$ rpki-client -vvf rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft File: nL-xN0vpMpetwbIdvTeY0VvSdN8.mft (raw, json) Hash identifier: AcYF1F8nApgO1C4pNteV5D3wkM++DEVmxBv/y1QSs/Q= Subject key identifier: 1F:D6:34:70:55:49:0E:C8:B2:1A:C7:99:0A:5B:8F:45:68:0B:80:1C Authority key identifier: 9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF Certificate issuer: /CN=A9152696/serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft Manifest number: 0C68 Signing time: Sun 24 Aug 2025 18:24:38 +0000 Manifest this update: Sun 24 Aug 2025 18:24:37 +0000 Manifest next update: Sun 31 Aug 2025 18:24:37 +0000 Files and hashes: 1: nL-xN0vpMpetwbIdvTeY0VvSdN8.crl (hash: JPKKX+CxEo2mh3XDyhvxzjHEJyQFORLd/JC9m9Dmoag=) 2: E905CD5808F111EA8E4F1D51C4F9AE02.roa (hash: I2P5GKiYO+A0JWj3FCOtq5Wyspf+9wzs4i0nVaTxKFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152696, serialNumber=9CBFB1374BE93297ADC1B21DBD3798D15BD274DF Validity Not Before: Aug 24 18:24:37 2025 GMT Not After : Aug 31 18:24:37 2025 GMT Subject: CN=68ab58e5-eb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:fa:13:60:a2:08:74:4d:9c:96:74:c5:12: c0:81:f2:c8:91:ba:e9:2b:11:df:8c:45:a0:09:84: 94:6c:9b:c8:87:bc:9f:fd:6b:9e:eb:a0:6a:4a:23: c3:31:d6:28:b0:b5:87:ee:c5:b1:c1:06:8b:6d:fb: 6a:f3:3c:4a:14:6d:99:f8:86:40:d5:93:8f:2e:f6: d6:ac:a3:fc:d1:b9:29:1f:6a:01:3d:87:29:e7:23: 5f:f9:d5:0a:5d:8e:db:0d:fd:88:9e:99:b4:0b:74: cd:21:6e:42:e7:e2:54:02:74:3d:44:c6:c1:51:59: 1c:18:98:5f:17:5e:42:83:73:fa:5d:e6:c4:38:05: 70:f2:7d:cf:e2:31:eb:67:60:60:22:cc:79:f5:a8: 2e:30:c8:8c:fb:9e:a4:17:32:11:e6:5a:88:ec:dc: c8:d2:56:c2:b8:71:44:db:ee:a9:f9:72:ba:a0:48: c7:70:bf:4c:c3:1b:0c:79:3e:dc:d5:77:2b:24:ee: 63:bc:de:b8:5e:41:b5:5d:7c:b9:a7:98:24:5f:db: fb:ab:b2:54:4a:e8:b1:79:fd:5a:d5:79:50:9c:57: ca:d3:12:f1:7c:60:f2:26:d1:e6:08:9a:86:e5:53: 8e:b5:9b:5d:2a:ea:25:46:93:63:c5:ec:68:a3:9b: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:34:70:55:49:0E:C8:B2:1A:C7:99:0A:5B:8F:45:68:0B:80:1C X509v3 Authority Key Identifier: keyid:9C:BF:B1:37:4B:E9:32:97:AD:C1:B2:1D:BD:37:98:D1:5B:D2:74:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL-xN0vpMpetwbIdvTeY0VvSdN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152696/725CA1D406CD11EAAE5E7934C4F9AE02/nL-xN0vpMpetwbIdvTeY0VvSdN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b9:14:ef:5d:85:9d:1a:f1:9b:d3:40:5a:0d:ab:62:e6:1b: 