$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft File: nuqkUJudasqRzaQCHxBekhA363Q.mft (raw, json) Hash identifier: jBPWT2qMYyKMfn4ZkC/7TLct9cR0b/7m9+6R00Zs3Ik= Subject key identifier: 69:DC:1D:86:1C:ED:3E:79:5C:EF:30:E3:60:C3:E5:E9:39:E3:78:CE Authority key identifier: 9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 Certificate issuer: /CN=A91F2BA6/serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft Manifest number: 09C9 Signing time: Fri 22 Aug 2025 20:08:11 +0000 Manifest this update: Fri 22 Aug 2025 20:08:10 +0000 Manifest next update: Fri 29 Aug 2025 20:08:10 +0000 Files and hashes: 1: nuqkUJudasqRzaQCHxBekhA363Q.crl (hash: 3AKrfL8xT8OCUm8CxQzw2POVsYZ223JaSsFcUPi9LmE=) 2: 5A7E13CA8C2B11EA90152018C4F9AE02.roa (hash: MZTRHkBugOG0/w9DN1EvKjeTW8go+K0xNXADKQ+F2nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BA6, serialNumber=9EEAA4509B9D6ACA91CDA4021F105E921037EB74 Validity Not Before: Aug 22 20:08:10 2025 GMT Not After : Aug 29 20:08:10 2025 GMT Subject: CN=68a8ce2a-b4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:58:68:c1:c0:35:4a:35:e4:a9:9d:01:a7:9a: 84:71:da:d6:c8:fc:37:34:c6:3a:e2:99:22:3d:5e: 4a:d6:e4:ad:c8:09:35:1b:8d:4a:0c:a2:de:31:dd: ba:0e:13:06:08:4b:dc:97:ae:ba:39:05:04:8a:fd: 05:5e:fe:92:9a:f9:f4:6c:61:76:bf:9e:13:28:e6: 4b:b5:8d:8e:ec:15:bf:6f:ce:ba:a5:75:ed:12:7a: 4f:14:3e:75:1a:62:62:06:42:ff:14:9e:5a:52:bb: e4:e9:6d:11:f8:0e:f4:30:a7:5d:a0:4e:ca:06:03: ea:38:db:e2:b8:d5:60:c9:ae:df:ec:f9:ef:21:61: bb:a9:7a:ca:dc:c9:ec:f8:8d:bb:22:19:c6:10:e3: e3:d3:82:62:a0:ad:a5:10:da:8e:1a:e0:27:86:bd: 80:bd:25:c9:18:4c:76:44:96:05:6c:95:6d:e3:85: 67:2f:62:d5:1c:83:46:f5:d8:57:15:b1:78:cf:9e: c7:d9:18:b7:21:a6:46:2d:ab:04:67:04:50:b8:65: af:43:b1:2c:84:68:1a:41:9c:ba:9c:44:4e:ff:3f: 79:73:e7:5c:ed:c1:12:16:74:58:bc:f1:af:0f:b0: 01:64:92:51:4d:1c:14:6f:01:28:a6:00:de:5a:c6: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DC:1D:86:1C:ED:3E:79:5C:EF:30:E3:60:C3:E5:E9:39:E3:78:CE X509v3 Authority Key Identifier: keyid:9E:EA:A4:50:9B:9D:6A:CA:91:CD:A4:02:1F:10:5E:92:10:37:EB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nuqkUJudasqRzaQCHxBekhA363Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BA6/84DD79E08B7611EA91050743C4F9AE02/nuqkUJudasqRzaQCHxBekhA363Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:23:ea:21:c4:dd:ae:8f:75:3a:7f:25:80:e0:eb:02:73:45: 