$ rpki-client -vvf rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft File: nLXKgHLiac4FVaYAsheSDrnhrE8.mft (raw, json) Hash identifier: ThY6SS7+9KUGdL4WR4IMTjPCAcjMyoML1YXFZf3KfFw= Subject key identifier: A7:18:9B:8E:DB:08:85:85:7D:68:B0:D6:41:97:0B:BA:20:41:DC:F9 Authority key identifier: 9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F Certificate issuer: /CN=A91F38FD/serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft Manifest number: 014F Signing time: Thu 03 Jul 2025 04:21:51 +0000 Manifest this update: Thu 03 Jul 2025 04:21:51 +0000 Manifest next update: Thu 10 Jul 2025 04:21:51 +0000 Files and hashes: 1: nLXKgHLiac4FVaYAsheSDrnhrE8.crl (hash: VNTyXBrsKHj8AGZLKF/jr1odbbbLNNAOhgjcBFl5Rjg=) 2: 0B421064DD2411EFA5DECA6CC4F9AE02.roa (hash: iPG0hpzDRBKyvVm+6Qkbihdh+5UI+wgroCyFHLS8kTU=) 3: 36020660DD2411EF9F4FB925C4F9AE02.roa (hash: j9Po9H6BwdSd4+LJVOpstqA6CfVsNzASbprlAvb5WDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F38FD, serialNumber=9CB5CA8072E269CE0555A600B217920EB9E1AC4F Validity Not Before: Jul 3 04:21:51 2025 GMT Not After : Jul 10 04:21:51 2025 GMT Subject: CN=6866055f-0f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:ef:db:e3:c2:f7:1f:43:40:f7:0a:a7:86: ca:ed:c0:50:24:99:1a:0e:c8:6e:8b:63:99:07:ab: ee:ef:1d:0a:ce:f9:b1:37:92:c4:04:05:a1:b9:fc: 37:0c:94:10:f1:16:55:ff:8c:89:b6:a6:6e:9d:16: 49:8f:10:d3:f1:93:f6:ce:b0:c6:9b:ce:9a:c1:82: 47:d3:6f:9a:88:45:fb:62:79:07:30:04:f8:a3:c1: f2:0c:f7:7d:47:ca:bb:ff:2e:85:13:f2:aa:61:63: 37:ed:b0:81:f1:52:fd:f7:16:5b:28:60:00:99:a6: 05:6c:9f:32:df:42:c1:a1:0b:dc:aa:70:62:6e:4f: 36:36:5f:de:ed:96:47:19:2d:03:ab:97:58:45:88: e8:75:23:7b:a0:aa:5d:e3:27:99:2f:1e:e6:87:77: aa:08:56:eb:97:35:de:0a:3c:52:1d:70:59:fa:c6: 54:25:8c:bb:c1:52:6e:be:41:41:54:a6:92:ec:a5: d0:34:9c:25:c5:6e:3d:f9:9f:19:71:88:35:74:9f: 6f:ec:49:96:2e:a2:b4:cc:5e:27:1c:dc:72:bf:b3: 6d:4a:d8:68:c4:c4:eb:41:61:fc:75:5d:ca:54:be: 16:4f:6a:7c:df:cb:90:5b:d9:02:6a:9a:79:2c:7d: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:18:9B:8E:DB:08:85:85:7D:68:B0:D6:41:97:0B:BA:20:41:DC:F9 X509v3 Authority Key Identifier: keyid:9C:B5:CA:80:72:E2:69:CE:05:55:A6:00:B2:17:92:0E:B9:E1:AC:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLXKgHLiac4FVaYAsheSDrnhrE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F38FD/A5A6F37A61F811EE9F79401AC4F9AE02/nLXKgHLiac4FVaYAsheSDrnhrE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e1:8f:c3:3f:d9:20:0d:fb:a2:f6:a0:ff:ad:38:78:e8:87: 