4f:50:04:d7:f7:34:3c:40:a0:1d:4f:3b:d9:34:a5:fd:c9:68: a8:36:9f:d5:e0:b5:07:5f:85:df:0b:3b:91:23:45:24:b4:cd: 00:6a:4d:e3:08:7d:f9:af:20:a1:e6:50:91:69:f6:44:ac:ce: 19:48:6b:72:47:2a:39:d8:f2:43:7f:77:af:e3:5a:19:c8:c1: ed:8e:af:23:e9:37:9a:88:30:51:78:ba:80:5a:cf:de:e8:ff: ae:5a:03:b8:35:48:f7:03:60:39:e1:19:23:e7:41:b1:e3:b0: 6e:c6:f2:f7:90:67:14:f6:8d:e4:52:4f:2f:20:39:2c:e9:0a: 14:6d:c1:58:21:ef:91:17:98:cd:e0:94:cf:05:81:90:2d:75: 97:f8:1e:80:cd:db:b2:34:a9:42:06:67:52:b8:77:09:58:58: a3:24:92:08:e6:c0:7a:aa:d3:6c:98:57:fc:89:a7:76:18:13: b8:ec:72:ab:6a:89:7f:87:09:b1:1b:3d:ad:51:83:25:10:9d: bb:bd:bd:81:a5:e8:ff:5c:53:d4:02:dd:f4:63:ee:f0:f5:15: 5c:1b:79:e6:e9:de:63:27:e9:38:98:c0:64:21:54:4a:f8:49: 2b:e4:fa:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI2OTYxMTAvBgNVBAUTKDlDQkZCMTM3NEJFOTMyOTdBREMxQjIxREJEMzc5OEQx NUJEMjc0REYwHhcNMjUwODI0MTgyNDM3WhcNMjUwODMxMTgyNDM3WjAYMRYwFAYD VQQDEw02OGFiNThlNS1lYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xf6E2CiCHRNnJZ0xRLAgfLIkbrpKxHfjEWgCYSUbJvIh7yf/Wue66BqSiPD MdYosLWH7sWxwQaLbftq8zxKFG2Z+IZA1ZOPLvbWrKP80bkpH2oBPYcp5yNf+dUK XY7bDf2Inpm0C3TNIW5C5+JUAnQ9RMbBUVkcGJhfF15Cg3P6XebEOAVw8n3P4jHr Z2BgIsx59aguMMiM+56kFzIR5lqI7NzI0lbCuHFE2+6p+XK6oEjHcL9MwxsMeT7c 1XcrJO5jvN64XkG1XXy5p5gkX9v7q7JUSuixef1a1XlQnFfK0xLxfGDyJtHmCJqG 5VOOtZtdKuolRpNjxexoo5uR3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/WNHBV SQ7IshrHmQpbj0VoC4AcMB8GA1UdIwQYMBaAFJy/sTdL6TKXrcGyHb03mNFb0nTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjY5Ni83MjVDQTFENDA2 Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1wZXR3YklkdlRlWTBWdlNk TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MLXhOMHZwTXBldHdiSWR2VGVZMFZ2U2ROOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjY5Ni83MjVDQTFENDA2Q0QxMUVBQUU1RTc5MzRDNEY5QUUwMi9uTC14TjB2cE1w ZXR3YklkdlRlWTBWdlNkTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsuRTvXYWdGvGb00BaDati5htPUATX9zQ8QKAdTzvZNKX9yWioNp/V 4LUHX4XfCzuRI0UktM0Aak3jCH35ryCh5lCRafZErM4ZSGtyRyo52PJDf3ev41oZ yMHtjq8j6TeaiDBReLqAWs/e6P+uWgO4NUj3A2A54Rkj50Gx47BuxvL3kGcU9o3k Uk8vIDks6QoUbcFYIe+RF5jN4JTPBYGQLXWX+B6AzduyNKlCBmdSuHcJWFijJJII 5sB6qtNsmFf8iad2GBO47HKraol/hwmxGz2tUYMlEJ27vb2Bpej/XFPUAt30Y+7w 9RVcG3nm6d5jJ+k4mMBkIVRK+Ekr5Prx -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:23 2025 by rpki-client