$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: b5OVHEF86KNnJiovRse30rDMklBo/i9TTd/ALNiAjG0= Subject key identifier: 14:79:7B:A1:B1:80:4B:64:7B:0D:6A:53:92:46:3A:71:6E:44:6E:CF Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: 0150 Signing time: Sat 23 Aug 2025 04:21:36 +0000 Manifest this update: Sat 23 Aug 2025 04:21:36 +0000 Manifest next update: Sat 30 Aug 2025 04:21:36 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: vY0e1w3ORLJ8j/5/+v25IhJfDbIhPZsrhEORyCkXshA=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: rYwGjsQBpShXvyi5oxowpgOp3gdk00xJnm3EoG1TD+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Aug 23 04:21:36 2025 GMT Not After : Aug 30 04:21:36 2025 GMT Subject: CN=68a941d0-65ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:5a:43:5f:f2:3a:3f:19:49:e0:c6:6f:62: be:d9:f2:b6:5e:0a:b4:fd:2a:a6:9b:e9:7f:bb:5e: c6:f5:c1:61:31:62:d7:0f:cb:47:66:1b:30:7f:a7: 87:d8:fe:5d:53:8d:14:c2:27:a4:59:47:98:91:76: f9:04:39:cb:11:9c:19:3a:b4:8c:5e:f2:71:eb:52: f9:18:88:96:17:3c:0e:28:81:0e:e5:62:75:61:30: d3:43:0a:12:48:f8:db:92:2a:cd:65:94:41:36:92: 0a:45:17:43:d2:f7:bf:7b:43:39:da:af:9c:74:c4: d0:a0:96:fb:5c:90:ca:91:96:9e:3f:a3:85:c7:ef: 3c:28:bf:ef:c2:92:e3:e6:c5:8c:0a:36:0a:51:d9: ef:93:1b:6b:9f:af:37:3c:c7:f4:76:2e:ca:ea:31: c0:52:3f:76:d8:19:2f:fa:a2:88:dd:18:f4:98:63: 70:7f:c4:8a:c9:dc:b3:34:48:fc:56:74:52:cb:b5: 08:5b:50:dd:5d:65:36:39:ed:8e:13:f0:5b:eb:ca: 6e:36:03:91:21:c2:d9:fe:46:69:a1:84:ed:a3:9d: b1:d3:8f:f0:48:1f:19:33:3c:f8:d4:e7:cb:f4:61: 80:34:3b:ac:29:f1:50:d5:96:43:74:60:68:6d:dc: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:7B:A1:B1:80:4B:64:7B:0D:6A:53:92:46:3A:71:6E:44:6E:CF X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:90:1b:ff:9d:f7:8c:2f:af:df:a2:f3:f7:0e:d5:ab:d0:0b: 34:4c:a9:d8:fe:1d:47:23:f5:7c:69:b6:9a:7b:fb:d9:23:8b: 62:63:fc:35:53:b4:08:e0:56:5e:c0:9d:30:cd:7a:52:c0:05: 00:ae:b8:8d:df:c6:4c:84:b2:2b:20:47:41:62:da:e1:28:a6: 50:97:8d:8f:8a:29:fb:df:42:fd:a8:7e:91:1d:47:6a:93:74: e6:2b:4e:01:1c:99:f1:0c:3c:c6:12:ef:03:c8:30:85:62:df: 6b:aa:42:ae:fe:29:90:2a:df:7a:5b:6d:58:7d:3d:b6:a7:b8: b3:ed:be:3a:e2:1d:64:d3:94:db:38:f0:24:b8:3b:a3:e4:cc: 24:ad:d8:29:01:e1:57:81:4c:d3:c3:db:34:9b:b9:18:3d:0f: 22:fa:ef:3d:31:6c:1a:ea:01:9c:4e:60:c7:ca:0b:14:7b:bd: d9:c5:40:8f:fa:4b:b8:f2:25:85:40:ea:f0:25:8e:0f:e7:ec: 93:82:f5:10:d9:25:43:ce:e6:7a:1c:be:f9:32:45:e3:10:78: 0d:b2:c8:a6:ed:df:db:bc:dc:3a:4a:ed:96:bb:dd:81:0a:ff: 42:f6:2b:fd:ff:8f:cc:0e:a2:f0:3f:a2:8b:df:66:be:dd:26: 32:a2:21:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjUwODIzMDQyMTM2WhcNMjUwODMwMDQyMTM2WjAYMRYwFAYD VQQDEw02OGE5NDFkMC02NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0RaQ1/yOj8ZSeDGb2K+2fK2Xgq0/Sqmm+l/u17G9cFhMWLXD8tHZhswf6eH 2P5dU40UwiekWUeYkXb5BDnLEZwZOrSMXvJx61L5GIiWFzwOKIEO5WJ1YTDTQwoS SPjbkirNZZRBNpIKRRdD0ve/e0M52q+cdMTQoJb7XJDKkZaeP6OFx+88KL/vwpLj 5sWMCjYKUdnvkxtrn683PMf0di7K6jHAUj922Bkv+qKI3Rj0mGNwf8SKydyzNEj8 VnRSy7UIW1DdXWU2Oe2OE/Bb68puNgORIcLZ/kZpoYTto52x04/wSB8ZMzz41OfL 9GGANDusKfFQ1ZZDdGBobdxG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR5e6Gx gEtkew1qU5JGOnFuRG7PMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbkBv/nfeML6/fovP3DtWr0As0TKnY/h1HI/V8abaae/vZI4tiY/w1 U7QI4FZewJ0wzXpSwAUArriN38ZMhLIrIEdBYtrhKKZQl42Piin730L9qH6RHUdq k3TmK04BHJnxDDzGEu8DyDCFYt9rqkKu/imQKt96W21YfT22p7iz7b464h1k05Tb OPAkuDuj5MwkrdgpAeFXgUzTw9s0m7kYPQ8i+u89MWwa6gGcTmDHygsUe73ZxUCP +ku48iWFQOrwJY4P5+yTgvUQ2SVDzuZ6HL75MkXjEHgNssim7d/bvNw6Su2Wu92B Cv9C9iv9/4/MDqLwP6KL32a+3SYyoiGD -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:40 2025 by rpki-client