$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: amTJvB1WRL8zo1Ka1TdFLemmepq4fPKCmJBIDBjsqAI= Subject key identifier: F4:2F:F0:B5:DC:8D:F5:EA:DD:6B:0B:A6:83:C2:1B:D2:27:75:29:7B Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 03EC Signing time: Sat 19 Jul 2025 00:55:50 +0000 Manifest this update: Sat 19 Jul 2025 00:55:50 +0000 Manifest next update: Sat 26 Jul 2025 00:55:50 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: /z4RucWDEiR+hRohjVpSa+sySl0/d3RdyHJlD9xXAgY=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Jul 19 00:55:50 2025 GMT Not After : Jul 26 00:55:50 2025 GMT Subject: CN=687aed16-b5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:12:52:e5:3e:b6:f5:3d:d4:2a:df:97:6f: 0c:ae:ff:6e:ff:58:c0:8d:c7:81:d7:9d:0b:84:cc: 8d:69:34:1f:d7:64:e1:45:92:ee:05:c3:6d:b2:db: d5:ba:da:af:87:dd:d9:65:96:8a:92:ed:d0:d0:b9: 71:25:a7:25:c7:ec:a9:28:ac:e1:61:9b:1e:f7:f1: f6:d4:82:01:4e:6a:3a:72:48:39:29:5f:70:d1:84: a0:76:f7:46:11:e3:e1:0d:1a:f3:48:78:f2:be:2f: 85:13:2d:14:5d:6d:78:c4:03:18:78:82:74:5c:85: d1:60:a8:5b:71:18:c2:21:5a:75:6c:08:78:17:af: 4c:59:a4:1b:d1:49:76:e7:d7:f4:40:19:e8:8e:2d: c3:a1:ae:29:8f:34:2f:11:8b:95:eb:eb:36:ed:72: 29:eb:8b:b0:30:f4:e6:33:9e:c6:1c:20:9b:6a:a6: 32:0b:ae:9d:e2:7f:2b:ee:a8:36:17:25:41:ad:ba: d6:27:02:6c:a2:d4:89:61:bd:da:fa:24:93:fb:1b: 20:4e:ea:77:4f:1e:12:c7:fc:f9:5c:11:a7:bb:50: 21:4e:30:01:fb:40:d4:46:7b:e9:e1:9b:5c:f2:b5: 50:c3:72:76:f9:8a:69:d1:55:1f:6b:db:da:a9:17: b0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2F:F0:B5:DC:8D:F5:EA:DD:6B:0B:A6:83:C2:1B:D2:27:75:29:7B X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d0:92:b1:3c:62:5f:60:29:e0:fa:56:e1:05:6f:ff:bd:9f: af:20:1d:bb:a3:d4:cf:a6:e9:98:a6:21:b3:0d:9b:e5:c9:0d: 7d:3c:02:a2:c7:d3:1e:02:8c:d1:be:55:be:dd:d1:0e:07:a6: 0a:b1:17:32:5b:15:68:b0:2a:d3:74:e1:52:13:65:a4:41:48: e9:c8:07:2a:84:88:53:89:fa:6d:21:8f:22:e5:b6:8b:1c:3f: 6c:29:ec:5b:e7:7f:99:1b:0e:9c:74:ec:00:16:87:d4:9c:0c: 5f:60:e1:4b:a3:5e:2e:c4:29:8a:94:63:08:ee:4c:cb:f8:3e: c8:69:f0:0a:a9:9a:97:7d:75:30:5c:c6:8c:6a:3d:79:4a:56: 3c:89:36:20:3b:01:63:37:fa:59:65:09:b3:e4:a5:8b:4b:15: 0e:4d:a4:86:a6:0f:c6:ab:da:4b:6f:53:18:9b:50:94:c4:14: 19:c9:5e:60:ee:ef:9c:37:9d:4d:9b:fa:0b:a4:9e:36:eb:97: 63:4b:ba:0d:9f:ae:af:53:83:12:d6:94:6c:3e:bc:1e:0a:af: 61:92:76:98:a0:cc:d1:fe:d1:21:91:73:70:e9:32:39:6e:44: 8d:c1:ab:40:f0:2a:fe:19:7f:5b:e0:56:db:f8:ba:cd:55:b3: 41:e7:5f:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwNzE5MDA1NTUwWhcNMjUwNzI2MDA1NTUwWjAYMRYwFAYD VQQDEw02ODdhZWQxNi1iNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ESUuU+tvU91Crfl28Mrv9u/1jAjceB150LhMyNaTQf12ThRZLuBcNtstvV utqvh93ZZZaKku3Q0LlxJaclx+ypKKzhYZse9/H21IIBTmo6ckg5KV9w0YSgdvdG EePhDRrzSHjyvi+FEy0UXW14xAMYeIJ0XIXRYKhbcRjCIVp1bAh4F69MWaQb0Ul2 59f0QBnoji3Doa4pjzQvEYuV6+s27XIp64uwMPTmM57GHCCbaqYyC66d4n8r7qg2 FyVBrbrWJwJsotSJYb3a+iST+xsgTup3Tx4Sx/z5XBGnu1AhTjAB+0DURnvp4Ztc 8rVQw3J2+Ypp0VUfa9vaqRewOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQv8LXc jfXq3WsLpoPCG9IndSl7MB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA0JKxPGJfYCng+lbhBW//vZ+vIB27o9TPpumYpiGzDZvlyQ19PAKi x9MeAozRvlW+3dEOB6YKsRcyWxVosCrTdOFSE2WkQUjpyAcqhIhTifptIY8i5baL HD9sKexb53+ZGw6cdOwAFofUnAxfYOFLo14uxCmKlGMI7kzL+D7IafAKqZqXfXUw XMaMaj15SlY8iTYgOwFjN/pZZQmz5KWLSxUOTaSGpg/Gq9pLb1MYm1CUxBQZyV5g 7u+cN51Nm/oLpJ4265djS7oNn66vU4MS1pRsPrweCq9hknaYoMzR/tEhkXNw6TI5 bkSNwatA8Cr+GX9b4Fbb+LrNVbNB51/z -----END CERTIFICATE-----Generated at Sun Jul 20 11:43:15 2025 by rpki-client