$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: qaZW+2jTFM+pICSsNJpGMCuZFKNW6i82R2qERI5Mdvs= Subject key identifier: 4C:44:61:D6:99:6B:70:66:47:39:A0:80:BC:D1:0F:06:B3:09:7F:31 Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 0449 Signing time: Tue 09 Sep 2025 00:19:44 +0000 Manifest this update: Tue 09 Sep 2025 00:19:44 +0000 Manifest next update: Tue 16 Sep 2025 00:19:44 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: d4qjvyqlms+Vfq8q7hieBgVztCIlc4CA+Cru6qYVNAU=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Sep 9 00:19:44 2025 GMT Not After : Sep 16 00:19:44 2025 GMT Subject: CN=68bf72a0-26cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:bb:e1:8c:ec:ce:44:2b:d6:1b:02:0a:65: 77:af:e9:1b:f6:48:f3:a7:8e:2d:94:6b:d5:0f:66: 92:23:7e:39:8b:a1:27:b0:16:44:bb:01:95:70:9f: 48:48:b5:8d:bd:0e:54:c3:7b:5a:b1:15:0c:2d:9d: d7:de:aa:9a:f4:f7:1e:7d:d2:d0:db:a7:fc:d7:1f: 18:20:2b:d5:68:30:db:88:25:70:ba:7b:23:bb:f6: 11:7e:d6:3e:da:56:fa:e8:2a:47:6f:2c:c0:de:75: 41:8d:2a:9f:0f:07:bf:ff:95:80:87:a7:81:a4:6b: 8b:24:3c:92:74:d3:42:c2:ad:d0:6f:71:ee:27:46: da:2b:93:12:fc:b6:91:8c:9d:b3:a7:b8:9d:57:0c: 83:f0:d9:22:bb:2b:d8:aa:5b:00:57:6a:f7:5a:b0: 21:1b:01:22:e5:3a:56:6e:d3:aa:68:66:51:0d:c8: 23:c9:48:43:32:90:e9:4b:e8:97:2d:8b:53:dc:35: 0c:fa:74:b5:3c:b8:97:f0:30:b8:0c:e0:fe:91:07: 47:b9:7a:74:0a:9e:c9:9c:fe:a6:c5:52:b8:ff:7f: 6c:35:6a:73:eb:d6:62:0d:3a:8c:b7:88:cf:45:f5: c2:ff:16:48:9c:de:23:7d:f4:a6:7b:96:93:56:23: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:44:61:D6:99:6B:70:66:47:39:A0:80:BC:D1:0F:06:B3:09:7F:31 X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bf:64:ea:f2:25:e4:0a:f3:83:78:b7:4e:10:9f:e2:8f:d2: 8c:c0:52:10:78:a0:a7:48:ec:70:12:8a:23:55:1e:51:62:e2: a0:45:9f:7a:de:2d:a4:26:d0:01:63:80:60:d1:30:34:38:a1: 68:20:34:c7:af:a7:6b:e8:18:d0:99:e9:18:80:df:2a:3b:04: 81:06:57:c7:eb:0a:35:7e:cb:a0:a4:f1:d4:5e:48:da:5b:9b: f7:be:9d:15:39:86:77:26:b6:07:fe:64:32:9c:bd:2a:d1:e4: 85:85:4e:60:e3:23:2f:38:c5:c1:42:02:4a:bb:de:3a:cb:b3: c0:8d:38:b9:b4:02:c5:bf:53:c9:39:46:68:29:1b:e5:bf:88: 8f:8b:8a:42:4c:4e:ed:74:ce:82:85:91:86:8e:7e:7d:34:ec: bd:cf:b5:1e:b3:32:5f:71:ad:24:5b:0f:e6:ab:47:e0:ac:9b: 36:8b:0b:b0:d6:e4:49:36:34:1e:d5:be:94:29:03:4a:60:83: c9:8d:9f:d5:0c:a2:ee:50:91:58:7f:3c:94:5a:04:ef:d7:96: 49:7d:a2:de:7c:05:fd:1e:74:a8:ac:d5:1a:36:5f:57:38:15: 7f:5a:b7:7f:90:c7:49:a8:0a:d9:a9:f1:d7:c2:21:c6:e7:ac: 53:4f:11:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUwOTA5MDAxOTQ0WhcNMjUwOTE2MDAxOTQ0WjAYMRYwFAYD VQQDEw02OGJmNzJhMC0yNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZK74YzszkQr1hsCCmV3r+kb9kjzp44tlGvVD2aSI345i6EnsBZEuwGVcJ9I SLWNvQ5Uw3tasRUMLZ3X3qqa9PcefdLQ26f81x8YICvVaDDbiCVwunsju/YRftY+ 2lb66CpHbyzA3nVBjSqfDwe//5WAh6eBpGuLJDySdNNCwq3Qb3HuJ0baK5MS/LaR jJ2zp7idVwyD8NkiuyvYqlsAV2r3WrAhGwEi5TpWbtOqaGZRDcgjyUhDMpDpS+iX LYtT3DUM+nS1PLiX8DC4DOD+kQdHuXp0Cp7JnP6mxVK4/39sNWpz69ZiDTqMt4jP RfXC/xZInN4jffSme5aTViP/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExEYdaZ a3BmRzmggLzRDwazCX8xMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7v2Tq8iXkCvODeLdOEJ/ij9KMwFIQeKCnSOxwEoojVR5RYuKgRZ96 3i2kJtABY4Bg0TA0OKFoIDTHr6dr6BjQmekYgN8qOwSBBlfH6wo1fsugpPHUXkja W5v3vp0VOYZ3JrYH/mQynL0q0eSFhU5g4yMvOMXBQgJKu946y7PAjTi5tALFv1PJ OUZoKRvlv4iPi4pCTE7tdM6ChZGGjn59NOy9z7UeszJfca0kWw/mq0fgrJs2iwuw 1uRJNjQe1b6UKQNKYIPJjZ/VDKLuUJFYfzyUWgTv15ZJfaLefAX9HnSorNUaNl9X OBV/Wrd/kMdJqArZqfHXwiHG56xTTxFH -----END CERTIFICATE-----Generated at Wed Sep 10 03:51:06 2025 by rpki-client