$ rpki-client -vvf rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft File: NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft (raw, json) Hash identifier: myV4CfTO2KT0LDMjYaf8OYk0dnPnibyPm6HyiapRZ7E= Subject key identifier: 8E:C7:1B:48:48:09:9A:4D:2C:CD:9B:D1:17:85:65:EE:D7:96:8A:FC Authority key identifier: 36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E Certificate issuer: /CN=A912677F/serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Certificate serial: 0A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft Manifest number: 0A96 Signing time: Thu 18 Sep 2025 19:45:58 +0000 Manifest this update: Thu 18 Sep 2025 19:45:58 +0000 Manifest next update: Thu 25 Sep 2025 19:45:58 +0000 Files and hashes: 1: NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl (hash: A0FZVDsCfiZlzSRVwAE2p0Q8j7gDUXxb/Jz8z5K1TXI=) 2: B82FA738111C11EBB805F52AC4F9AE02.roa (hash: EJ4VnRATjOO9ERUrQeU1qxPXlhkEMnZWEHJLCS7gQyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2717 (0xa9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912677F, serialNumber=3664292D4FD2DFF1C8841750FC8379F1945A137E Validity Not Before: Sep 18 19:45:58 2025 GMT Not After : Sep 25 19:45:58 2025 GMT Subject: CN=68cc6176-35a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:b4:bb:04:66:3e:d3:88:9e:95:a4:81:aa: 7d:97:3b:05:78:84:c5:4c:aa:d8:bc:50:ed:24:dc: b7:b6:ad:6c:ae:82:6a:14:ab:ce:e6:40:5b:0f:e2: ec:95:7e:c3:7c:09:c8:05:8c:fa:91:07:97:54:5c: bd:5d:19:12:e4:ed:ca:60:a4:9c:c5:9f:c6:f3:92: 13:88:0f:8b:a4:5f:14:0a:b4:c2:c9:fd:a4:8c:d9: 3c:81:c4:de:fa:65:46:de:a7:4e:cc:75:3f:17:5b: f8:59:80:1e:01:7b:03:02:ea:d6:e8:ef:87:04:06: 51:8a:00:7a:32:ac:3a:93:b4:15:89:ad:40:3f:f6: f1:eb:65:c7:ef:32:6a:7b:3f:5c:93:a1:69:40:f7: bb:58:64:5f:da:ad:65:f8:09:5f:f5:05:c8:ec:02: 86:e4:c5:64:7e:03:6f:71:1b:f7:07:70:af:bc:b8: 63:98:7e:37:37:b5:ab:1c:8e:7e:5a:8f:ca:43:34: d6:0b:80:6a:85:23:4a:7f:55:9c:73:45:fd:be:27: 8b:64:f8:98:d3:6b:c6:96:81:ca:c9:70:60:57:32: f9:e2:8e:7b:58:86:d3:20:8b:e8:28:8a:77:b9:a9: f4:e9:67:f7:a6:d0:d0:ec:7a:66:dd:1f:2d:95:11: 06:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C7:1B:48:48:09:9A:4D:2C:CD:9B:D1:17:85:65:EE:D7:96:8A:FC X509v3 Authority Key Identifier: keyid:36:64:29:2D:4F:D2:DF:F1:C8:84:17:50:FC:83:79:F1:94:5A:13:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NmQpLU_S3_HIhBdQ_IN58ZRaE34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912677F/C43D769663EC11EA97B72587C4F9AE02/NmQpLU_S3_HIhBdQ_IN58ZRaE34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f5:c4:f7:6f:f6:94:81:8b:ba:48:d6:42:cd:2d:c1:77:d9: 