$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json) Hash identifier: 6JZP22LAd/BYHkfieyvIn6IGebzxOZ31VLk73FbxfHs= Subject key identifier: D3:17:0B:B4:04:3A:B9:2B:EB:10:0E:51:F8:AE:5A:A1:03:A8:29:A8 Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft Manifest number: ED Signing time: Mon 11 Aug 2025 05:30:13 +0000 Manifest this update: Mon 11 Aug 2025 05:30:12 +0000 Manifest next update: Mon 18 Aug 2025 05:30:12 +0000 Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: OlqWvVBl10ASR+9MvZvY+UlFdZXk67/ZqtEa0dKReTE=) 2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: ppr+f3CQLMrxRnmkUupoZgwnP/LYRvSbiOC7CwxVMhs=) 3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: G6b5iOlkKludFCzss6jnAMWJYZcz6E/s4QELN3EDX6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498 Validity Not Before: Aug 11 05:30:12 2025 GMT Not After : Aug 18 05:30:12 2025 GMT Subject: CN=68997fe4-fd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:3d:b3:fd:ad:94:f2:43:aa:07:df:cb:49: c5:b7:32:2c:7f:22:05:e6:0e:b9:8e:67:d7:83:21: 7d:b3:fb:10:b9:30:69:aa:10:e2:3b:a3:c5:1e:fa: 61:93:a4:b8:d1:f9:21:df:4b:49:68:d2:5f:9e:0a: d9:97:db:c9:c2:00:8b:e0:84:c6:50:93:8d:95:9f: 74:67:57:87:b7:30:e7:75:93:bb:fc:2b:95:ef:da: 2a:5a:5f:b9:a4:57:ef:cb:9c:00:e6:d8:b9:25:87: d8:b3:65:bc:c0:a2:8a:64:5d:55:d5:24:7c:25:93: 37:af:f4:9c:5e:6a:3f:0c:95:46:25:b0:ef:ec:e4: e6:fd:e9:f7:c1:cc:c3:04:23:9e:3f:1a:29:0a:e9: 8d:07:52:b9:1e:d2:27:95:fd:78:98:5a:b8:db:27: 9e:72:b9:bf:f8:76:67:1c:84:fc:9a:b3:45:08:05: 0e:3d:a9:a2:7c:44:93:67:8e:40:ac:84:8a:3a:1f: 19:d8:a1:48:29:4a:32:0b:ae:d9:66:ec:1c:7d:8c: 90:b2:02:1d:27:f4:26:11:b5:3c:f2:3f:3e:25:91: b5:f7:c5:f7:16:d2:0b:7f:38:53:6c:5f:b5:0d:e0: 5a:07:ef:b4:b1:ab:84:a4:94:bf:76:25:d9:b7:92: 1b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:17:0B:B4:04:3A:B9:2B:EB:10:0E:51:F8:AE:5A:A1:03:A8:29:A8 X509v3 Authority Key Identifier: keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3b:fd:c5:84:37:5b:6d:6d:32:25:90:98:2e:1f:f6:95:6f: d5:00:b0:6a:f9:65:1d:35:4e:6f:24:c9:ac:84:0f:23:84:82: 8c:24:20:a4:bc:9b:3d:5d:46:92:01:dd:31:0f:9d:13:16:b3: e1:53:9b:11:e1:6f:4a:c1:0e:a7:47:74:b7:59:df:79:84:ca: 8c:53:8b:69:41:2e:2b:8d:f8:d6:65:46:06:1f:30:ad:c4:ce: 80:a2:23:ae:25:60:6c:13:00:df:15:27:74:26:81:d4:d6:c3: 0a:5c:b3:aa:fc:91:e8:ba:ff:ef:04:be:c3:d2:02:36:bc:db: 96:36:b5:66:2e:d7:f2:f9:80:22:b2:81:52:45:de:1e:07:5d: 64:b4:da:87:6a:79:45:4d:d9:f8:d7:a5:4c:29:3d:4d:5e:fd: 63:0e:23:2f:80:38:c8:d7:72:3e:26:7c:ec:2c:d5:7c:1a:01: 44:60:e9:91:a7:94:27:5e:01:74:70:ed:76:e7:61:c1:18:9e: 72:80:86:6a:42:01:c1:be:b8:8a:a3:a9:cb:a6:31:16:c4:d9: 40:fa:33:44:dc:ff:8a:3a:4f:39:b2:29:46:a6:17:12:30:1f: db:43:88:e4:52:3e:1b:f7:bd:8c:55:3c:55:6a:d9:c2:ce:11: 18:80:e5:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE MTQ1RkU0OTgwHhcNMjUwODExMDUzMDEyWhcNMjUwODE4MDUzMDEyWjAYMRYwFAYD VQQDEw02ODk5N2ZlNC1mZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv89s/2tlPJDqgffy0nFtzIsfyIF5g65jmfXgyF9s/sQuTBpqhDiO6PFHvph k6S40fkh30tJaNJfngrZl9vJwgCL4ITGUJONlZ90Z1eHtzDndZO7/CuV79oqWl+5 pFfvy5wA5ti5JYfYs2W8wKKKZF1V1SR8JZM3r/ScXmo/DJVGJbDv7OTm/en3wczD BCOePxopCumNB1K5HtInlf14mFq42yeecrm/+HZnHIT8mrNFCAUOPamifESTZ45A rISKOh8Z2KFIKUoyC67ZZuwcfYyQsgIdJ/QmEbU88j8+JZG198X3FtILfzhTbF+1 DeBaB++0sauEpJS/diXZt5IbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMXC7QE Orkr6xAOUfiuWqEDqCmoMB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1 SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw bzlMYWRZbTlnekhSUmY1SmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYO/3FhDdbbW0yJZCYLh/2lW/VALBq+WUdNU5vJMmshA8jhIKMJCCk vJs9XUaSAd0xD50TFrPhU5sR4W9KwQ6nR3S3Wd95hMqMU4tpQS4rjfjWZUYGHzCt xM6AoiOuJWBsEwDfFSd0JoHU1sMKXLOq/JHouv/vBL7D0gI2vNuWNrVmLtfy+YAi soFSRd4eB11ktNqHanlFTdn416VMKT1NXv1jDiMvgDjI13I+JnzsLNV8GgFEYOmR p5QnXgF0cO1252HBGJ5ygIZqQgHBvriKo6nLpjEWxNlA+jNE3P+KOk85silGphcS MB/bQ4jkUj4b972MVTxVatnCzhEYgOU8 -----END CERTIFICATE-----Generated at Mon Aug 11 07:44:41 2025 by rpki-client