$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft File: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft (raw, json) Hash identifier: JsZwSf0V633lfrp28Mjg8srlaSYkNV2RlivTWUd9mx8= Subject key identifier: DA:5E:9F:0A:50:B2:CC:34:3F:B0:E9:25:E3:8B:06:81:4C:29:69:6E Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft Manifest number: 0854 Signing time: Thu 18 Sep 2025 20:55:19 +0000 Manifest this update: Thu 18 Sep 2025 20:55:19 +0000 Manifest next update: Thu 25 Sep 2025 20:55:19 +0000 Files and hashes: 1: np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl (hash: neWFeXGSupZfE77BeqkB543g8ZmDvWNL6RrsbamSilw=) 2: A2C769FC60C811F09495960BC4F9AE02.roa (hash: L4gg8mdxMo6PA1RRURkqhzDjFEp2mlU7yB0IG7OzryM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B Validity Not Before: Sep 18 20:55:19 2025 GMT Not After : Sep 25 20:55:19 2025 GMT Subject: CN=68cc71b7-1d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:14:5b:42:29:ec:31:0b:6b:89:fa:e8:1a: 41:26:c6:5d:7d:9a:cc:54:22:60:fd:7c:13:e7:5c: 23:fc:1d:67:cc:ff:d8:07:bd:7c:83:b1:9f:0c:6d: 77:e5:46:9a:7d:7d:23:fa:0f:68:0a:c5:65:f4:9b: b1:ef:02:9e:a8:ea:76:09:cb:f8:b3:f5:c2:cd:cd: 81:a3:a1:86:19:54:d1:3a:10:5d:c1:cd:1a:28:77: b0:6b:5e:cb:c8:05:bc:2b:a8:55:fb:01:85:41:97: c6:78:fa:0c:bc:fb:fa:9c:fa:1a:07:cc:48:3e:3d: b7:ca:c7:5c:ec:be:81:2b:13:3b:a3:8c:c7:05:9e: 65:4d:23:91:77:86:eb:5e:e8:a3:38:8d:bd:42:f0: ce:b7:05:b5:85:18:4f:1c:e7:5e:56:84:25:08:65: 6d:af:a9:90:62:fb:a1:ee:7b:7e:6c:46:cb:1b:9e: bf:53:2c:28:bc:7d:85:0c:bf:5f:5e:98:55:bd:19: be:ff:3f:a3:5d:ce:18:fd:f1:65:79:17:2c:68:90: 11:d0:02:02:19:ff:08:06:ab:6f:7a:f5:fc:7c:84: 0f:ed:61:59:2b:10:d1:b6:18:52:d4:3e:d1:58:b2: c7:68:fc:70:dd:c0:fa:c9:e2:2a:e4:ee:87:c0:7d: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5E:9F:0A:50:B2:CC:34:3F:B0:E9:25:E3:8B:06:81:4C:29:69:6E X509v3 Authority Key Identifier: keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c9:68:95:01:c0:a6:2c:0c:e3:53:65:6f:98:da:a9:c2:13: 27:dc:03:36:cc:07:e4:79:8e:87:bb:db:9e:95:65:31:ca:5a: b9:e2:f9:e3:9d:54:ea:fb:5e:e1:ec:0f:bb:0b:b2:ed:c4:c8: b5:d0:69:e4:2d:d4:eb:4b:84:66:2e:b9:b2:ea:e8:87:58:b8: 09:f6:34:df:dd:36:a7:01:f3:45:73:c5:b8:92:0c:53:ab:4e: d1:56:b6:e0:a8:b2:1f:95:4e:61:1f:21:33:33:b1:c7:3a:68: a4:da:eb:5b:3a:42:6c:19:97:13:fe:17:bb:f8:dd:33:92:a1: 95:b0:50:60:f5:1a:97:12:89:1c:16:79:dc:d4:6c:6c:4c:1d: 0a:a8:62:38:63:08:59:11:d1:12:cc:41:9b:e7:28:67:10:91: 2f:fb:86:9a:23:4f:bf:3b:e6:56:d0:44:9c:0b:ed:79:74:e3: a7:24:35:d6:ca:bf:54:c7:fe:8b:18:54:f2:a8:53:5a:62:f9: 73:c4:f5:b2:a3:b8:2b:9b:84:88:bd:9c:7a:14:e2:51:17:9f: 6b:f9:ac:ce:70:f9:5f:37:7f:0c:49:ad:53:7f:00:be:ac:0c: cb:b2:9e:29:75:6f:e6:b5:6c:3d:2b:c4:4d:ad:85:d2:20:f6: e7:6e:56:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFNjUxMTAvBgNVBAUTKDlFOUQwRTk2QUU0MjdGNjZCNThGNjZCMjI0QTZFRjU2 NjI3NjFFNEIwHhcNMjUwOTE4MjA1NTE5WhcNMjUwOTI1MjA1NTE5WjAYMRYwFAYD VQQDEw02OGNjNzFiNy0xZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDAUW0Ip7DELa4n66BpBJsZdfZrMVCJg/XwT51wj/B1nzP/YB718g7GfDG13 5UaafX0j+g9oCsVl9Jux7wKeqOp2Ccv4s/XCzc2Bo6GGGVTROhBdwc0aKHewa17L yAW8K6hV+wGFQZfGePoMvPv6nPoaB8xIPj23ysdc7L6BKxM7o4zHBZ5lTSORd4br XuijOI29QvDOtwW1hRhPHOdeVoQlCGVtr6mQYvuh7nt+bEbLG56/UywovH2FDL9f XphVvRm+/z+jXc4Y/fFleRcsaJAR0AICGf8IBqtvevX8fIQP7WFZKxDRthhS1D7R WLLHaPxw3cD6yeIq5O6HwH3k5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpenwpQ ssw0P7DpJeOLBoFMKWluMB8GA1UdIwQYMBaAFJ6dDpauQn9mtY9msiSm71Zidh5L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0U2NS81RUQwNTUzMkQ0 RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2YyYTFqMmF5SktidlZtSjJI a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wME9scTVDZjJhMWoyYXlKS2J2Vm1KMkhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0U2NS81RUQwNTUzMkQ0RDMxMUVBOTczNTM5NDRDNEY5QUUwMi9ucDBPbHE1Q2Yy YTFqMmF5SktidlZtSjJIa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWyWiVAcCmLAzjU2VvmNqpwhMn3AM2zAfkeY6Hu9uelWUxylq54vnj nVTq+17h7A+7C7LtxMi10GnkLdTrS4RmLrmy6uiHWLgJ9jTf3TanAfNFc8W4kgxT q07RVrbgqLIflU5hHyEzM7HHOmik2utbOkJsGZcT/he7+N0zkqGVsFBg9RqXEokc Fnnc1GxsTB0KqGI4YwhZEdESzEGb5yhnEJEv+4aaI0+/O+ZW0EScC+15dOOnJDXW yr9Ux/6LGFTyqFNaYvlzxPWyo7grm4SIvZx6FOJRF59r+azOcPlfN38MSa1TfwC+ rAzLsp4pdW/mtWw9K8RNrYXSIPbnblYk -----END CERTIFICATE-----Generated at Fri Sep 19 15:33:50 2025 by rpki-client