$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft File: rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft (raw, json) Hash identifier: te1uZmP2l7RyNMxcEOBPpyb7ijungWbPlgytYTsgfDY= Subject key identifier: 72:97:1A:E5:33:22:B2:C0:8F:37:E4:CD:EE:A3:EE:0D:4D:CB:86:6C Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 05:21:21 +0000 Manifest this update: Sat 23 Aug 2025 05:21:20 +0000 Manifest next update: Sat 30 Aug 2025 05:21:20 +0000 Files and hashes: 1: rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl (hash: thaHie8APat3RC48zN6DtW/IfA7eoHfFBEkaqPBsW/4=) 2: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (hash: 8EM5Tdb1aWYr9WLpldVjADU+t0zk8U3aJcreE19Ronc=) 3: DD267C66316511EFB284A421C4F9AE02.roa (hash: eSuqYXVr/sRMfsql4kma/aB/fn6WdOxL+gBS/uO7fxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: Aug 23 05:21:20 2025 GMT Not After : Aug 30 05:21:20 2025 GMT Subject: CN=68a94fd1-1c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:7d:a4:66:4c:3d:15:0d:d0:12:78:9e:0f: d2:59:63:bb:d6:2d:9f:ec:04:46:8e:e7:8d:08:a5: f0:3b:b1:a9:0d:97:2c:e9:53:1a:97:4d:bc:02:1a: ba:41:3e:35:cc:64:26:85:9a:87:41:d0:da:c7:a2: 95:6d:11:f3:59:41:2a:0d:ae:27:67:ba:6d:8a:08: 51:a1:8a:43:dd:02:79:66:44:9e:f2:c0:31:b0:93: 40:fe:6f:d3:5f:a5:f5:5d:2b:7c:7b:58:6b:22:97: bc:5b:be:42:20:4b:9e:4d:a9:50:54:d0:f5:c2:2e: b4:5c:a3:1c:68:2c:1b:ab:46:63:44:e8:db:dd:b5: 8a:a6:22:6f:e5:58:77:a9:4d:9d:a1:ff:66:41:d3: 5a:c5:34:8f:cc:16:dc:33:86:41:e4:4a:b4:96:01: cd:6f:54:d4:eb:9d:67:22:91:01:03:bd:d1:f5:19: b1:d5:19:09:62:17:56:55:53:30:b3:db:6c:8b:b2: 0e:2e:cc:7a:80:e8:cd:04:6c:f4:a7:34:f1:39:9f: 79:42:14:2b:62:0c:c5:7f:bf:d3:df:10:f3:ba:bb: 65:5f:e1:f0:6a:49:a9:b5:9c:50:00:f0:74:9c:21: 14:7b:6d:5c:1d:37:94:21:ee:34:83:1a:95:90:d3: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:1A:E5:33:22:B2:C0:8F:37:E4:CD:EE:A3:EE:0D:4D:CB:86:6C X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c5:2e:9c:fe:f6:f9:1b:de:ae:7b:bd:af:21:ea:2e:84:36: 67:92:08:56:8b:50:8b:e8:b5:18:7e:8a:70:4b:4b:54:ce:c4: cb:66:2f:e8:b2:b4:b1:15:47:ef:55:d8:14:1b:75:43:f6:bc: 91:43:7a:09:12:97:75:5b:12:14:09:a0:d1:9b:99:49:09:e5: 55:a2:d0:c8:dd:f1:42:39:e1:87:e7:9e:64:45:57:bc:8f:d2: be:c8:01:f5:90:06:b7:5f:aa:0a:5a:7d:7d:6d:62:74:5d:38: 7d:db:aa:4b:c1:6b:ba:2d:1b:d8:a6:ed:17:82:24:45:f3:32: 3a:63:6b:9a:ff:ab:a7:c8:90:c1:a3:9a:fa:6e:46:f8:d5:58: c2:25:22:d3:63:6e:ad:b1:40:d8:5d:80:c5:4c:42:e6:f5:a1: 3b:49:de:46:af:7a:67:6c:e8:f4:84:f0:da:d3:c0:d0:9a:b8: 0b:fe:5b:6b:5f:57:15:f8:c6:2a:3b:91:3d:4f:c4:6d:60:b4: 67:d5:5b:7e:31:34:46:f4:de:0f:32:18:bd:cd:e7:6e:06:d6: 09:4b:72:b1:10:4a:85:c8:0f:0e:ee:62:66:5b:db:a2:2f:f9: 8f:48:0d:d4:ba:f0:a9:b7:ec:f8:56:95:3c:87:0c:6b:15:4f: 59:7a:a0:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwODIzMDUyMTIwWhcNMjUwODMwMDUyMTIwWjAYMRYwFAYD VQQDEw02OGE5NGZkMS0xYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLZ9pGZMPRUN0BJ4ng/SWWO71i2f7ARGjueNCKXwO7GpDZcs6VMal028Ahq6 QT41zGQmhZqHQdDax6KVbRHzWUEqDa4nZ7ptighRoYpD3QJ5ZkSe8sAxsJNA/m/T X6X1XSt8e1hrIpe8W75CIEueTalQVND1wi60XKMcaCwbq0ZjROjb3bWKpiJv5Vh3 qU2dof9mQdNaxTSPzBbcM4ZB5Eq0lgHNb1TU651nIpEBA73R9Rmx1RkJYhdWVVMw s9tsi7IOLsx6gOjNBGz0pzTxOZ95QhQrYgzFf7/T3xDzurtlX+HwakmptZxQAPB0 nCEUe21cHTeUIe40gxqVkNM62QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKXGuUz IrLAjzfkze6j7g1Ny4ZsMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTM1My8wODc1RTY0ODA1QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0ps ZmhMUGtUQWNGZzhkUE5Mek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGxS6c/vb5G96ue72vIeouhDZnkghWi1CL6LUYfopwS0tUzsTLZi/o srSxFUfvVdgUG3VD9ryRQ3oJEpd1WxIUCaDRm5lJCeVVotDI3fFCOeGH555kRVe8 j9K+yAH1kAa3X6oKWn19bWJ0XTh926pLwWu6LRvYpu0XgiRF8zI6Y2ua/6unyJDB o5r6bkb41VjCJSLTY26tsUDYXYDFTELm9aE7Sd5Gr3pnbOj0hPDa08DQmrgL/ltr X1cV+MYqO5E9T8RtYLRn1Vt+MTRG9N4PMhi9zeduBtYJS3KxEEqFyA8O7mJmW9ui L/mPSA3UuvCpt+z4VpU8hwxrFU9ZeqB+ -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:25 2025 by rpki-client