$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: LRbITyfx6HMIGZ6O9cV8sDcjDP5a1yn8Y5Jopnw0VUk= Subject key identifier: 30:A7:13:64:C7:C2:14:72:A6:B3:C5:B3:02:14:2B:39:FD:71:BE:0B Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 0568 Signing time: Mon 08 Sep 2025 23:27:01 +0000 Manifest this update: Mon 08 Sep 2025 23:27:01 +0000 Manifest next update: Mon 15 Sep 2025 23:27:01 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: 2MVcDTD5f4UvnpczJW80T3mnpNZwcfTfeDeESfzGb/0=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: 68fiXxDRInABMZSnArOz5po2YH5/5mLBsvEHG5ANoNk=) 3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: ZIpPhxn3ZcCbFE5Pdx2VemD1MQNZXD0fX/y2N95QY8k=) 4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: bqDWaQrEnfW4Yr6xAJ8NbzXfe/Eoz2cTSijNep764D8=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: Sep 8 23:27:01 2025 GMT Not After : Sep 15 23:27:01 2025 GMT Subject: CN=68bf6645-72f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:d3:f6:35:95:67:b1:63:b7:32:7e:c2:43: 32:78:5a:22:34:cc:c3:c4:d8:cc:92:e9:4b:04:72: 8c:4d:23:12:2d:43:8e:89:c3:04:10:14:6a:d6:a5: b2:b1:b1:d8:92:82:ae:e1:f1:57:2e:ce:af:d7:92: f3:55:41:ca:59:2d:b9:c7:ef:d9:5f:51:45:06:96: e4:5c:ff:04:95:1c:a3:11:2f:10:fa:9f:2d:3a:2b: af:23:3a:1a:d3:58:1f:92:ca:8e:90:62:dd:07:3d: a8:ee:ff:54:d7:38:be:27:4b:32:49:b3:77:c3:80: 59:06:8d:ef:b6:82:5b:66:a9:86:70:ae:ec:13:ca: b3:fa:b1:2b:1a:20:e5:8c:c4:01:ef:24:d6:8c:50: 22:2a:29:ed:c5:74:0a:ee:75:e4:6f:fd:c5:3f:5c: b7:41:d3:28:e3:7a:2e:29:8c:36:24:24:1a:d1:a3: 2f:55:b3:d4:b2:80:bf:40:72:3d:ac:ef:ca:a4:a2: be:ab:0f:4e:69:b8:f1:2a:88:85:c3:30:f4:1a:01: 3a:f0:8e:68:0c:ab:8f:a7:31:d5:68:3b:05:31:9e: 8d:66:12:1d:73:3c:4d:83:bc:d3:cb:3b:3e:f0:ee: 55:ac:08:54:7f:27:ef:b7:08:59:34:d6:38:06:0f: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:13:64:C7:C2:14:72:A6:B3:C5:B3:02:14:2B:39:FD:71:BE:0B X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cf:1f:1e:13:af:bb:69:d1:be:b1:5e:57:93:8a:47:c3:b3: 2f:4b:7e:00:43:87:24:92:ee:90:1d:cc:7f:90:83:ec:ce:d9: a7:b4:a9:50:65:2f:f1:a7:6a:b3:36:64:65:bd:00:3a:6e:8f: e6:d3:89:cb:ae:59:49:a7:82:b8:a6:f3:06:87:4a:b7:ee:a7: 49:91:27:b0:6b:ab:78:e9:1e:69:42:3c:da:71:01:57:71:13: 7c:2a:f1:34:fb:e2:eb:8a:09:fa:26:73:67:12:de:e7:8b:dd: e1:9f:23:03:1d:9b:8a:0c:64:48:78:6e:0f:00:55:1c:9e:fc: d1:50:e8:9c:2e:e4:83:55:5e:af:f0:d3:1a:b6:2d:1d:70:1c: 4b:2c:f9:a6:22:1a:c6:7c:5a:be:31:65:1a:5f:5a:75:35:65: b8:e3:b3:9b:5d:a4:0b:98:38:26:a3:0c:8b:92:2a:2d:43:8b: ae:8d:f8:3f:d7:ff:4f:f1:61:29:21:b7:71:fb:84:0f:81:be: 46:0d:fe:34:4a:56:20:f7:c8:da:d1:a9:b2:a3:a9:f2:1e:d1: 34:e2:be:91:2d:42:76:6d:4a:cc:ab:c9:74:99:04:53:53:d9: d9:af:85:15:75:0f:f7:ff:5f:f0:72:46:c3:c8:c1:f4:ef:ac: 4c:85:66:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjUwOTA4MjMyNzAxWhcNMjUwOTE1MjMyNzAxWjAYMRYwFAYD VQQDEw02OGJmNjY0NS03MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MbT9jWVZ7FjtzJ+wkMyeFoiNMzDxNjMkulLBHKMTSMSLUOOicMEEBRq1qWy sbHYkoKu4fFXLs6v15LzVUHKWS25x+/ZX1FFBpbkXP8ElRyjES8Q+p8tOiuvIzoa 01gfksqOkGLdBz2o7v9U1zi+J0sySbN3w4BZBo3vtoJbZqmGcK7sE8qz+rErGiDl jMQB7yTWjFAiKintxXQK7nXkb/3FP1y3QdMo43ouKYw2JCQa0aMvVbPUsoC/QHI9 rO/KpKK+qw9OabjxKoiFwzD0GgE68I5oDKuPpzHVaDsFMZ6NZhIdczxNg7zTyzs+ 8O5VrAhUfyfvtwhZNNY4Bg94VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCnE2TH whRyprPFswIUKzn9cb4LMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbzx8eE6+7adG+sV5Xk4pHw7MvS34AQ4ckku6QHcx/kIPsztmntKlQ ZS/xp2qzNmRlvQA6bo/m04nLrllJp4K4pvMGh0q37qdJkSewa6t46R5pQjzacQFX cRN8KvE0++Lrign6JnNnEt7ni93hnyMDHZuKDGRIeG4PAFUcnvzRUOicLuSDVV6v 8NMati0dcBxLLPmmIhrGfFq+MWUaX1p1NWW447ObXaQLmDgmowyLkiotQ4uujfg/ 1/9P8WEpIbdx+4QPgb5GDf40SlYg98ja0amyo6nyHtE04r6RLUJ2bUrMq8l0mQRT U9nZr4UVdQ/3/1/wckbDyMH076xMhWYJ -----END CERTIFICATE-----Generated at Tue Sep 9 19:14:16 2025 by rpki-client