$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: Xes+4lVUr5i0N0iZkoVI//MZZsQ9x/6jPuD6L5rQfks= Subject key identifier: 14:79:A0:0D:6D:66:E5:3B:22:53:2A:7B:7C:37:94:89:C2:F1:3D:2C Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1F04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1E38 Signing time: Fri 22 Aug 2025 16:11:00 +0000 Manifest this update: Fri 22 Aug 2025 16:10:59 +0000 Manifest next update: Fri 29 Aug 2025 16:10:59 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: oe8DP3wkZBFD/Gz/9Gtob8nb0IUYMvXOhBwRRavZEDI=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: wQsPHV6x/USj/C30qX7ocLzNE1hOKIXglDcWSSVxT9s=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: pD7Mj0vJ+e1POLE/byu1PMgPE9cMbD9gxTReb6JuPb4=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: e42h1gU/GulKJNSgZnYVY16QcfeskjKqY5xdRuNkRtI=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7940 (0x1f04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Aug 22 16:10:59 2025 GMT Not After : Aug 29 16:10:59 2025 GMT Subject: CN=68a89693-ae95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:c3:4f:7a:29:da:b5:3f:5f:5d:3c:e3:99: e6:e8:5b:de:a8:3b:2e:3d:f4:0e:01:17:b0:97:2c: 4c:2a:33:9a:74:ce:86:d0:ab:d1:1d:c9:42:82:65: 27:94:df:61:d2:a1:76:a8:dd:b2:5f:2e:16:00:ee: f7:3c:8a:90:61:c8:59:cc:5c:04:7b:5c:03:6b:eb: 14:b8:ac:5c:41:77:32:c5:14:73:5e:b4:f1:49:a4: e6:7c:bb:60:69:46:94:5f:13:fb:82:b5:0c:9b:a0: 7b:e8:18:47:af:94:0d:3f:79:1f:f2:19:73:bd:9d: 0d:2b:14:6a:ce:b9:f2:c9:0e:b0:57:91:68:48:99: df:18:6e:63:4a:e7:95:7b:5c:0d:90:97:7b:db:01: ba:aa:b9:ce:f0:4a:0d:8f:1d:7b:8a:c3:aa:7b:7d: 5c:29:9b:25:f6:8f:01:49:9f:1e:f7:3a:79:85:a6: 54:3b:6e:7e:85:b0:31:89:1e:54:59:0c:13:77:27: e9:76:55:ba:ff:28:f3:f4:53:c1:39:f1:31:7a:6e: cd:bd:b9:40:1e:3d:a6:01:11:21:ba:21:0a:7a:48: 2b:07:2b:89:b5:70:b9:d8:e1:23:f2:5a:ab:6d:5c: a5:19:96:f7:c3:c3:09:99:35:71:5e:44:c3:d5:2c: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:A0:0D:6D:66:E5:3B:22:53:2A:7B:7C:37:94:89:C2:F1:3D:2C X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f1:a2:15:82:e0:6e:b5:16:70:9e:d6:01:9b:ad:92:ff:11: 7b:cd:91:f2:4f:7c:48:e2:38:cd:fa:61:a7:a3:30:cb:2e:90: 30:f3:e5:ad:fb:ab:40:b4:ae:60:ff:3d:cc:bb:5e:0e:f7:9f: 85:87:79:92:f6:2b:c0:63:00:5a:57:10:20:00:2a:14:13:c4: 79:4f:40:e5:81:2f:b6:1f:18:8f:f2:5c:9d:14:33:f9:1f:6d: e0:4b:f1:aa:75:b8:74:35:38:2c:ae:23:9e:04:a3:03:9e:5f: 98:f6:b0:6f:84:14:c0:85:d5:79:ee:f6:ab:b3:d4:37:7e:60: 13:19:79:e2:9e:cb:48:a9:15:ea:2a:36:ee:61:e6:57:5a:4f: ef:8d:83:c3:60:dc:96:04:68:23:c4:a2:1a:97:46:51:57:a3: c4:d0:ea:10:55:ce:08:09:da:b1:68:8f:b2:f6:c4:ae:cf:42: 78:7f:ef:57:8b:05:d2:3e:27:cd:68:26:d1:dc:a8:ca:9a:ca: e3:b4:9c:de:be:7f:dd:ad:a2:c0:b4:24:fb:31:76:7e:31:e6: 3c:dd:79:ab:64:06:fa:40:dd:0f:d6:08:bb:a0:6e:6e:f3:e1: 3e:77:44:ea:27:ab:75:79:60:fb:80:ab:91:b2:b1:65:f7:6c: a8:33:0a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUwODIyMTYxMDU5WhcNMjUwODI5MTYxMDU5WjAYMRYwFAYD VQQDEw02OGE4OTY5My1hZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+DDT3op2rU/X10845nm6FveqDsuPfQOARewlyxMKjOadM6G0KvRHclCgmUn lN9h0qF2qN2yXy4WAO73PIqQYchZzFwEe1wDa+sUuKxcQXcyxRRzXrTxSaTmfLtg aUaUXxP7grUMm6B76BhHr5QNP3kf8hlzvZ0NKxRqzrnyyQ6wV5FoSJnfGG5jSueV e1wNkJd72wG6qrnO8EoNjx17isOqe31cKZsl9o8BSZ8e9zp5haZUO25+hbAxiR5U WQwTdyfpdlW6/yjz9FPBOfExem7NvblAHj2mAREhuiEKekgrByuJtXC52OEj8lqr bVylGZb3w8MJmTVxXkTD1SzvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR5oA1t ZuU7IlMqe3w3lInC8T0sMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR8aIVguButRZwntYBm62S/xF7zZHyT3xI4jjN+mGnozDLLpAw8+Wt +6tAtK5g/z3Mu14O95+Fh3mS9ivAYwBaVxAgACoUE8R5T0DlgS+2HxiP8lydFDP5 H23gS/Gqdbh0NTgsriOeBKMDnl+Y9rBvhBTAhdV57vars9Q3fmATGXninstIqRXq KjbuYeZXWk/vjYPDYNyWBGgjxKIal0ZRV6PE0OoQVc4ICdqxaI+y9sSuz0J4f+9X iwXSPifNaCbR3KjKmsrjtJzevn/draLAtCT7MXZ+MeY83XmrZAb6QN0P1gi7oG5u 8+E+d0TqJ6t1eWD7gKuRsrFl92yoMwpv -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:36 2025 by rpki-client