$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: cpvbskdCMhguGTCDgDLVOywZaiG/O1sZO1T+By4rnJE= Subject key identifier: 5E:C2:87:30:E1:78:11:95:C7:77:27:A2:EA:6F:0F:C8:8D:D8:22:5F Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 2A87 Signing time: Thu 18 Sep 2025 15:38:11 +0000 Manifest this update: Thu 18 Sep 2025 15:38:10 +0000 Manifest next update: Thu 25 Sep 2025 15:38:10 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: 2J4Om2zCOgjbBQWbHGTJmA9nhJ+hnwlRWBGj2KwZ/aM=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10949 (0x2ac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Sep 18 15:38:10 2025 GMT Not After : Sep 25 15:38:10 2025 GMT Subject: CN=68cc2762-eb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4b:65:97:8a:03:47:97:01:24:c3:bb:8f:ad: 0c:50:da:34:68:02:7b:55:c0:13:ea:2c:7e:4b:95: 13:80:f0:10:5a:2a:c8:fd:d7:29:6b:7e:5e:95:96: 52:d1:d0:23:85:05:e3:ea:0c:f8:13:3a:cb:a2:93: e1:0a:1a:1b:83:d4:4d:e8:74:5c:7b:47:11:83:9d: 01:04:30:d1:3f:e0:f3:3c:8e:3a:a9:45:ea:37:a7: 45:df:f1:7d:b2:89:33:8d:7d:00:de:8a:aa:d5:b2: 5c:7e:90:ef:9b:88:3d:da:af:77:68:fe:1d:c7:8a: f7:48:bc:7d:d9:f3:af:cd:f2:f5:2b:5a:7b:f1:05: 73:1e:c3:79:ac:2a:ee:cf:d9:d2:eb:e7:91:f6:e7: be:0f:49:3b:af:f9:e4:5d:c1:8d:21:ec:49:48:c9: f5:57:e9:f2:d1:69:77:ef:1b:95:c1:35:83:fb:e8: 6f:c1:c0:50:23:20:6f:7f:96:ea:45:93:ff:95:c1: 09:74:8f:60:1f:ec:8c:5b:ab:8f:95:41:03:52:bd: 81:bd:72:d0:62:bd:4f:3f:d5:e9:27:ae:55:13:c9: 89:ec:b3:7a:d2:ce:05:1e:30:40:4d:3e:dc:d8:50: 9b:fd:af:ab:78:72:e6:d6:c5:a9:97:5b:f6:19:8e: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:87:30:E1:78:11:95:C7:77:27:A2:EA:6F:0F:C8:8D:D8:22:5F X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c0:92:e2:37:ae:56:95:5b:3b:87:1d:b8:55:8d:78:de:c2: b5:3f:76:62:ed:a1:d6:7e:f3:2d:c0:74:23:ba:65:9a:a4:6c: c8:d3:65:78:02:43:bc:d4:33:8f:aa:1a:3a:4d:f5:8a:ac:95: 45:53:4d:d1:01:06:39:40:64:fb:b3:00:e2:4d:1e:20:22:02: 0b:14:06:9e:07:ce:b3:8d:3b:06:f9:33:af:00:4a:d8:5b:bf: 79:51:ff:34:84:4b:81:8d:5d:54:0d:6c:b9:ea:93:b3:72:2a: 28:8c:3b:28:3b:38:89:63:76:fb:61:e8:d8:0b:36:e1:2c:ab: 27:91:b7:72:79:56:d9:4e:5b:3a:dc:52:00:7b:bc:4c:51:6a: d1:3c:1d:97:46:0d:b5:a0:27:01:27:5f:59:e9:9b:42:65:00: f1:cf:23:32:2e:c8:f6:e4:28:f0:ef:c5:bd:ab:b5:80:bc:3c: 3b:58:42:6c:37:96:73:b9:2a:3f:0d:f3:c5:b9:ad:fb:3d:44: a9:e3:5e:82:ce:e2:60:09:d1:5b:fa:68:8a:3c:74:8a:2a:01: 29:26:49:87:92:10:3c:a0:ee:50:17:54:4a:f8:b7:a9:93:98: 48:1e:57:b7:a8:7d:da:45:15:bb:86:34:d7:7d:c7:8a:9b:de: 80:3e:5f:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjUwOTE4MTUzODEwWhcNMjUwOTI1MTUzODEwWjAYMRYwFAYD VQQDEw02OGNjMjc2Mi1lYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Utll4oDR5cBJMO7j60MUNo0aAJ7VcAT6ix+S5UTgPAQWirI/dcpa35elZZS 0dAjhQXj6gz4EzrLopPhChobg9RN6HRce0cRg50BBDDRP+DzPI46qUXqN6dF3/F9 sokzjX0A3oqq1bJcfpDvm4g92q93aP4dx4r3SLx92fOvzfL1K1p78QVzHsN5rCru z9nS6+eR9ue+D0k7r/nkXcGNIexJSMn1V+ny0Wl37xuVwTWD++hvwcBQIyBvf5bq RZP/lcEJdI9gH+yMW6uPlUEDUr2BvXLQYr1PP9XpJ65VE8mJ7LN60s4FHjBATT7c 2FCb/a+reHLm1sWpl1v2GY4D9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7ChzDh eBGVx3cnoupvD8iN2CJfMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZwJLiN65WlVs7hx24VY143sK1P3Zi7aHWfvMtwHQjumWapGzI02V4 AkO81DOPqho6TfWKrJVFU03RAQY5QGT7swDiTR4gIgILFAaeB86zjTsG+TOvAErY W795Uf80hEuBjV1UDWy56pOzcioojDsoOziJY3b7YejYCzbhLKsnkbdyeVbZTls6 3FIAe7xMUWrRPB2XRg21oCcBJ19Z6ZtCZQDxzyMyLsj25Cjw78W9q7WAvDw7WEJs N5ZzuSo/DfPFua37PUSp416CzuJgCdFb+miKPHSKKgEpJkmHkhA8oO5QF1RK+Lep k5hIHle3qH3aRRW7hjTXfceKm96APl85 -----END CERTIFICATE-----Generated at Fri Sep 19 12:22:54 2025 by rpki-client