$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: Pf0v7n3EY0vZ7WhmaFb7gH/Nq2CRYtU7F1H+bLydv0M= Subject key identifier: DA:A3:0D:BF:7D:4D:C8:17:63:2F:72:A3:2D:15:3C:26:74:EB:6A:93 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 0169 Signing time: Sat 23 Aug 2025 04:06:28 +0000 Manifest this update: Sat 23 Aug 2025 04:06:28 +0000 Manifest next update: Sat 30 Aug 2025 04:06:28 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: 8bg4cW5vuKuz3bYlydHarR8MpVDInesEBLagK3F7czw=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Aug 23 04:06:28 2025 GMT Not After : Aug 30 04:06:28 2025 GMT Subject: CN=68a93e44-f8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:d0:34:51:c8:74:66:a2:33:59:09:49:50: 66:47:de:f6:6e:96:89:86:e0:8e:36:20:08:ba:a9: e1:c6:06:ae:da:a6:44:48:6b:5d:a6:e8:f5:1d:11: ed:ed:f9:e6:27:9e:c6:17:cc:8a:39:b1:1e:68:9e: 16:1e:be:d3:63:dd:e4:32:00:42:ac:7f:79:aa:0d: c5:55:a9:cf:d7:45:bd:53:92:f2:1f:af:c2:54:bc: b8:9a:c9:3a:69:2f:1c:6c:6a:70:f0:53:8a:25:00: 1c:28:ec:f3:9b:3c:b6:f0:dd:b4:2d:53:38:69:f2: 95:f5:cc:5f:a0:a8:8f:18:e8:e4:f5:ae:79:90:6e: a3:63:de:d9:a2:66:1d:30:15:e3:cb:5a:67:3a:9d: dd:a5:be:5b:98:8d:c7:a2:48:bc:82:c3:26:02:de: d9:2d:d9:cc:3d:a7:7a:fe:3f:b2:9c:0f:30:0a:a1: 25:0e:e3:9a:ce:16:ce:46:2e:f3:f8:48:a7:6c:ef: a6:81:2c:4c:ab:e9:2f:f8:2a:95:cc:07:2b:7b:1a: fd:8d:73:04:e6:0b:8e:18:a8:3e:a1:42:7c:a0:8e: 4c:36:e5:cb:c2:7b:75:e5:b1:d6:39:91:88:b5:f9: c9:35:3d:1b:e5:2b:2a:1d:57:93:ff:1d:86:1b:40: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A3:0D:BF:7D:4D:C8:17:63:2F:72:A3:2D:15:3C:26:74:EB:6A:93 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ee:a5:75:b8:fe:c3:30:b1:a8:b2:ba:62:32:2a:84:39:97: 7f:6b:30:6a:c6:8f:b5:f7:55:f0:7a:4b:14:e2:6d:b5:e5:b7: 91:e4:e3:f5:ec:88:e3:ac:d1:6b:36:c3:24:60:b9:71:6b:60: 4e:3d:4a:77:69:15:46:df:7c:84:ef:83:90:47:42:c5:fa:eb: 62:c1:0d:0f:19:4b:fd:1c:7d:66:bc:74:c4:7e:72:4a:e0:08: 77:97:85:71:5e:31:3c:47:1d:8e:2a:1b:e2:5a:7a:78:4f:67: e8:94:7b:66:4c:22:cc:d2:f1:1f:c7:07:9d:37:1f:06:de:99: 2c:74:56:b3:02:ed:26:60:61:3f:c8:52:18:2e:20:ba:99:05: f5:ef:64:8e:16:0e:85:6c:a7:91:37:3a:42:8b:50:b0:fd:b8: d1:a2:3f:5d:9e:0c:14:45:ef:71:52:cc:84:61:df:af:92:0e: ad:45:f2:6f:6b:d2:38:b9:de:85:d8:8e:56:2e:8e:2b:0d:6f: 44:03:f2:41:4b:bf:50:0a:9a:e7:3d:57:09:f2:db:f8:5d:0e: ad:b7:75:69:f0:1d:2f:17:32:4a:28:91:ab:19:0f:0d:e4:9a: e0:f4:21:62:cf:f3:ae:e1:d0:a7:cc:5a:33:7d:c5:95:8a:ed: ad:9e:08:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwODIzMDQwNjI4WhcNMjUwODMwMDQwNjI4WjAYMRYwFAYD VQQDEw02OGE5M2U0NC1mOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpbQNFHIdGaiM1kJSVBmR972bpaJhuCONiAIuqnhxgau2qZESGtdpuj1HRHt 7fnmJ57GF8yKObEeaJ4WHr7TY93kMgBCrH95qg3FVanP10W9U5LyH6/CVLy4msk6 aS8cbGpw8FOKJQAcKOzzmzy28N20LVM4afKV9cxfoKiPGOjk9a55kG6jY97ZomYd MBXjy1pnOp3dpb5bmI3Hoki8gsMmAt7ZLdnMPad6/j+ynA8wCqElDuOazhbORi7z +EinbO+mgSxMq+kv+CqVzAcrexr9jXME5guOGKg+oUJ8oI5MNuXLwnt15bHWOZGI tfnJNT0b5SsqHVeT/x2GG0CgHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqjDb99 TcgXYy9yoy0VPCZ062qTMB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn7qV1uP7DMLGosrpiMiqEOZd/azBqxo+191XweksU4m215beR5OP1 7IjjrNFrNsMkYLlxa2BOPUp3aRVG33yE74OQR0LF+utiwQ0PGUv9HH1mvHTEfnJK 4Ah3l4VxXjE8Rx2OKhviWnp4T2folHtmTCLM0vEfxwedNx8G3pksdFazAu0mYGE/ yFIYLiC6mQX172SOFg6FbKeRNzpCi1Cw/bjRoj9dngwURe9xUsyEYd+vkg6tRfJv a9I4ud6F2I5WLo4rDW9EA/JBS79QCprnPVcJ8tv4XQ6tt3Vp8B0vFzJKKJGrGQ8N 5Jrg9CFiz/Ou4dCnzFozfcWViu2tngij -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:02 2025 by rpki-client