$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft File: n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json) Hash identifier: GYd/5oFuJXRxWxTpXVrM5yE8NeI6r2HTmFzS+yGgeMc= Subject key identifier: 16:D6:56:3A:51:81:B2:F7:D4:B5:BF:C7:1F:45:9D:BB:52:87:AA:0B Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 Certificate issuer: /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft Manifest number: 043C Signing time: Sat 23 Aug 2025 01:01:43 +0000 Manifest this update: Sat 23 Aug 2025 01:01:42 +0000 Manifest next update: Sat 30 Aug 2025 01:01:42 +0000 Files and hashes: 1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: joAIoRpWqQIu0Ga/z0hdowUEjvuBLAEMAH808OwxEAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167 Validity Not Before: Aug 23 01:01:42 2025 GMT Not After : Aug 30 01:01:42 2025 GMT Subject: CN=68a912f7-07d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:af:bd:57:52:47:85:67:a8:22:75:c1:6b: 97:02:9d:0b:62:02:f1:cd:84:02:2b:f0:ed:cc:d1: cd:f4:36:53:bb:48:34:a3:07:0a:d6:da:18:4c:50: cd:a4:55:97:ab:3a:7f:3b:14:7e:c8:74:3c:3c:f8: 96:24:dd:e6:1e:ee:a7:8f:f8:cf:a6:02:ae:76:14: 76:fe:a3:17:b9:03:ef:1a:d5:e9:a0:8f:05:bd:f6: f8:27:2b:25:b0:97:b5:be:57:9b:ef:e0:62:8c:cb: 90:0f:b5:0c:a7:51:a7:8a:a6:c4:05:ad:b8:54:b2: 41:86:55:44:4f:4e:f8:a3:45:e1:1f:5c:8f:6a:f7: 35:1d:e5:77:82:62:37:c6:19:c1:f0:60:a0:7d:63: 9e:ef:8b:95:c9:6b:cc:18:58:bb:ff:73:76:1a:2a: 84:56:3d:b5:de:9d:39:92:89:00:6b:08:3b:69:1e: 1c:df:33:04:c4:94:de:35:de:8d:d4:0a:06:18:46: 88:60:fe:2a:9f:49:10:a6:a7:e6:3d:aa:c3:44:30: 98:23:14:93:7f:f8:44:c5:70:81:d1:09:1a:a2:4c: 77:fa:94:11:df:32:71:09:01:dd:09:4a:52:cd:92: a0:a2:ee:ad:d5:2b:c2:a5:3b:e5:19:d2:a6:fd:7d: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:56:3A:51:81:B2:F7:D4:B5:BF:C7:1F:45:9D:BB:52:87:AA:0B X509v3 Authority Key Identifier: keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7d:8d:f3:ca:f9:d2:46:2f:ee:63:7f:b6:26:8f:bc:d2:ad: c4:4c:6e:24:6f:73:77:ab:d3:dd:87:bd:5b:c9:d7:fe:a6:fd: 40:6d:72:a5:df:2a:3c:e1:07:a0:18:23:1e:5c:f7:b8:23:80: 1f:ea:f9:93:25:ef:12:44:59:41:1a:7a:70:ac:6c:c1:c2:d7: d7:03:6e:02:19:b9:58:09:67:2f:25:c9:2c:6b:c4:1e:8e:b0: 54:cf:ea:9f:63:0f:0f:d9:d5:30:6f:c3:27:bc:fd:ca:95:31: 4f:67:37:d7:18:3e:79:7c:25:a9:ac:a4:2c:4c:ff:cb:9a:5f: 4c:44:77:56:ed:85:e4:6c:6a:f6:0d:10:0c:cb:b0:c3:d6:73: 90:0c:80:24:01:f7:53:45:a3:9a:64:5c:8a:d1:d9:59:6e:e9: e3:f8:68:ec:f4:d9:17:80:80:22:5d:ec:88:db:5a:2e:dc:d8: ec:5e:54:cd:fc:99:95:61:1f:97:53:28:8e:d4:9a:27:31:fe: 52:0c:03:9c:c8:3d:c8:0e:47:07:c6:0f:a1:ee:ef:04:c4:12: e0:d6:e0:41:80:4b:75:3f:d7:65:c9:8e:f7:32:22:7f:c2:1f: 94:3a:00:e7:a2:2d:3a:bf:62:13:f9:8b:69:3e:65:aa:ed:25: 27:ca:23:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDlGOUMyM0QyNzNGNkE5OUM2NUVGQkMwMzBEMkI2ODFF NDIzMjkxNjcwHhcNMjUwODIzMDEwMTQyWhcNMjUwODMwMDEwMTQyWjAYMRYwFAYD VQQDEw02OGE5MTJmNy0wN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf2vvVdSR4VnqCJ1wWuXAp0LYgLxzYQCK/DtzNHN9DZTu0g0owcK1toYTFDN pFWXqzp/OxR+yHQ8PPiWJN3mHu6nj/jPpgKudhR2/qMXuQPvGtXpoI8Fvfb4Jysl sJe1vleb7+BijMuQD7UMp1GniqbEBa24VLJBhlVET074o0XhH1yPavc1HeV3gmI3 xhnB8GCgfWOe74uVyWvMGFi7/3N2GiqEVj213p05kokAawg7aR4c3zMExJTeNd6N 1AoGGEaIYP4qn0kQpqfmParDRDCYIxSTf/hExXCB0Qkaokx3+pQR3zJxCQHdCUpS zZKgou6t1SvCpTvlGdKm/X2B1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbWVjpR gbL31LW/xx9FnbtSh6oLMB8GA1UdIwQYMBaAFJ+cI9Jz9qmcZe+8Aw0raB5CMpFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFaeGw3N3dERFN0b0hrSXlr V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL241d2owblAycVp4bDc3d0REU3RvSGtJeWtXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9uNXdqMG5QMnFa eGw3N3dERFN0b0hrSXlrV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBfY3zyvnSRi/uY3+2Jo+80q3ETG4kb3N3q9Pdh71bydf+pv1AbXKl 3yo84QegGCMeXPe4I4Af6vmTJe8SRFlBGnpwrGzBwtfXA24CGblYCWcvJcksa8Qe jrBUz+qfYw8P2dUwb8MnvP3KlTFPZzfXGD55fCWprKQsTP/Lml9MRHdW7YXkbGr2 DRAMy7DD1nOQDIAkAfdTRaOaZFyK0dlZbunj+Gjs9NkXgIAiXeyI21ou3NjsXlTN /JmVYR+XUyiO1JonMf5SDAOcyD3IDkcHxg+h7u8ExBLg1uBBgEt1P9dlyY73MiJ/ wh+UOgDnoi06v2IT+YtpPmWq7SUnyiM9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:30 2025 by rpki-client