08:c6:0a:d1:41:35:4e:72:69:bf:49:20:b8:bf:fd:56:61:31: 2d:5c:d4:c9:de:24:37:21:96:8b:0f:ab:33:22:d9:b4:d6:ce: 93:d7:d2:7c:3f:c1:80:67:18:6a:29:23:e6:97:a2:27:c2:48: 6c:d8:6d:b9:af:4b:56:5d:41:6b:89:37:56:cf:7b:7f:67:21: f0:d5:cf:6b:87:fd:83:a6:7e:95:2b:16:8d:ce:6f:b6:bc:f4: 4a:3a:6e:8b:ef:49:f7:8b:e9:4f:32:50:11:01:97:d3:84:e7: 2d:62:dd:c8:8e:8c:a7:1f:a6:c3:5c:34:12:5e:d2:65:f9:69: 53:ad:ae:ff:55:2c:cc:48:14:c1:0e:4f:9c:92:4a:19:09:b2: 3f:ee:fb:87:73:ae:36:58:49:24:fa:2c:50:91:3e:31:b2:cf: 5e:d5:86:65:4a:15:02:13:6a:8e:ab:59:9a:17:47:c3:e1:a6: a4:b5:a4:d6:d2:1e:9a:81:b8:bf:78:07:41:34:fb:f1:6b:33: d1:82:2f:c5:64:ef:ff:d5:f0:36:79:e0:f2:82:fa:5d:f4:d1: 4b:05:2a:d8:c7:ce:67:f8:27:a1:14:61:3a:cd:e0:16:55:6d: 9b:94:bc:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCQTYxMTAvBgNVBAUTKDlFRUFBNDUwOUI5RDZBQ0E5MUNEQTQwMjFGMTA1RTky MTAzN0VCNzQwHhcNMjUwODIyMjAwODEwWhcNMjUwODI5MjAwODEwWjAYMRYwFAYD VQQDEw02OGE4Y2UyYS1iNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFhowcA1SjXkqZ0Bp5qEcdrWyPw3NMY64pkiPV5K1uStyAk1G41KDKLeMd26 DhMGCEvcl666OQUEiv0FXv6Smvn0bGF2v54TKOZLtY2O7BW/b866pXXtEnpPFD51 GmJiBkL/FJ5aUrvk6W0R+A70MKddoE7KBgPqONviuNVgya7f7PnvIWG7qXrK3Mns +I27IhnGEOPj04JioK2lENqOGuAnhr2AvSXJGEx2RJYFbJVt44VnL2LVHING9dhX FbF4z57H2Ri3IaZGLasEZwRQuGWvQ7EshGgaQZy6nERO/z95c+dc7cESFnRYvPGv D7ABZJJRTRwUbwEopgDeWsaUBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGncHYYc 7T55XO8w42DD5ek543jOMB8GA1UdIwQYMBaAFJ7qpFCbnWrKkc2kAh8QXpIQN+t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJBNi84NERENzlFMDhC NzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFzcVJ6YVFDSHhCZWtoQTM2 M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL251cWtVSnVkYXNxUnphUUNIeEJla2hBMzYzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJBNi84NERENzlFMDhCNzYxMUVBOTEwNTA3NDNDNEY5QUUwMi9udXFrVUp1ZGFz cVJ6YVFDSHhCZWtoQTM2M1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPI+ohxN2uj3U6fyWA4OsCc0UIxgrRQTVOcmm/SSC4v/1WYTEtXNTJ 3iQ3IZaLD6szItm01s6T19J8P8GAZxhqKSPml6Inwkhs2G25r0tWXUFriTdWz3t/ ZyHw1c9rh/2Dpn6VKxaNzm+2vPRKOm6L70n3i+lPMlARAZfThOctYt3IjoynH6bD XDQSXtJl+WlTra7/VSzMSBTBDk+ckkoZCbI/7vuHc642WEkk+ixQkT4xss9e1YZl ShUCE2qOq1maF0fD4aaktaTW0h6agbi/eAdBNPvxazPRgi/FZO//1fA2eeDygvpd 9NFLBSrYx85n+CehFGE6zeAWVW2blLxT -----END CERTIFICATE-----Generated at Sun Aug 24 11:14:25 2025 by rpki-client