$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: 7Rd99a3mSNXgMkbbjPOoM7/pAIDPHLAfSFSFDAOyr8U= Subject key identifier: 9C:38:F6:44:FE:80:82:31:FD:41:AF:6A:F5:42:E8:D6:C8:DC:59:7B Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 0405 Signing time: Fri 05 Sep 2025 00:45:21 +0000 Manifest this update: Fri 05 Sep 2025 00:45:21 +0000 Manifest next update: Fri 12 Sep 2025 00:45:21 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: 6SlmhldPSWQerK40DQ/ZCLBS8Gy7cTuJDVe3zl4vYMY=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 5 00:45:21 2025 GMT Not After : Sep 12 00:45:21 2025 GMT Subject: CN=68ba32a1-4e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:94:02:bd:3b:22:08:1e:36:15:6d:fc:13: f8:36:a7:92:9d:3a:15:9d:b0:0d:8d:08:da:46:b5: bb:04:be:c9:30:05:d9:9e:ad:0b:9e:10:b1:36:6e: 73:5b:9a:bf:2a:c1:55:09:64:17:ee:1c:00:ac:97: ff:15:81:4a:63:43:2b:af:d5:11:33:3f:fe:82:d5: 57:7f:62:00:19:bb:b3:5e:f4:4d:34:bb:e9:fe:9c: ea:f3:7b:af:77:c1:40:4c:0c:19:73:26:9b:c8:ad: 93:b4:bb:75:9c:4a:4e:14:75:62:18:34:d8:87:af: e9:c1:ba:6d:15:c4:1d:2a:79:2f:ea:85:6c:3e:8b: f0:fa:80:c2:2f:e2:2f:4b:78:10:44:c6:c2:d2:cc: a1:d8:3c:41:e0:ea:27:86:dc:4c:97:1a:2e:33:9a: 31:03:47:a9:bf:a5:4c:f4:2b:b0:46:23:a6:81:f6: 40:97:f0:0e:4c:09:c7:b4:e0:a8:01:40:35:90:ea: ee:40:56:1e:24:c7:1e:fa:86:f3:1c:a5:1b:f4:71: 0e:58:75:be:0b:69:63:02:6b:e2:4a:dd:aa:9b:d9: ee:c9:b2:88:65:1a:ba:e6:b3:ee:c4:68:cb:07:bf: 33:95:4a:9c:4e:b0:4b:ca:cc:5c:63:3b:f8:97:e7: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:38:F6:44:FE:80:82:31:FD:41:AF:6A:F5:42:E8:D6:C8:DC:59:7B X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:0d:7b:e4:a6:e3:4c:87:85:90:7d:35:52:a5:cb:92:7e: 67:b8:df:40:a2:58:a8:74:6c:da:89:d1:7b:7f:ed:94:d9:ba: 77:55:a1:b5:f5:bd:0a:d2:cb:ad:8c:c3:52:b4:52:6c:9a:96: 65:b0:0d:85:5c:79:c9:c4:2f:e8:da:74:20:c2:d0:ab:45:89: 8e:b0:d6:ce:64:8f:b3:44:ab:51:d1:bf:54:e5:ad:9c:de:73: b8:d0:1b:6b:9b:54:bd:c6:49:0b:9e:cc:c6:77:31:4a:b4:7e: 0b:20:eb:0b:c8:96:87:73:b2:6a:57:3a:31:62:27:93:0d:8b: 5d:06:7f:db:a3:91:03:c7:bd:ae:1b:63:25:4d:cd:03:b8:cf: 39:ad:c4:68:a2:af:93:53:0d:94:ad:ca:14:0b:48:22:82:12: 8c:5e:2b:4a:d7:e7:f4:de:1b:5a:b9:a2:e0:dd:76:cf:b6:e3: a0:68:1f:b4:63:ea:03:f7:91:00:45:c7:c1:be:e5:ea:aa:54: 62:9a:60:ff:fe:cd:fa:04:6d:e7:48:a8:37:ba:1d:5d:11:5b: c5:a8:75:32:fb:20:dd:f6:1f:2c:9c:29:0a:dd:44:17:f3:f0: dd:9c:1e:bb:b5:98:dd:28:9b:1c:19:55:49:ce:90:ce:65:31: 03:36:8f:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwOTA1MDA0NTIxWhcNMjUwOTEyMDA0NTIxWjAYMRYwFAYD VQQDEw02OGJhMzJhMS00ZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4G+UAr07IggeNhVt/BP4NqeSnToVnbANjQjaRrW7BL7JMAXZnq0LnhCxNm5z W5q/KsFVCWQX7hwArJf/FYFKY0Mrr9URMz/+gtVXf2IAGbuzXvRNNLvp/pzq83uv d8FATAwZcyabyK2TtLt1nEpOFHViGDTYh6/pwbptFcQdKnkv6oVsPovw+oDCL+Iv S3gQRMbC0syh2DxB4OonhtxMlxouM5oxA0epv6VM9CuwRiOmgfZAl/AOTAnHtOCo AUA1kOruQFYeJMce+obzHKUb9HEOWHW+C2ljAmviSt2qm9nuybKIZRq65rPuxGjL B78zlUqcTrBLysxcYzv4l+fpuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw49kT+ gIIx/UGvavVC6NbI3Fl7MB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqWQ175KbjTIeFkH01UqXLkn5nuN9AoliodGzaidF7f+2U2bp3VaG1 9b0K0sutjMNStFJsmpZlsA2FXHnJxC/o2nQgwtCrRYmOsNbOZI+zRKtR0b9U5a2c 3nO40Btrm1S9xkkLnszGdzFKtH4LIOsLyJaHc7JqVzoxYieTDYtdBn/bo5EDx72u G2MlTc0DuM85rcRooq+TUw2UrcoUC0gighKMXitK1+f03htauaLg3XbPtuOgaB+0 Y+oD95EARcfBvuXqqlRimmD//s36BG3nSKg3uh1dEVvFqHUy+yDd9h8snCkK3UQX 8/DdnB67tZjdKJscGVVJzpDOZTEDNo+o -----END CERTIFICATE-----Generated at Sat Sep 6 13:22:06 2025 by rpki-client