$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft File: nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json) Hash identifier: bRtM0/G66FNM9WK+LOEG5hVv6PwIJD58oXmRsU2pVkY= Subject key identifier: D6:20:C2:87:9B:C5:DC:81:1C:FB:20:3B:66:2B:08:7C:96:9E:BA:80 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft Manifest number: 0167 Signing time: Fri 05 Sep 2025 04:43:51 +0000 Manifest this update: Fri 05 Sep 2025 04:43:51 +0000 Manifest next update: Fri 12 Sep 2025 04:43:51 +0000 Files and hashes: 1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: RMuv2n0odcTBwrah1WYQFKCjbGXFFzAPTf0AVBBb3No=) 2: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: KOUKQ6BoYe+OZvts9QDaZtXw/6SYWRIeerxskHjMAvw=) 3: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: H7vVzWCwUc4gHrSDyxvt/Abb/5bSd+LGYG3bv6YBZ6Q=) 4: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: T3LJotaESWHFF09iX5g1WTlmIxWJcjLGAaC0q00LC9A=) 5: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: lAFnFIzcRDVgDsSYcjZRPgQLtWezbOK+1/I57oP5hYQ=) 6: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: iJAvuEQuZJZzuKlMozj/voZPn9Nd6pZK++lpcpudEMw=) 7: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: kOYdujebZuJtzPQYq/KrU4LAvGLUwAviwH7iInIzQIw=) 8: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: g1HOTpLTf3sk5gSzo54dPs52/QkaTA4XgGi9Wow0trs=) 9: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: w8uUD+FE/qLP77HxuP2e7CVi5lI4nhNhSCuDldSdTWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Sep 5 04:43:51 2025 GMT Not After : Sep 12 04:43:51 2025 GMT Subject: CN=68ba6a87-0fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:21:36:f3:c0:3e:87:17:26:6c:ec:d8:1d: 80:59:ac:56:f1:7e:cb:7a:60:ee:0b:76:08:de:95: c8:bf:4d:d3:b2:d8:07:c1:9d:ae:f2:3b:82:29:80: fb:73:a9:fe:f3:e0:f9:72:f1:f4:bf:9b:b8:28:e8: 07:25:ba:ef:80:88:b4:10:8c:80:38:8f:a1:25:d6: a3:dd:03:72:66:69:d8:56:6f:db:04:36:ba:de:7a: cd:25:15:fe:b2:1f:14:da:68:a7:ce:9a:9c:9c:ae: e6:a8:ea:49:48:d4:46:cd:75:c3:bc:93:5b:f8:92: af:1f:82:5d:1d:ea:f9:55:6f:1d:27:72:16:f2:41: 85:5a:13:b3:0e:20:7f:53:0d:3d:35:62:02:53:b1: 77:ab:57:39:0f:8b:35:63:85:fc:e2:3c:cd:80:bd: 64:1f:79:a3:e0:9b:f8:1d:dd:04:94:42:d9:3d:cf: 8e:6a:7c:ef:cf:43:22:ca:2d:af:a4:8e:a2:30:a4: 35:5c:36:d3:3b:96:23:de:8c:68:fa:b6:c2:6b:5c: 59:c3:33:ed:c9:17:92:4e:9f:8d:d5:26:d3:0c:16: 6a:14:02:13:6a:23:ec:5f:7b:57:f2:47:22:b4:91: 7f:37:0f:db:e4:9f:98:01:e4:9e:0c:2c:41:42:5f: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:C2:87:9B:C5:DC:81:1C:FB:20:3B:66:2B:08:7C:96:9E:BA:80 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f0:43:ba:20:6d:6e:ff:a7:ce:f0:8c:96:e2:98:40:1e:7d: 12:a7:14:15:e4:5b:13:fd:4d:0e:44:69:d7:00:87:8e:df:af: 7d:ae:5a:fb:2f:45:05:70:e2:d7:d6:36:2d:94:18:8f:1b:05: 16:8e:b6:a7:e1:cf:14:40:b4:ec:7f:28:f6:4a:f4:c5:f6:cd: 40:a5:dc:38:aa:86:cf:6b:fd:e7:f1:e9:49:48:3d:5e:3f:bc: 99:7c:92:73:22:f0:3c:f8:45:6d:ed:c8:3e:1c:8e:8d:6d:fc: 4a:d8:ba:e5:13:7d:f7:39:ed:06:f7:07:d6:53:09:7b:a0:9b: 2f:17:04:22:4c:64:3a:ae:ef:5e:cd:95:f4:ce:70:a2:2b:c9: 19:7c:b4:0f:56:ca:41:3b:b8:cf:76:72:24:c5:f8:c6:47:d6: 63:43:5c:00:46:01:66:8b:8d:10:74:c9:39:59:dc:1e:6b:48: 35:d2:a3:12:b8:75:fd:67:c3:14:e5:01:36:5f:df:e1:4b:ad: 90:fa:b7:c7:a8:76:c4:1c:dc:66:1c:fd:05:80:84:6b:12:a8: 0b:aa:e3:db:51:68:c6:cd:f7:e5:92:e0:9a:6f:e0:77:53:b8: 58:34:2f:30:4c:c7:28:15:6e:dc:fc:c9:22:a7:fd:59:35:c4: 2c:de:f3:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjUwOTA1MDQ0MzUxWhcNMjUwOTEyMDQ0MzUxWjAYMRYwFAYD VQQDEw02OGJhNmE4Ny0wZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6QhNvPAPocXJmzs2B2AWaxW8X7LemDuC3YI3pXIv03TstgHwZ2u8juCKYD7 c6n+8+D5cvH0v5u4KOgHJbrvgIi0EIyAOI+hJdaj3QNyZmnYVm/bBDa63nrNJRX+ sh8U2minzpqcnK7mqOpJSNRGzXXDvJNb+JKvH4JdHer5VW8dJ3IW8kGFWhOzDiB/ Uw09NWICU7F3q1c5D4s1Y4X84jzNgL1kH3mj4Jv4Hd0ElELZPc+Oanzvz0Miyi2v pI6iMKQ1XDbTO5Yj3oxo+rbCa1xZwzPtyReSTp+N1SbTDBZqFAITaiPsX3tX8kci tJF/Nw/b5J+YAeSeDCxBQl+X6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYgwoeb xdyBHPsgO2YrCHyWnrqAMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0 OVJMekJmS3MyMFBONmVUUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo8EO6IG1u/6fO8IyW4phAHn0SpxQV5FsT/U0ORGnXAIeO3699rlr7 L0UFcOLX1jYtlBiPGwUWjran4c8UQLTsfyj2SvTF9s1Apdw4qobPa/3n8elJSD1e P7yZfJJzIvA8+EVt7cg+HI6NbfxK2LrlE333Oe0G9wfWUwl7oJsvFwQiTGQ6ru9e zZX0znCiK8kZfLQPVspBO7jPdnIkxfjGR9ZjQ1wARgFmi40QdMk5Wdwea0g10qMS uHX9Z8MU5QE2X9/hS62Q+rfHqHbEHNxmHP0FgIRrEqgLquPbUWjGzfflkuCab+B3 U7hYNC8wTMcoFW7c/Mkip/1ZNcQs3vMe -----END CERTIFICATE-----Generated at Sat Sep 6 04:59:07 2025 by rpki-client