$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: hCeFLkYomnDc6KInBVDNd6VmapNflSdYE7E5W8fDsSg= Subject key identifier: 95:E3:61:0A:C7:D2:05:47:19:35:89:DB:E7:1C:E4:2F:92:F2:02:55 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: 0101 Signing time: Fri 19 Sep 2025 05:41:08 +0000 Manifest this update: Fri 19 Sep 2025 05:41:07 +0000 Manifest next update: Fri 26 Sep 2025 05:41:07 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: pgXs7z7n4yIIoptNWulp7Zip2uXHixFiEYDxZmLcJ7I=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Sep 19 05:41:07 2025 GMT Not After : Sep 26 05:41:07 2025 GMT Subject: CN=68ccecf3-dc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:58:c1:08:09:1b:06:81:7a:4a:39:a0:f9: 67:ea:74:d4:26:9d:49:4b:a4:03:62:f7:c9:82:79: 8c:f4:cf:5b:2f:44:aa:39:37:5d:9d:ee:60:da:b5: 11:b5:1a:33:a8:94:5b:46:35:f0:db:25:1e:ec:07: a8:6a:8e:02:22:2a:70:78:ec:e6:09:95:7b:bf:f3: 16:5e:e4:27:19:9f:af:1c:f9:99:b6:16:87:59:c5: 6e:f4:37:f1:28:8b:cb:f3:55:3d:0b:3d:23:e3:00: 77:4c:b1:10:9a:c6:67:25:65:7b:65:0a:76:d3:da: 91:20:ed:09:60:9a:29:76:fe:14:82:6c:dd:20:2b: 3f:16:f6:f4:a9:a5:8b:e0:ed:0f:7a:3c:e3:b9:03: e6:e8:94:64:a2:fd:94:10:56:bc:2c:7d:7e:6e:eb: db:4f:b6:b8:77:0c:f2:1d:1a:cb:17:64:4c:72:aa: 96:13:bd:72:8e:c6:22:da:b8:be:8c:16:13:b1:f1: 4d:c3:ac:63:61:90:48:ab:1d:57:42:3e:2c:40:10: 5e:8d:22:7b:c4:e9:44:4f:be:78:36:1d:1a:1b:12: fa:f9:4f:1c:a8:27:a8:65:b7:91:90:d3:c3:fe:8f: bf:70:e6:7a:f9:bd:7d:d1:42:20:9c:f5:21:ff:9a: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:61:0A:C7:D2:05:47:19:35:89:DB:E7:1C:E4:2F:92:F2:02:55 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4a:dd:3f:aa:7a:c9:11:3d:29:13:86:2f:1b:ae:05:db:6a: be:60:90:a2:25:03:5e:17:47:0a:67:63:0a:01:fa:e9:d2:57: 79:93:82:da:7b:62:c4:73:ff:07:1f:fb:bd:43:8d:45:6b:55: b9:6c:34:93:8b:14:9a:95:a3:9f:f7:b7:75:17:35:25:66:2d: dc:f1:83:d7:a2:aa:a5:f7:d3:ed:af:62:90:ec:7f:38:fe:de: d3:49:f2:f1:bb:aa:dd:e9:54:9b:c5:96:78:7a:23:a4:6e:78: 02:24:51:73:3b:7c:e4:4a:22:89:96:92:f1:8c:16:d8:f2:e5: 32:38:db:96:d2:0a:64:7f:d5:cb:aa:ff:80:ab:44:3c:a5:9c: bc:e3:14:ab:be:94:c8:b6:bf:04:27:b0:76:f2:d9:b6:57:0e: 30:7a:af:97:5a:a0:23:c9:9a:bf:f7:27:6b:55:fa:36:9d:41: 06:d2:41:a6:21:ec:ad:f7:b7:58:44:7b:0e:f3:34:91:91:aa: 70:f6:43:d3:44:a2:18:8a:c8:de:3c:27:8a:6c:db:f6:ed:d4: ce:06:33:77:f0:fe:bd:5c:98:de:a6:bd:2e:89:c6:d3:d5:de: 4c:a6:b5:b8:c5:66:9c:71:8e:79:46:ce:97:7f:0f:fc:df:70: 78:e2:36:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUwOTE5MDU0MTA3WhcNMjUwOTI2MDU0MTA3WjAYMRYwFAYD VQQDEw02OGNjZWNmMy1kYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskpYwQgJGwaBeko5oPln6nTUJp1JS6QDYvfJgnmM9M9bL0SqOTddne5g2rUR tRozqJRbRjXw2yUe7Aeoao4CIipweOzmCZV7v/MWXuQnGZ+vHPmZthaHWcVu9Dfx KIvL81U9Cz0j4wB3TLEQmsZnJWV7ZQp209qRIO0JYJopdv4UgmzdICs/Fvb0qaWL 4O0PejzjuQPm6JRkov2UEFa8LH1+buvbT7a4dwzyHRrLF2RMcqqWE71yjsYi2ri+ jBYTsfFNw6xjYZBIqx1XQj4sQBBejSJ7xOlET754Nh0aGxL6+U8cqCeoZbeRkNPD /o+/cOZ6+b190UIgnPUh/5qkTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXjYQrH 0gVHGTWJ2+cc5C+S8gJVMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnSt0/qnrJET0pE4YvG64F22q+YJCiJQNeF0cKZ2MKAfrp0ld5k4La e2LEc/8HH/u9Q41Fa1W5bDSTixSalaOf97d1FzUlZi3c8YPXoqql99Ptr2KQ7H84 /t7TSfLxu6rd6VSbxZZ4eiOkbngCJFFzO3zkSiKJlpLxjBbY8uUyONuW0gpkf9XL qv+Aq0Q8pZy84xSrvpTItr8EJ7B28tm2Vw4weq+XWqAjyZq/9ydrVfo2nUEG0kGm Ieyt97dYRHsO8zSRkapw9kPTRKIYisjePCeKbNv27dTOBjN38P69XJjepr0uicbT 1d5MprW4xWaccY55Rs6Xfw/833B44jZD -----END CERTIFICATE-----Generated at Fri Sep 19 10:07:32 2025 by rpki-client