$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: 46np3suiaD6hdnyoEGlmCTXYDU4jV2682mlu0+W0fE8= Subject key identifier: C3:BC:9A:E2:FF:A6:E7:66:19:F3:EA:6D:97:4C:E4:C9:79:F7:4D:8E Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 0424 Signing time: Mon 03 Nov 2025 00:19:04 +0000 Manifest this update: Mon 03 Nov 2025 00:19:04 +0000 Manifest next update: Mon 10 Nov 2025 00:19:04 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: gFhEmJO6dAfopbP/SpZVpD2Ek70q77/gz7Btuk8rXkc=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Nov 3 00:19:04 2025 GMT Not After : Nov 10 00:19:04 2025 GMT Subject: CN=6907f4f8-fb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:b0:d2:26:24:f0:05:36:e0:f1:94:d9:b1: e2:b5:7d:ff:bd:e3:8d:1a:1b:f2:16:1a:7a:31:b3: c7:72:7b:29:6a:15:68:14:a6:53:84:e6:04:55:6c: 79:b2:e9:fb:c6:97:85:ca:23:35:ec:e2:78:df:8c: ac:90:69:37:ec:a7:8d:49:3e:a7:01:50:05:14:27: 6a:78:cb:4c:10:ff:4d:2f:96:0b:ea:fc:eb:84:2d: 83:e2:e7:5f:ac:f2:cd:48:b6:53:73:35:6c:fd:c1: f5:90:85:ff:e2:85:59:a7:3c:d5:6c:f3:cf:83:60: 54:ad:c1:e5:e7:a6:cc:0b:e4:26:82:6a:bd:5c:12: 25:89:e1:a6:2b:fc:ec:ef:64:7d:04:8e:73:72:d3: df:74:3d:cf:a7:a8:2d:19:a0:c3:15:96:d5:2d:db: 24:0f:9f:d2:c9:48:50:2d:30:16:73:93:e9:87:82: 22:76:88:f9:46:75:52:fb:77:13:96:0c:06:6f:a5: f9:e1:e5:02:1f:b4:9f:9b:42:dd:41:de:91:62:01: d9:f5:76:18:dc:c9:f7:70:3f:8c:14:58:dd:b6:a0: 6f:ab:ab:65:0c:08:71:ff:94:c2:95:6a:41:d6:00: 16:9e:92:8c:7b:d3:a1:e4:94:59:ec:ad:54:64:68: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:9A:E2:FF:A6:E7:66:19:F3:EA:6D:97:4C:E4:C9:79:F7:4D:8E X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:84:51:81:de:26:41:a7:58:7d:f1:53:e1:b9:32:26:e4:cd: 8f:1d:2f:7b:a9:57:da:74:3b:ed:60:70:82:dc:c7:72:c7:ed: f3:7f:11:37:bf:68:2f:ec:ce:ec:08:62:1d:06:89:8b:ca:a5: 8e:9b:5d:89:ff:16:cc:02:49:ea:4e:a6:8b:76:65:97:d3:3f: c3:a3:90:f4:89:34:1e:60:e3:e5:be:a1:5a:c3:6f:b6:6b:ae: 64:48:b8:27:53:5e:95:e1:c2:8e:9d:6e:a6:00:71:e0:16:5b: a0:5d:97:43:8b:83:ac:53:2e:6a:a1:49:2d:60:29:e6:e4:e4: f0:b3:3a:38:af:05:48:28:c9:11:63:fa:8f:04:46:6f:29:fb: db:9e:1f:81:f6:ba:4c:3f:de:a8:85:30:14:9c:06:39:10:8d: 15:2b:ee:cd:65:83:c4:36:df:2c:07:2c:ec:8f:1a:6b:dd:11: a5:29:b2:58:d7:bb:27:3c:68:59:9b:8a:f8:36:87:0e:1b:32: 6a:58:5a:54:08:65:82:9a:67:80:d1:c5:52:7d:9f:64:68:8a: 55:a1:57:72:3f:ff:f2:bb:9e:0b:25:2a:6e:02:bf:ef:93:90: 3d:f3:92:2f:6c:85:13:98:82:7f:b8:b8:e3:5e:2c:44:f0:c7: f1:3b:c3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUxMTAzMDAxOTA0WhcNMjUxMTEwMDAxOTA0WjAYMRYwFAYD VQQDEw02OTA3ZjRmOC1mYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkuw0iYk8AU24PGU2bHitX3/veONGhvyFhp6MbPHcnspahVoFKZThOYEVWx5 sun7xpeFyiM17OJ434yskGk37KeNST6nAVAFFCdqeMtMEP9NL5YL6vzrhC2D4udf rPLNSLZTczVs/cH1kIX/4oVZpzzVbPPPg2BUrcHl56bMC+Qmgmq9XBIlieGmK/zs 72R9BI5zctPfdD3Pp6gtGaDDFZbVLdskD5/SyUhQLTAWc5Pph4Iidoj5RnVS+3cT lgwGb6X54eUCH7Sfm0LdQd6RYgHZ9XYY3Mn3cD+MFFjdtqBvq6tlDAhx/5TClWpB 1gAWnpKMe9Oh5JRZ7K1UZGhG4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO8muL/ pudmGfPqbZdM5Ml5902OMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxhFGB3iZBp1h98VPhuTIm5M2PHS97qVfadDvtYHCC3Mdyx+3zfxE3 v2gv7M7sCGIdBomLyqWOm12J/xbMAknqTqaLdmWX0z/Do5D0iTQeYOPlvqFaw2+2 a65kSLgnU16V4cKOnW6mAHHgFlugXZdDi4OsUy5qoUktYCnm5OTwszo4rwVIKMkR Y/qPBEZvKfvbnh+B9rpMP96ohTAUnAY5EI0VK+7NZYPENt8sByzsjxpr3RGlKbJY 17snPGhZm4r4NocOGzJqWFpUCGWCmmeA0cVSfZ9kaIpVoVdyP//yu54LJSpuAr/v k5A985IvbIUTmIJ/uLjjXixE8MfxO8Pu -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:32 2025 by rpki-client