$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: VY2NbVsSN8dgGr8apwxrIN4dpjbY8ozTodenawA0/6U= Subject key identifier: D1:68:DD:3E:D5:B5:95:83:8C:F1:EB:E2:A7:0F:99:B4:D9:65:4C:52 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 016D Signing time: Sun 19 Oct 2025 06:34:34 +0000 Manifest this update: Sun 19 Oct 2025 06:34:34 +0000 Manifest next update: Sun 26 Oct 2025 06:34:34 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: nODg0j7k5e5izzSHmTDH6eWhdpb2Vt1eFA9U5/lSII8=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Oct 19 06:34:34 2025 GMT Not After : Oct 26 06:34:34 2025 GMT Subject: CN=68f4867a-4b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a3:a0:e8:67:b2:c8:28:93:20:7c:20:94:5f: c7:4a:43:f5:d4:8a:93:cf:c7:44:87:56:26:22:f3: e4:a8:54:c5:5b:78:5b:6d:89:60:da:ce:36:70:ca: 11:17:ac:3b:f4:4d:b9:14:c6:61:ac:08:98:e2:19: d9:ed:16:7a:f4:67:92:00:ea:4c:ed:37:12:78:c2: ab:9f:87:97:12:f1:f4:21:c1:f2:05:f1:1f:9d:a0: 53:ad:9b:a2:40:0e:7d:32:86:3b:f2:9e:7d:17:87: 06:fb:72:d9:b8:82:e1:b1:b4:82:c6:2e:aa:b4:05: ad:03:89:ef:fd:03:e1:d4:dd:94:be:e2:25:a6:ec: 78:52:88:d9:9b:bc:63:08:41:5f:d6:75:5e:34:34: a2:24:d3:90:74:07:76:46:45:2e:74:34:26:1d:a6: de:5c:bf:22:0f:cc:d3:b4:9c:80:fe:10:b1:a4:b6: 5c:1f:f6:04:e5:73:a2:5b:bb:28:40:53:5d:d9:56: ff:39:91:9b:36:f2:ce:03:bd:57:2f:fc:b1:e4:51: fc:66:7a:61:b8:c6:5f:2e:a8:3e:5a:67:b1:f5:d0: 87:16:1e:94:1b:2a:c1:a3:70:d5:24:f3:ed:c5:d4: a3:75:b1:d6:fe:d6:ce:95:75:26:b6:6c:da:f9:f3: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:DD:3E:D5:B5:95:83:8C:F1:EB:E2:A7:0F:99:B4:D9:65:4C:52 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9c:22:90:31:4c:4f:08:13:83:ed:66:1f:07:27:23:4e:ea: a9:c2:6a:2b:51:d2:e1:12:6d:35:98:13:c4:39:11:06:1e:9b: 36:e7:e3:59:b8:d8:30:22:36:0e:5c:c6:64:f9:9f:d9:dd:86: 18:12:3a:ee:46:39:02:f1:78:ff:ea:de:c0:46:e1:22:e3:bd: 86:b2:1f:cf:ee:ca:63:b8:0b:94:54:60:09:9f:2a:45:5a:94: c5:19:66:5a:2a:ae:7d:72:9b:62:6d:38:c9:f0:47:ae:f3:02: 69:df:e1:30:8d:0d:6d:30:03:27:20:70:b9:95:98:ee:71:08: 26:60:7b:5a:b1:ef:04:d9:6a:73:9b:5a:8d:6f:b1:e1:95:8f: 05:9b:de:24:d4:6e:b0:9a:3a:9b:e2:df:be:68:10:d8:93:bc: 07:6c:04:70:93:2d:68:df:53:46:e5:33:c5:63:b4:fd:22:b8: a5:d8:d5:fc:26:43:26:90:7e:1a:89:e6:56:78:31:6b:75:f1: a4:e7:fb:5c:ae:3b:79:9b:4f:c8:e5:84:0a:fa:95:df:65:96: e2:46:00:9a:7c:66:68:92:f4:91:1d:c6:96:99:25:f7:91:8e: 5e:4d:28:fd:ee:f4:8f:b6:b9:ce:ff:9e:4e:8d:d3:cd:ea:0a: 6c:a2:15:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUxMDE5MDYzNDM0WhcNMjUxMDI2MDYzNDM0WjAYMRYwFAYD VQQDEw02OGY0ODY3YS00Yjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qOg6GeyyCiTIHwglF/HSkP11IqTz8dEh1YmIvPkqFTFW3hbbYlg2s42cMoR F6w79E25FMZhrAiY4hnZ7RZ69GeSAOpM7TcSeMKrn4eXEvH0IcHyBfEfnaBTrZui QA59MoY78p59F4cG+3LZuILhsbSCxi6qtAWtA4nv/QPh1N2UvuIlpux4UojZm7xj CEFf1nVeNDSiJNOQdAd2RkUudDQmHabeXL8iD8zTtJyA/hCxpLZcH/YE5XOiW7so QFNd2Vb/OZGbNvLOA71XL/yx5FH8ZnphuMZfLqg+Wmex9dCHFh6UGyrBo3DVJPPt xdSjdbHW/tbOlXUmtmza+fPesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFo3T7V tZWDjPHr4qcPmbTZZUxSMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKnCKQMUxPCBOD7WYfBycjTuqpwmorUdLhEm01mBPEOREGHps25+NZ uNgwIjYOXMZk+Z/Z3YYYEjruRjkC8Xj/6t7ARuEi472Gsh/P7spjuAuUVGAJnypF WpTFGWZaKq59cptibTjJ8Eeu8wJp3+EwjQ1tMAMnIHC5lZjucQgmYHtase8E2Wpz m1qNb7HhlY8Fm94k1G6wmjqb4t++aBDYk7wHbARwky1o31NG5TPFY7T9Iril2NX8 JkMmkH4aieZWeDFrdfGk5/tcrjt5m0/I5YQK+pXfZZbiRgCafGZokvSRHcaWmSX3 kY5eTSj97vSPtrnO/55OjdPN6gpsohUq -----END CERTIFICATE-----Generated at Sun Oct 19 13:47:18 2025 by rpki-client