$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: /a+cmXOm88f/cIjM7lDOnZ89tAaFnXPGOr2WVHrdemM= Subject key identifier: 23:B0:14:63:D4:7A:F9:1B:0F:F4:CE:74:D1:04:99:F8:28:9B:59:41 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 0149 Signing time: Sat 09 Aug 2025 04:41:13 +0000 Manifest this update: Sat 09 Aug 2025 04:41:12 +0000 Manifest next update: Sat 16 Aug 2025 04:41:12 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: GneAVL9Ug40Ia7CHzUudDabSlmySQf2b0eswIAVK3HU=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Aug 9 04:41:12 2025 GMT Not After : Aug 16 04:41:12 2025 GMT Subject: CN=6896d169-0224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:57:da:04:14:72:61:88:d4:9d:f0:24:48: 78:5d:0c:a7:d1:b6:cb:78:1c:35:10:f4:33:29:bc: 46:29:74:fa:7b:f3:4f:88:8e:4b:57:76:55:59:30: fd:25:4c:3d:55:00:0e:22:76:58:bb:16:cd:b0:39: 60:38:9a:61:c2:d5:77:49:b1:e9:b3:62:8a:07:09: 07:75:ec:65:4d:a9:04:6b:47:1e:72:aa:a4:61:76: 74:b7:3f:6b:62:93:5e:b2:96:45:f4:e7:ad:59:82: 35:90:a0:6e:bb:10:2c:5f:16:3f:29:f3:05:7f:b0: 99:14:61:6c:83:ab:07:9d:19:b0:04:3c:6a:a7:ba: 1f:7e:ae:96:a5:b6:e3:84:90:93:bd:a9:a1:62:6a: 46:39:d6:46:0e:60:ac:37:20:49:6d:fe:0b:a1:1f: 50:36:57:52:69:2b:34:90:63:88:5a:02:29:89:5a: af:34:12:7d:2f:5f:27:cf:b0:44:af:da:e4:d0:e2: b0:42:d6:b3:ae:74:30:cc:e6:02:e6:ab:0a:ad:0c: e0:98:19:ba:74:20:90:dc:00:43:97:d0:74:33:d9: 67:e6:9d:3e:e0:02:44:9d:eb:ef:f6:da:63:2b:5c: c3:cb:82:d0:89:8f:1b:37:8c:b1:82:90:07:4f:5b: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:14:63:D4:7A:F9:1B:0F:F4:CE:74:D1:04:99:F8:28:9B:59:41 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:6a:e9:59:ca:29:50:c0:9e:a5:2b:36:37:71:2f:97:8d: 23:a3:9b:36:93:f4:a0:63:8e:5e:0a:cc:1a:82:37:b1:95:c9: 66:06:68:31:c1:50:3b:de:e4:b5:3d:99:2e:e2:c7:0a:f6:bc: d8:91:fc:ce:1e:b6:40:83:25:fd:b2:6f:b7:c3:04:d3:37:57: a3:67:cc:df:17:d1:75:6d:cc:e7:6f:d8:7b:bd:06:23:0f:7c: b6:7e:81:d8:41:07:7a:1a:30:c8:b3:25:6f:4a:c7:91:65:ea: a7:41:dd:49:0d:9a:ee:75:8e:cd:3c:fe:c7:dd:11:cc:db:02: 6d:cf:08:50:da:9b:f0:f9:fb:8a:de:7b:ef:b7:7e:b0:33:95: ef:a3:a2:e6:4d:bc:e2:5c:a3:7e:0a:0d:a0:7d:a1:a2:69:6a: 2a:cb:49:09:26:0e:40:5f:44:f6:08:65:20:b5:27:1d:5c:52: 0a:9a:7f:8b:65:92:8f:fa:33:3e:bb:69:31:7c:0f:eb:78:5c: af:ce:58:8b:75:ce:69:c0:44:4d:5f:a9:cf:90:34:eb:0b:2b: 1f:35:09:6f:74:10:55:12:b7:33:16:1d:3d:c2:41:02:70:02: cf:d8:3e:f1:b9:68:f8:f7:b7:5a:f1:3e:8b:15:35:8b:a2:ee: 6a:b4:2f:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUwODA5MDQ0MTEyWhcNMjUwODE2MDQ0MTEyWjAYMRYwFAYD VQQDEw02ODk2ZDE2OS0wMjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst1X2gQUcmGI1J3wJEh4XQyn0bbLeBw1EPQzKbxGKXT6e/NPiI5LV3ZVWTD9 JUw9VQAOInZYuxbNsDlgOJphwtV3SbHps2KKBwkHdexlTakEa0cecqqkYXZ0tz9r YpNespZF9OetWYI1kKBuuxAsXxY/KfMFf7CZFGFsg6sHnRmwBDxqp7offq6Wpbbj hJCTvamhYmpGOdZGDmCsNyBJbf4LoR9QNldSaSs0kGOIWgIpiVqvNBJ9L18nz7BE r9rk0OKwQtazrnQwzOYC5qsKrQzgmBm6dCCQ3ABDl9B0M9ln5p0+4AJEnevv9tpj K1zDy4LQiY8bN4yxgpAHT1u/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOwFGPU evkbD/TOdNEEmfgom1lBMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVFmrpWcopUMCepSs2N3Evl40jo5s2k/SgY45eCswagjexlclmBmgx wVA73uS1PZku4scK9rzYkfzOHrZAgyX9sm+3wwTTN1ejZ8zfF9F1bcznb9h7vQYj D3y2foHYQQd6GjDIsyVvSseRZeqnQd1JDZrudY7NPP7H3RHM2wJtzwhQ2pvw+fuK 3nvvt36wM5Xvo6LmTbziXKN+Cg2gfaGiaWoqy0kJJg5AX0T2CGUgtScdXFIKmn+L ZZKP+jM+u2kxfA/reFyvzliLdc5pwERNX6nPkDTrCysfNQlvdBBVErczFh09wkEC cALP2D7xuWj497da8T6LFTWLou5qtC/b -----END CERTIFICATE-----Generated at Sat Aug 9 15:13:21 2025 by rpki-client