gsfY/Xcsm8Wa3SqvlLc+XgtsQJeXsPunH1TTjC0uE0fdNrdUgBuet3+QeYiL3Ehe 1UbUdOM6bi+zYWGhqLwAI3gEMrdjkZOBNotCPokXOBrcXAKHvXA6/25BAk4cEO/o ncnaQG0q+W+LZlgXUDtxkN5+l72rLl8S+4AeGqV6S7CXF0lprTF1LXr0nd9DnTtw Dd554eXiTn6N6w7BpiYyJeDIxy8/2qlxlvmBBFrfbm7MV0M7eiI2Evq9GPO/by26 PMxz9ZZFF6r4O+gwe8gBojEeQLl7Ynw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:28 2025 by rpki-client