36:95:f7:7f:8b:15:a1:88:1e:2c:b6:13:56:fe:32:8e:64:2b: ff:ba:8e:d4:2d:81:7b:b4:21:2e:bb:b6:e4:4e:86:4c:cc:67: 91:29:ff:68:42:23:95:58:98:c2:02:c5:9d:75:cb:ce:6e:9f: 1e:f5:9a:52:2e:fc:7d:26:a9:c2:37:1b:9a:2d:c7:31:06:f5: e8:ae:35:02:5d:6c:4f:0d:5c:64:fd:6f:11:52:7f:3d:d8:3b: 51:9c:05:3c:5b:07:c3:e8:64:2a:c7:73:b9:a3:b3:91:e4:a5: 31:0d:35:e7:6c:91:12:5f:26:90:94:dd:da:b1:62:de:f3:b7: 12:fa:06:9a:aa:be:3a:20:93:d1:fc:48:63:e1:f7:d0:c0:16: 55:ac:28:ce:2e:86:5b:52:08:5e:59:92:62:d1:fc:5e:9c:a2: df:1d:44:35:d4:07:fe:d3:65:24:84:b7:14:6f:a5:3e:62:da: 00:af:ff:98:db:c1:07:99:b9:b8:0e:31:5f:59:d7:34:56:08: bb:fa:3c:fb:28:30:4c:d2:0b:ac:d9:d9:d3:ce:23:9f:87:96: dc:7c:94:6d:c1:68:53:74:6e:fe:ac:46:81:0d:79:4b:1a:0f: 57:e9:40:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4RkQxMTAvBgNVBAUTKDlDQjVDQTgwNzJFMjY5Q0UwNTU1QTYwMEIyMTc5MjBF QjlFMUFDNEYwHhcNMjUwNzAzMDQyMTUxWhcNMjUwNzEwMDQyMTUxWjAYMRYwFAYD VQQDEw02ODY2MDU1Zi0wZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxXv2+PC9x9DQPcKp4bK7cBQJJkaDshui2OZB6vu7x0KzvmxN5LEBAWhufw3 DJQQ8RZV/4yJtqZunRZJjxDT8ZP2zrDGm86awYJH02+aiEX7YnkHMAT4o8HyDPd9 R8q7/y6FE/KqYWM37bCB8VL99xZbKGAAmaYFbJ8y30LBoQvcqnBibk82Nl/e7ZZH GS0Dq5dYRYjodSN7oKpd4yeZLx7mh3eqCFbrlzXeCjxSHXBZ+sZUJYy7wVJuvkFB VKaS7KXQNJwlxW49+Z8ZcYg1dJ9v7EmWLqK0zF4nHNxyv7NtSthoxMTrQWH8dV3K VL4WT2p838uQW9kCapp5LH1rWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcYm47b CIWFfWiw1kGXC7ogQdz5MB8GA1UdIwQYMBaAFJy1yoBy4mnOBVWmALIXkg654axP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzhGRC9BNUE2RjM3QTYx RjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFjNEZWYVlBc2hlU0Rybmhy RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MWEtnSExpYWM0RlZhWUFzaGVTRHJuaHJFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzhGRC9BNUE2RjM3QTYxRjgxMUVFOUY3OTQwMUFDNEY5QUUwMi9uTFhLZ0hMaWFj NEZWYVlBc2hlU0RybmhyRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4Y/DP9kgDfui9qD/rTh46Ic2lfd/ixWhiB4sthNW/jKOZCv/uo7U LYF7tCEuu7bkToZMzGeRKf9oQiOVWJjCAsWddcvObp8e9ZpSLvx9JqnCNxuaLccx BvXorjUCXWxPDVxk/W8RUn892DtRnAU8WwfD6GQqx3O5o7OR5KUxDTXnbJESXyaQ lN3asWLe87cS+gaaqr46IJPR/Ehj4ffQwBZVrCjOLoZbUgheWZJi0fxenKLfHUQ1 1Af+02UkhLcUb6U+YtoAr/+Y28EHmbm4DjFfWdc0Vgi7+jz7KDBM0gus2dnTziOf h5bcfJRtwWhTdG7+rEaBDXlLGg9X6UAA -----END CERTIFICATE-----Generated at Thu Jul 3 08:30:02 2025 by rpki-client