53:f4:08:2a:38:4c:94:83:cc:75:0e:0e:75:6b:f6:c4:a7:d6: 60:91:1d:31:0e:f9:03:b4:60:97:b0:1a:d6:e0:bb:29:e0:b0: 68:12:4c:30:de:e8:21:d8:b3:7b:d9:8b:90:37:6b:aa:f5:b5: 80:ff:3f:48:85:33:2f:da:0f:90:89:63:83:a5:e9:9d:36:db: 23:d8:43:b7:78:a8:19:29:15:0e:dd:09:39:32:6e:58:14:28: 19:88:4e:d2:61:78:38:b9:c6:52:77:ed:58:91:47:4b:79:d1: f5:38:0b:3b:eb:99:12:1b:f1:2a:79:a4:c7:00:4f:3b:5d:92: d2:ed:16:69:2a:2a:c1:2a:a0:a1:c1:23:e7:46:46:37:c0:c1: 1d:f4:12:f6:ad:7d:b6:f1:e2:3f:59:7a:9c:b2:9f:7d:1b:e1: 7d:b4:cb:b1:3f:34:40:b3:15:2f:44:d5:53:3b:09:82:1a:2d: b6:8a:42:f4:e9:be:90:3b:87:1c:88:c6:e2:e2:44:17:06:0d: d0:b4:b8:7a:62:3a:22:e7:61:d4:f3:13:99:25:fc:68:0f:3e: 7a:73:3c:9b:bc:2a:af:30:7c:8b:99:6d:b2:92:67:74:4b:c0: 5c:9b:1a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3N0YxMTAvBgNVBAUTKDM2NjQyOTJENEZEMkRGRjFDODg0MTc1MEZDODM3OUYx OTQ1QTEzN0UwHhcNMjUwOTE4MTk0NTU4WhcNMjUwOTI1MTk0NTU4WjAYMRYwFAYD VQQDEw02OGNjNjE3Ni0zNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAe0uwRmPtOInpWkgap9lzsFeITFTKrYvFDtJNy3tq1sroJqFKvO5kBbD+Ls lX7DfAnIBYz6kQeXVFy9XRkS5O3KYKScxZ/G85ITiA+LpF8UCrTCyf2kjNk8gcTe +mVG3qdOzHU/F1v4WYAeAXsDAurW6O+HBAZRigB6Mqw6k7QVia1AP/bx62XH7zJq ez9ck6FpQPe7WGRf2q1l+Alf9QXI7AKG5MVkfgNvcRv3B3CvvLhjmH43N7WrHI5+ Wo/KQzTWC4BqhSNKf1Wcc0X9vieLZPiY02vGloHKyXBgVzL54o57WIbTIIvoKIp3 uan06Wf3ptDQ7Hpm3R8tlREGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7HG0hI CZpNLM2b0ReFZe7Xlor8MB8GA1UdIwQYMBaAFDZkKS1P0t/xyIQXUPyDefGUWhN+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc3Ri9DNDNENzY5NjYz RUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNfSEloQmRRX0lONThaUmFF MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05tUXBMVV9TM19ISWhCZFFfSU41OFpSYUUzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njc3Ri9DNDNENzY5NjYzRUMxMUVBOTdCNzI1ODdDNEY5QUUwMi9ObVFwTFVfUzNf SEloQmRRX0lONThaUmFFMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt9cT3b/aUgYu6SNZCzS3Bd9lT9AgqOEyUg8x1Dg51a/bEp9ZgkR0x DvkDtGCXsBrW4Lsp4LBoEkww3ugh2LN72YuQN2uq9bWA/z9IhTMv2g+QiWODpemd Ntsj2EO3eKgZKRUO3Qk5Mm5YFCgZiE7SYXg4ucZSd+1YkUdLedH1OAs765kSG/Eq eaTHAE87XZLS7RZpKirBKqChwSPnRkY3wMEd9BL2rX228eI/WXqcsp99G+F9tMux PzRAsxUvRNVTOwmCGi22ikL06b6QO4cciMbi4kQXBg3QtLh6Yjoi52HU8xOZJfxo Dz56czybvCqvMHyLmW2ykmd0S8BcmxoD -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:15 2025 by rpki-client