$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: Lp0Bxc7u274y2z3Y9/ktZjhmOGKxzKe3lpJxgFwuF8Q= Subject key identifier: 50:0D:04:2F:60:F1:47:B6:EE:3D:EE:D6:41:BB:E0:19:AD:F1:27:4D Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 043A Signing time: Thu 21 Aug 2025 00:56:37 +0000 Manifest this update: Thu 21 Aug 2025 00:56:37 +0000 Manifest next update: Thu 28 Aug 2025 00:56:37 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: Ds6o6chIOcjUs0otR3zI16fvm0oNSFGxTWFe+f6sC+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: Aug 21 00:56:37 2025 GMT Not After : Aug 28 00:56:37 2025 GMT Subject: CN=68a66ec5-8a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:2d:a7:5a:38:2e:51:af:e4:c0:94:e8:62: e8:5b:52:13:b4:f3:da:25:95:8c:42:53:24:a4:d0: ad:8e:75:8b:d1:9e:46:eb:38:d1:9e:16:45:0f:55: 5e:c0:77:76:37:65:6c:78:56:9e:aa:59:c9:81:ff: ce:ae:2c:01:a0:7d:35:b3:23:48:2d:cb:27:43:e6: 3f:02:20:ff:39:9e:16:ea:e9:a5:7d:dd:a5:57:fb: 9e:92:cf:e1:b5:a4:4c:c1:b4:6a:77:23:a7:81:b0: 71:be:49:c1:db:40:2a:5b:01:ed:1d:06:4c:37:f7: a4:c9:f2:8d:15:93:e8:e7:4b:4e:13:fc:4c:ed:04: 23:5d:ce:57:96:05:1b:6e:82:c1:46:e4:5d:76:04: cd:11:16:12:9c:ac:c1:24:1a:ce:68:86:de:fe:cc: 1c:ba:7c:2d:38:5e:24:05:4e:32:1d:85:36:20:1f: ec:be:11:88:aa:8e:dc:8a:e6:ff:33:c7:c1:32:71: 87:2e:8c:f6:19:35:01:b7:6f:79:f7:fe:3d:90:dd: 8f:6f:04:17:b7:c1:1a:7e:4d:cc:c7:3b:26:aa:f4: 90:4d:6a:c3:70:08:95:6a:aa:15:fc:17:6d:1c:76: 97:09:dd:6e:16:67:0c:60:0e:3f:f8:b1:54:0c:16: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:04:2F:60:F1:47:B6:EE:3D:EE:D6:41:BB:E0:19:AD:F1:27:4D X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2b:db:c5:6b:5e:33:30:9d:51:41:da:75:4b:7f:d6:e8:6d: c0:47:dd:d0:66:38:ae:39:35:63:75:50:6c:d0:e9:3d:ca:d2: 01:c7:df:23:42:e1:f8:4c:74:a3:75:97:18:f0:b7:45:52:24: 59:ba:ea:86:0a:ba:4d:c7:05:4c:83:bf:24:a4:c9:01:b5:bc: 63:df:8c:a5:db:23:f9:9a:2b:77:f9:30:bf:2a:82:28:23:b6: cf:0b:05:e9:ed:00:2f:82:42:59:73:c6:e1:65:06:af:18:c4: 2a:21:b1:8a:fb:c5:cf:7b:6e:c4:a6:d7:e1:d1:4f:0f:d3:05: 5a:4f:22:22:71:47:79:02:0f:33:5e:46:f8:41:c6:f4:ab:52: ce:30:40:b1:41:19:5d:ce:d5:32:60:b9:9e:c2:52:06:ef:09: f2:03:85:a1:67:0b:59:90:e3:da:82:c9:89:9e:77:13:57:2f: 09:49:cc:26:f9:f2:e5:d0:a2:a8:1b:cd:d7:e3:e5:6a:68:8d: 6c:96:94:f5:55:f2:b8:1e:a0:b5:f0:c5:9d:2d:0f:d5:f6:ed: 6b:90:58:be:27:74:87:5a:51:5b:7d:cd:e7:12:61:46:4d:80: ba:53:16:53:9f:b7:67:71:e8:10:ec:7e:58:44:16:fd:ed:4d: 53:00:f1:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjUwODIxMDA1NjM3WhcNMjUwODI4MDA1NjM3WjAYMRYwFAYD VQQDEw02OGE2NmVjNS04YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveMtp1o4LlGv5MCU6GLoW1ITtPPaJZWMQlMkpNCtjnWL0Z5G6zjRnhZFD1Ve wHd2N2VseFaeqlnJgf/OriwBoH01syNILcsnQ+Y/AiD/OZ4W6umlfd2lV/ueks/h taRMwbRqdyOngbBxvknB20AqWwHtHQZMN/ekyfKNFZPo50tOE/xM7QQjXc5XlgUb boLBRuRddgTNERYSnKzBJBrOaIbe/swcunwtOF4kBU4yHYU2IB/svhGIqo7ciub/ M8fBMnGHLoz2GTUBt2959/49kN2PbwQXt8Eafk3MxzsmqvSQTWrDcAiVaqoV/Bdt HHaXCd1uFmcMYA4/+LFUDBYEoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFANBC9g 8Ue27j3u1kG74Bmt8SdNMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuK9vFa14zMJ1RQdp1S3/W6G3AR93QZjiuOTVjdVBs0Ok9ytIBx98j QuH4THSjdZcY8LdFUiRZuuqGCrpNxwVMg78kpMkBtbxj34yl2yP5mit3+TC/KoIo I7bPCwXp7QAvgkJZc8bhZQavGMQqIbGK+8XPe27Eptfh0U8P0wVaTyIicUd5Ag8z Xkb4Qcb0q1LOMECxQRldztUyYLmewlIG7wnyA4WhZwtZkOPagsmJnncTVy8JScwm +fLl0KKoG83X4+VqaI1slpT1VfK4HqC18MWdLQ/V9u1rkFi+J3SHWlFbfc3nEmFG TYC6UxZTn7dncegQ7H5YRBb97U1TAPFZ -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client