$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: wcq8cGk7W/DNLJcSAGCKPxaQFdv5kQec032unC1oj0E= Subject key identifier: 9F:30:F4:E4:84:90:52:C7:4F:ED:A6:97:7D:AC:AB:4D:45:47:30:A6 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 03F8 Signing time: Mon 11 Aug 2025 00:39:49 +0000 Manifest this update: Mon 11 Aug 2025 00:39:49 +0000 Manifest next update: Mon 18 Aug 2025 00:39:49 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: WLoih3zbtRL2e9Rc0JWX4rcPFSCasitBAePD7kagwAY=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: adNJYD8ddR86Y2y0YjrK71PiHKfM9/CpER0jXjblQGI=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: gGjbQrgM08otmBBevw5wvzpRfB5KnX1ffhZnJEh71ug=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: aK64LFa4M0NMRqfKHBnnSKArLKJYhxOJFHjuf4xjW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1028 (0x404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Aug 11 00:39:49 2025 GMT Not After : Aug 18 00:39:49 2025 GMT Subject: CN=68993bd5-025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:7a:af:a5:9c:da:df:18:60:13:ed:b3:4c: 60:3e:1b:54:ed:ff:54:d0:f7:f1:b7:a9:bf:db:cc: 6e:cb:b6:48:ed:b4:62:1a:85:16:46:e1:a7:fa:f5: 41:1f:07:02:46:27:b8:a5:0a:e9:5b:8a:9e:3a:33: b1:d2:dc:d4:72:4d:44:46:59:f2:0d:68:ac:f0:08: f8:e0:43:d3:05:6c:53:78:df:b6:97:1d:e1:49:62: db:b7:52:64:14:10:db:53:7f:4b:96:ea:be:68:14: 0b:d2:fe:56:64:59:b0:ce:fe:9c:28:0c:a9:7a:33: e3:af:0b:0f:fb:f5:8f:f3:b3:53:7f:00:55:a9:aa: 84:87:88:64:b7:12:52:d3:d0:82:ec:d7:83:83:70: 51:2b:46:b7:2a:a5:7c:29:f0:a8:08:c2:f5:b4:7c: 18:ae:3c:ad:0a:25:b6:f2:76:82:55:87:c7:f1:07: c1:51:d7:c9:08:2c:94:32:cb:e9:cd:8b:91:4d:b7: 2f:86:7d:d6:ef:5b:f5:38:08:84:5f:3c:f6:3c:e6: b9:4f:25:a3:e1:30:a3:a3:73:f6:89:09:41:48:41: 31:fd:9d:e0:c8:ae:d5:14:fa:9d:1f:b2:e2:c8:5b: 05:5e:4d:77:8a:74:c3:d0:89:41:45:a1:7c:99:6d: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:F4:E4:84:90:52:C7:4F:ED:A6:97:7D:AC:AB:4D:45:47:30:A6 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:19:f8:ce:89:41:24:a0:72:6c:39:c7:8a:ba:8f:19:9d:a8: e4:07:1e:9d:44:e0:7b:db:85:fb:af:de:7f:ff:72:21:64:a8: 1e:49:0d:5a:4a:62:e2:24:b0:c0:94:17:1b:bc:e4:d5:97:63: b6:e6:d7:f7:cb:60:46:af:40:f9:7f:ea:0f:ef:6a:f1:74:64: 56:86:8a:90:e7:b6:21:92:0b:79:c6:36:a1:d3:73:2c:86:be: d2:f2:db:03:f2:6f:37:ea:4a:25:7a:54:05:a2:da:dd:31:fc: f9:33:07:3e:0f:35:43:ee:2e:65:d3:3c:2c:70:23:db:9f:36: 37:ed:1f:8a:9a:24:c4:90:c5:b4:ff:97:28:51:62:3c:86:59: 67:4c:4c:a1:1e:b3:47:10:0f:e5:83:44:75:a4:97:5d:47:7a: b0:fb:3a:13:ab:14:d5:eb:94:cc:80:14:59:98:8c:0d:ff:76: b8:6d:8b:8b:6e:61:dd:ef:28:7d:34:d0:57:3b:bd:30:d6:68: ef:9a:7f:5b:87:e4:ce:94:5b:10:32:4a:b4:e0:c6:d3:76:fa: 5d:07:7d:0e:de:6e:c9:e8:a5:93:9d:44:fb:0f:e9:4e:0e:16: f4:34:d1:36:b4:82:22:a5:2c:7a:6d:01:41:15:23:99:fc:2c: 7b:ca:e5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwODExMDAzOTQ5WhcNMjUwODE4MDAzOTQ5WjAYMRYwFAYD VQQDEw02ODk5M2JkNS0wMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLt6r6Wc2t8YYBPts0xgPhtU7f9U0Pfxt6m/28xuy7ZI7bRiGoUWRuGn+vVB HwcCRie4pQrpW4qeOjOx0tzUck1ERlnyDWis8Aj44EPTBWxTeN+2lx3hSWLbt1Jk FBDbU39Lluq+aBQL0v5WZFmwzv6cKAypejPjrwsP+/WP87NTfwBVqaqEh4hktxJS 09CC7NeDg3BRK0a3KqV8KfCoCML1tHwYrjytCiW28naCVYfH8QfBUdfJCCyUMsvp zYuRTbcvhn3W71v1OAiEXzz2POa5TyWj4TCjo3P2iQlBSEEx/Z3gyK7VFPqdH7Li yFsFXk13inTD0IlBRaF8mW1gXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8w9OSE kFLHT+2ml32sq01FRzCmMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2GfjOiUEkoHJsOceKuo8ZnajkBx6dROB724X7r95//3IhZKgeSQ1a SmLiJLDAlBcbvOTVl2O25tf3y2BGr0D5f+oP72rxdGRWhoqQ57Yhkgt5xjah03Ms hr7S8tsD8m836kolelQFotrdMfz5Mwc+DzVD7i5l0zwscCPbnzY37R+KmiTEkMW0 /5coUWI8hllnTEyhHrNHEA/lg0R1pJddR3qw+zoTqxTV65TMgBRZmIwN/3a4bYuL bmHd7yh9NNBXO70w1mjvmn9bh+TOlFsQMkq04MbTdvpdB30O3m7J6KWTnUT7D+lO Dhb0NNE2tIIipSx6bQFBFSOZ/Cx7yuWA -----END CERTIFICATE-----Generated at Mon Aug 11 04:33:32 2025 by rpki-client