$ rpki-client -vvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft File: nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json) Hash identifier: zPdGTZ/GMpGVUJNAQhFa29ItLsUBZqpr+vuP1ZBsx0Q= Subject key identifier: AF:42:84:11:66:4E:56:1A:52:96:10:42:75:B6:65:7C:E4:D6:42:1F Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 Certificate issuer: /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft Manifest number: A1 Signing time: Wed 17 Sep 2025 06:57:52 +0000 Manifest this update: Wed 17 Sep 2025 06:57:52 +0000 Manifest next update: Wed 24 Sep 2025 06:57:52 +0000 Files and hashes: 1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: ULGpPdT+imblhVEy6Vl9bE+TreWCNcmfabDdPtSAlhM=) 2: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: 7w0AxBMbVoZTjF5sqspQh7z8UimR5szml+niNPnLbps=) 3: 98D7330CA55011EFA7FFA969C4F9AE02.roa (hash: 5T5IW/urFKGSR1rD4ZpAxg1/U5kVp7QebPXagPruk4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62 Validity Not Before: Sep 17 06:57:52 2025 GMT Not After : Sep 24 06:57:52 2025 GMT Subject: CN=68ca5bf0-c12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:ee:be:dc:42:e4:dc:8c:4d:e0:46:8e:5d: de:44:a0:11:bb:54:08:29:a6:6c:04:4b:bc:fa:32: 68:78:2c:20:ef:2e:0a:14:67:ce:ec:e1:2c:49:87: 80:be:dc:3a:39:5e:74:ab:79:64:1f:5c:68:35:42: 59:48:55:fc:d9:cc:9e:10:5f:f6:22:da:b1:b2:1c: 14:f2:a9:f5:da:c4:88:b7:b7:40:23:a1:f3:11:f8: 3d:94:d3:36:6e:92:0a:80:de:ce:98:1d:54:be:e8: bd:1a:79:c3:a7:63:61:f9:b8:75:e0:f4:ee:7c:73: a2:23:2b:70:7b:30:7e:d7:f4:c3:07:09:05:f9:36: 6d:fd:9b:86:73:0d:d2:d2:b4:60:87:fa:22:da:fd: 71:38:fd:54:e7:5c:bd:d9:b0:e8:40:96:6f:c3:d3: 03:87:a7:ca:e0:a1:97:b5:a3:57:96:55:8a:8a:e7: 86:aa:82:3a:2a:77:18:62:7a:b8:57:80:79:d3:de: 9d:21:3b:f1:cc:81:5e:85:9b:47:bb:14:d8:86:84: 0e:a9:55:be:07:79:7f:a8:1f:47:7b:fd:09:1e:70: c4:2e:8a:ad:fc:24:fe:32:02:43:28:61:1e:14:84: 14:82:6f:4d:fc:0a:d9:0e:84:e6:2a:08:d9:79:3b: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:42:84:11:66:4E:56:1A:52:96:10:42:75:B6:65:7C:E4:D6:42:1F X509v3 Authority Key Identifier: keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bc:a7:c8:d7:7b:9f:e6:fa:4c:fc:38:83:4a:b0:89:50:53: 04:8a:6c:a3:cb:d7:9e:4a:58:37:14:b6:a1:62:dc:a5:09:3d: 96:04:b5:ae:e6:20:3f:c8:df:22:a1:f8:da:b8:1f:3b:b7:96: 12:e9:08:31:b8:48:1e:7a:b8:22:c9:31:29:14:c4:e6:36:1b: c2:13:0e:c4:f0:24:94:21:30:46:a6:44:9f:59:31:4b:ba:af: a7:51:25:ef:bb:67:e8:eb:07:2a:31:33:65:e5:d4:4a:91:d0: fd:39:1d:77:e3:6f:c6:9a:d0:84:28:0d:65:7d:af:ee:1e:63: 39:10:fa:76:cb:79:41:11:fe:16:47:69:e1:4c:09:f8:6c:80: 72:1a:7a:a4:58:8e:93:69:36:f9:cc:90:14:1f:95:0f:c7:8d: bd:c0:a1:e1:91:a4:ca:ff:3e:c7:ec:f3:af:33:21:28:40:fb: ac:e1:41:0f:3e:e5:f8:96:61:cb:c4:c1:1b:88:46:35:8d:2f: a5:93:95:fe:6d:5c:b9:b3:ca:ce:bb:75:90:81:a7:4a:d1:0f: 3d:31:4e:83:a8:98:6d:48:82:48:f7:a0:23:57:fa:e5:8b:b3: 40:7c:fc:89:16:40:52:51:b7:8b:39:5a:92:3a:01:48:e4:2b: e4:64:fc:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF RkI3RjRENjIwHhcNMjUwOTE3MDY1NzUyWhcNMjUwOTI0MDY1NzUyWjAYMRYwFAYD VQQDEw02OGNhNWJmMC1jMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3LuvtxC5NyMTeBGjl3eRKARu1QIKaZsBEu8+jJoeCwg7y4KFGfO7OEsSYeA vtw6OV50q3lkH1xoNUJZSFX82cyeEF/2ItqxshwU8qn12sSIt7dAI6HzEfg9lNM2 bpIKgN7OmB1Uvui9GnnDp2Nh+bh14PTufHOiIytwezB+1/TDBwkF+TZt/ZuGcw3S 0rRgh/oi2v1xOP1U51y92bDoQJZvw9MDh6fK4KGXtaNXllWKiueGqoI6KncYYnq4 V4B5096dITvxzIFehZtHuxTYhoQOqVW+B3l/qB9He/0JHnDELoqt/CT+MgJDKGEe FIQUgm9N/ArZDoTmKgjZeTvyVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9ChBFm TlYaUpYQQnW2ZXzk1kIfMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNB aXh0VUw2azZmQkR2dF9UV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBavKfI13uf5vpM/DiDSrCJUFMEimyjy9eeSlg3FLahYtylCT2WBLWu 5iA/yN8iofjauB87t5YS6QgxuEgeergiyTEpFMTmNhvCEw7E8CSUITBGpkSfWTFL uq+nUSXvu2fo6wcqMTNl5dRKkdD9OR1342/GmtCEKA1lfa/uHmM5EPp2y3lBEf4W R2nhTAn4bIByGnqkWI6TaTb5zJAUH5UPx429wKHhkaTK/z7H7POvMyEoQPus4UEP PuX4lmHLxMEbiEY1jS+lk5X+bVy5s8rOu3WQgadK0Q89MU6DqJhtSIJI96AjV/rl i7NAfPyJFkBSUbeLOVqSOgFI5CvkZPx2 -----END CERTIFICATE-----Generated at Fri Sep 19 05:56:36 2025 by rpki-client