$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft File: cNLQaRmVfGqmdxz1Xblvx-_niaA.mft (raw, json) Hash identifier: YTbLA8Nyk9rGukx2vCcdWoe36zv8DH75AABnPWguSIU= Subject key identifier: 87:CB:C6:2B:60:5C:34:9A:D6:BE:6F:97:16:D6:E7:F1:5C:34:83:05 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft Manifest number: 041D Signing time: Sun 19 Oct 2025 02:17:46 +0000 Manifest this update: Sun 19 Oct 2025 02:17:45 +0000 Manifest next update: Sun 26 Oct 2025 02:17:45 +0000 Files and hashes: 1: cNLQaRmVfGqmdxz1Xblvx-_niaA.crl (hash: NbKRP4e93ISbRp4h97p2G8cFDl69L0PLWTI4GGxGubs=) 2: 5E6AFDFC855A11ECA39EB244C4F9AE02.roa (hash: 0gOlRThj6WU6Oiu1Uasxby2bhwXyhTicR9aQwl0b5JY=) 3: 93A5581E549211EFB6D69465C4F9AE02.roa (hash: EF49BWvzk+YoVF73ZbglxNosMQ3iOBpJBV3sashrep8=) 4: 927AA46C549211EFB6D69465C4F9AE02.roa (hash: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY=) 5: 92F68C4E549211EFB6D69465C4F9AE02.roa (hash: q+X83YZL335SyLXeBoGpFgAzoByn2XCMGLkD6Ic10YI=) 6: 920D7BD0549211EFB6D69465C4F9AE02.roa (hash: gHndO2psRdsLz2dDuYnrptktBb4xTbMabDZZkDs+3FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Oct 19 02:17:45 2025 GMT Not After : Oct 26 02:17:45 2025 GMT Subject: CN=68f44a4a-9637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:75:f4:e8:1f:57:e8:aa:03:a0:21:84:ed: a1:a7:6c:bb:f3:f7:3f:92:a6:52:4b:ca:a8:de:a9: 00:9e:d8:ef:2f:28:4e:f1:92:77:55:b2:cc:4b:fa: dd:25:57:e0:ec:46:b0:5c:6b:a2:6e:6a:4f:a2:3e: 3f:70:b3:a9:76:db:a3:8a:73:86:89:32:55:41:87: 6c:a4:41:0d:fd:17:df:0f:84:7a:bf:8b:c4:ca:55: 49:3a:f8:3a:75:9c:83:c1:44:e8:27:e3:49:c5:83: cf:65:9e:b8:0d:cf:ff:d7:2d:01:5c:d0:bf:ff:3b: 6f:a7:0b:d0:7a:e4:74:eb:7a:d6:3b:9a:bc:7c:a5: ef:d6:6c:52:63:cf:4b:25:55:51:54:49:9d:60:35: 85:5c:d5:65:b1:3c:8a:f5:b8:dd:72:bf:e6:91:88: 33:51:5f:9f:22:c2:4d:05:d6:d2:71:f0:ac:11:a6: 1c:da:31:68:2c:b2:43:3e:01:da:2a:e1:5e:ff:c4: ea:79:c8:b2:c8:dc:46:c6:cf:a1:b6:7d:f0:71:74: 21:b3:4b:2d:9b:bd:9f:42:9f:c1:f0:1a:db:d4:6e: 5b:94:29:5a:5c:94:ae:da:ba:f0:e9:4a:ad:a1:1e: 5e:76:15:98:71:2d:3b:7e:05:63:99:ce:f6:32:9c: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CB:C6:2B:60:5C:34:9A:D6:BE:6F:97:16:D6:E7:F1:5C:34:83:05 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d8:1f:e1:d2:80:85:a9:e9:f7:94:ab:eb:43:96:25:9b:ae: 2b:b8:63:72:a3:01:fc:b4:f1:8f:27:87:6a:86:4c:f1:7b:10: d1:77:e2:e2:22:14:11:be:a5:95:b4:3a:95:ca:75:65:39:b7: 9d:f6:80:79:c5:65:5a:50:22:63:14:e8:0f:9b:5e:05:f7:3b: c9:c0:35:e3:60:5a:90:96:0b:7f:db:7f:b9:b9:21:05:c5:17: c9:9b:7c:64:7a:2c:a0:fb:40:e9:e1:12:a9:ac:af:02:27:ec: e1:fe:a3:30:79:f3:2f:80:78:d7:02:36:f7:3d:f4:f2:65:1e: 56:8a:84:40:f0:c4:01:65:6a:dd:2a:9e:f5:d9:2e:4c:4c:01: ed:cf:c4:19:ac:e3:55:35:7d:a6:4c:76:c0:40:8b:fe:57:31: cb:d3:9b:27:22:a3:50:72:9d:29:6d:5a:42:cf:e1:20:3a:69: 0c:b5:10:9b:23:94:26:b8:fa:29:58:97:94:6c:db:22:4f:1d: 57:e1:4e:f2:1b:42:25:fb:83:8a:64:d1:08:58:09:51:a9:a2: b5:1f:6e:90:ef:1f:a5:26:5c:0a:31:e3:7c:8a:97:90:2b:f6: dd:8b:42:c3:8c:90:70:58:76:9f:8f:b6:fb:1b:99:58:b5:ab: 7f:a8:80:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUxMDE5MDIxNzQ1WhcNMjUxMDI2MDIxNzQ1WjAYMRYwFAYD VQQDEw02OGY0NGE0YS05NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweJ19OgfV+iqA6AhhO2hp2y78/c/kqZSS8qo3qkAntjvLyhO8ZJ3VbLMS/rd JVfg7EawXGuibmpPoj4/cLOpdtujinOGiTJVQYdspEEN/RffD4R6v4vEylVJOvg6 dZyDwUToJ+NJxYPPZZ64Dc//1y0BXNC//ztvpwvQeuR063rWO5q8fKXv1mxSY89L JVVRVEmdYDWFXNVlsTyK9bjdcr/mkYgzUV+fIsJNBdbScfCsEaYc2jFoLLJDPgHa KuFe/8TqeciyyNxGxs+htn3wcXQhs0stm72fQp/B8Brb1G5blClaXJSu2rrw6Uqt oR5edhWYcS07fgVjmc72Mpy0KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfLxitg XDSa1r5vlxbW5/FcNIMFMB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxOS8xMTAzMEFGNDg1NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZH cW1keHoxWGJsdngtX25pYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj2B/h0oCFqen3lKvrQ5Ylm64ruGNyowH8tPGPJ4dqhkzxexDRd+Li IhQRvqWVtDqVynVlObed9oB5xWVaUCJjFOgPm14F9zvJwDXjYFqQlgt/23+5uSEF xRfJm3xkeiyg+0Dp4RKprK8CJ+zh/qMwefMvgHjXAjb3PfTyZR5WioRA8MQBZWrd Kp712S5MTAHtz8QZrONVNX2mTHbAQIv+VzHL05snIqNQcp0pbVpCz+EgOmkMtRCb I5QmuPopWJeUbNsiTx1X4U7yG0Il+4OKZNEIWAlRqaK1H26Q7x+lJlwKMeN8ipeQ K/bdi0LDjJBwWHafj7b7G5lYtat/qIDY -----END CERTIFICATE-----Generated at Mon Oct 20 05:43:07 2025 by rpki-client