$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft File: nhW8ueM67e2saArIyYFuEVkFyiw.mft (raw, json) Hash identifier: x/TUxoIEsUParTMOgKS/djPOD3jdXhs3bfzlOLXw2+g= Subject key identifier: 87:99:67:69:CC:1B:68:05:2F:72:02:40:38:EE:51:B0:F4:96:85:55 Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 170C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft Manifest number: 16FF Signing time: Fri 22 Aug 2025 16:45:08 +0000 Manifest this update: Fri 22 Aug 2025 16:45:07 +0000 Manifest next update: Fri 29 Aug 2025 16:45:07 +0000 Files and hashes: 1: nhW8ueM67e2saArIyYFuEVkFyiw.crl (hash: nrTk/7nSXy99twUFOjeRbCh3mmHLqVG4XRbibWcChMk=) 2: 7A7A6AC6234311EA90D15227C4F9AE02.roa (hash: inLOYpzfiQRyaW4Jx9DTFdqEkju4HPJ5ZYoO4gNZ1PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5900 (0x170c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Aug 22 16:45:07 2025 GMT Not After : Aug 29 16:45:07 2025 GMT Subject: CN=68a89e94-4a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:ae:fe:12:95:45:5a:e2:76:54:76:44:9c: 8b:68:46:82:69:00:d3:d0:04:01:b4:3b:31:0a:bc: d3:8d:a5:e1:65:79:65:30:1d:0e:dc:2c:a2:e2:e9: 7c:af:1c:1b:27:84:57:7d:c2:e1:28:89:37:72:1e: 19:6e:55:f7:b0:a8:09:98:36:4b:cd:25:6a:c4:3f: 8e:72:be:88:57:a8:0a:c1:80:b0:f0:f6:17:08:1c: cd:92:6c:e1:7b:40:55:03:1a:04:e1:d9:c8:b7:a2: 77:14:4f:d6:e7:b2:61:b6:95:9b:29:01:51:28:a0: db:45:63:cb:c0:57:8c:5f:40:0e:0c:63:ed:2c:78: fb:ae:3a:70:4c:24:8a:90:92:f9:e9:73:04:37:99: b1:75:f7:45:cf:20:23:49:de:e7:12:cb:32:9e:4d: 6d:94:fc:8d:63:d3:3b:ed:93:7f:5b:c4:c8:3d:1a: 13:60:a5:49:2b:2e:2a:c9:3c:80:e5:e7:69:be:5b: 4a:6a:5e:27:41:83:23:6c:19:8d:c7:ff:00:ed:34: bd:86:b2:4d:88:04:eb:74:0d:f3:fb:d9:56:67:ef: d8:c6:50:02:91:ee:34:b4:c2:9a:53:5e:93:a5:23: 89:f3:bd:ef:d2:c5:ef:ad:5c:d7:93:7b:ae:68:eb: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:99:67:69:CC:1B:68:05:2F:72:02:40:38:EE:51:B0:F4:96:85:55 X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:60:b8:72:b3:52:7c:3b:0e:62:8d:0f:a9:0c:02:e3:50:8e: 42:9a:dc:38:83:6a:72:5c:35:47:61:27:e8:90:65:a7:44:ea: 69:60:69:bc:0e:5d:6b:6d:4d:8c:00:09:db:b3:fb:00:ac:01: c6:73:13:44:b6:6c:26:6b:ae:45:93:98:35:2b:b0:0b:2b:87: 7a:92:16:94:ab:a4:61:8e:97:8e:b6:5a:08:8d:a7:a6:89:1c: 65:af:99:ee:e9:7b:4e:16:28:f4:51:7a:09:6c:11:a2:46:1d: e0:d7:f1:64:8b:34:f5:72:49:85:f3:43:e7:83:de:65:38:7a: f6:a1:24:d9:99:4a:6a:82:82:1e:60:e4:24:2b:07:ee:ef:ec: a0:ac:66:6e:b3:01:ff:58:0d:36:cf:11:b4:1c:89:da:6f:90: 3a:8c:0e:6f:07:13:95:1e:32:c4:c4:91:e6:a7:00:43:8d:0c: 33:50:e9:36:9f:4b:4a:e8:82:7b:eb:12:44:f3:6e:c6:b8:35: c4:7a:f3:f8:c7:ac:52:23:5a:66:fd:c5:61:20:0b:f3:5f:fe: 8b:24:30:fa:e8:96:26:01:f2:bb:05:3b:21:c9:c2:39:4a:e1: ac:a9:22:38:fb:94:3f:97:e7:3a:45:b2:da:bd:45:02:c3:8d: ad:11:57:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjUwODIyMTY0NTA3WhcNMjUwODI5MTY0NTA3WjAYMRYwFAYD VQQDEw02OGE4OWU5NC00YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeau/hKVRVridlR2RJyLaEaCaQDT0AQBtDsxCrzTjaXhZXllMB0O3Cyi4ul8 rxwbJ4RXfcLhKIk3ch4ZblX3sKgJmDZLzSVqxD+Ocr6IV6gKwYCw8PYXCBzNkmzh e0BVAxoE4dnIt6J3FE/W57JhtpWbKQFRKKDbRWPLwFeMX0AODGPtLHj7rjpwTCSK kJL56XMEN5mxdfdFzyAjSd7nEssynk1tlPyNY9M77ZN/W8TIPRoTYKVJKy4qyTyA 5edpvltKal4nQYMjbBmNx/8A7TS9hrJNiATrdA3z+9lWZ+/YxlACke40tMKaU16T pSOJ873v0sXvrVzXk3uuaOsfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeZZ2nM G2gFL3ICQDjuUbD0loVVMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUIzQS83REVBRTczNEYzQTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdl MnNhQXJJeVlGdUVWa0Z5aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkYLhys1J8Ow5ijQ+pDALjUI5Cmtw4g2pyXDVHYSfokGWnROppYGm8 Dl1rbU2MAAnbs/sArAHGcxNEtmwma65Fk5g1K7ALK4d6khaUq6RhjpeOtloIjaem iRxlr5nu6XtOFij0UXoJbBGiRh3g1/FkizT1ckmF80Png95lOHr2oSTZmUpqgoIe YOQkKwfu7+ygrGZuswH/WA02zxG0HInab5A6jA5vBxOVHjLExJHmpwBDjQwzUOk2 n0tK6IJ76xJE827GuDXEevP4x6xSI1pm/cVhIAvzX/6LJDD66JYmAfK7BTshycI5 SuGsqSI4+5Q/l+c6RbLavUUCw42tEVfa -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:45 2025 by rpki-client