$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: aJJVNfSbYcZ430cSGhFoGuHTYMy0xnDpG2yLPJMQARo= Subject key identifier: B3:1B:7F:0B:7D:54:19:B6:E7:CC:B4:84:D7:69:31:58:28:00:8D:ED Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 0820 Signing time: Tue 12 Aug 2025 21:21:22 +0000 Manifest this update: Tue 12 Aug 2025 21:21:22 +0000 Manifest next update: Tue 19 Aug 2025 21:21:22 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: 618VcPRTY/ab0liHMZcD+dwiObPa0xI/H1Z3Cibi/6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Aug 12 21:21:22 2025 GMT Not After : Aug 19 21:21:22 2025 GMT Subject: CN=689bb052-058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:70:fe:1a:9f:4f:be:eb:0b:6f:67:7d:7d: ff:0e:d4:d8:c2:72:c9:72:46:3f:87:95:e0:ad:c7: 77:76:83:7c:24:93:40:7e:a3:26:3c:b1:76:74:82: e2:91:98:d7:87:18:c9:0a:a7:29:5f:18:f4:42:f6: d2:f6:ce:09:b3:17:7f:32:92:30:43:17:28:7b:5b: e2:15:8d:b6:98:e6:58:33:2c:ff:28:33:27:87:f9: 74:19:2a:c6:20:f2:b1:30:e5:13:5d:a4:6f:7c:fc: 3a:e5:58:b9:fe:4e:d4:db:6f:28:64:55:78:80:0f: b4:8d:f3:e5:2a:06:a5:3a:02:3b:94:dc:3c:83:30: da:23:80:2e:a0:47:48:a2:f5:c4:75:93:ae:ef:32: 31:c6:1b:01:c4:97:d8:6e:6b:4f:eb:38:7d:28:62: e7:89:50:51:43:28:ab:be:55:5c:75:b2:0a:bc:90: fc:b4:24:b1:96:52:40:03:a5:84:f9:8b:cf:f3:dc: d7:10:20:d8:5c:0e:84:8e:66:a9:33:d7:43:4e:35: cb:86:04:4a:b0:ab:58:cc:3b:d9:74:79:85:49:70: 97:5a:cc:89:95:bb:58:34:1b:f4:59:3a:03:c5:d7: 1d:0e:9d:4b:a6:e1:a6:8d:97:e9:66:37:6f:aa:a8: fb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1B:7F:0B:7D:54:19:B6:E7:CC:B4:84:D7:69:31:58:28:00:8D:ED X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:f3:b1:f3:14:bb:c3:2e:64:32:bd:6a:61:4a:65:29:29:30: 0e:3b:4f:32:27:0d:23:3c:b8:19:57:8e:32:18:51:8e:54:aa: 52:25:d5:84:3d:17:1a:46:94:0f:37:9d:5c:29:5f:46:ff:ac: a0:7f:73:5e:cb:a7:49:e2:7c:ca:19:a1:a8:e2:0e:f6:4d:0d: 57:7d:c6:89:33:3c:09:9c:de:d5:9c:3d:9a:f8:f2:d2:53:a4: 8c:b3:40:09:10:c5:04:22:e0:e6:db:42:cf:b7:d2:de:2f:01: 2c:87:ae:52:e4:7a:de:f5:a6:0b:d6:a7:35:00:e5:71:90:e9: 65:46:4d:a0:c7:32:dd:05:ac:b5:1f:88:ac:69:b5:f3:be:6f: 9f:cc:c5:12:83:62:2f:f5:7c:e9:d8:6a:19:6e:b6:c7:a4:bc: 48:45:39:ac:53:73:22:31:d7:59:26:53:ee:ae:dc:43:1d:28: 3d:83:b9:dc:5c:bf:1f:cc:2c:8b:29:a0:13:c2:31:5e:cd:9d: 9d:e9:90:8c:23:c5:b4:61:81:fe:b9:d6:b9:1d:65:05:29:2e: 45:c9:a2:c7:dd:46:19:79:92:e2:fa:0f:76:55:f6:94:fe:2b: e4:54:86:f8:66:e9:88:b0:f3:5e:15:63:42:ae:94:b5:67:15: 7a:96:ad:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwODEyMjEyMTIyWhcNMjUwODE5MjEyMTIyWjAYMRYwFAYD VQQDEw02ODliYjA1Mi0wNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrVw/hqfT77rC29nfX3/DtTYwnLJckY/h5Xgrcd3doN8JJNAfqMmPLF2dILi kZjXhxjJCqcpXxj0QvbS9s4Jsxd/MpIwQxcoe1viFY22mOZYMyz/KDMnh/l0GSrG IPKxMOUTXaRvfPw65Vi5/k7U228oZFV4gA+0jfPlKgalOgI7lNw8gzDaI4AuoEdI ovXEdZOu7zIxxhsBxJfYbmtP6zh9KGLniVBRQyirvlVcdbIKvJD8tCSxllJAA6WE +YvP89zXECDYXA6EjmapM9dDTjXLhgRKsKtYzDvZdHmFSXCXWsyJlbtYNBv0WToD xdcdDp1LpuGmjZfpZjdvqqj7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMbfwt9 VBm258y0hNdpMVgoAI3tMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW87HzFLvDLmQyvWphSmUpKTAOO08yJw0jPLgZV44yGFGOVKpSJdWE PRcaRpQPN51cKV9G/6ygf3Ney6dJ4nzKGaGo4g72TQ1XfcaJMzwJnN7VnD2a+PLS U6SMs0AJEMUEIuDm20LPt9LeLwEsh65S5Hre9aYL1qc1AOVxkOllRk2gxzLdBay1 H4isabXzvm+fzMUSg2Iv9Xzp2GoZbrbHpLxIRTmsU3MiMddZJlPurtxDHSg9g7nc XL8fzCyLKaATwjFezZ2d6ZCMI8W0YYH+uda5HWUFKS5FyaLH3UYZeZLi+g92VfaU /ivkVIb4ZumIsPNeFWNCrpS1ZxV6lq1u -----END CERTIFICATE-----Generated at Wed Aug 13 05:32:56 2025 by rpki-client