$ rpki-client -vvf rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft File: nqxU6fn1nmg49IRgQhBWMwZtII4.mft (raw, json) Hash identifier: DOzzw26l8HBzMGfWIdoDCTohtdLOJv7jrEgfhTRoQhY= Subject key identifier: 76:A6:80:C1:B3:37:F4:98:EE:9A:8B:CB:09:80:F7:DA:3C:4B:96:60 Authority key identifier: 9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E Certificate issuer: /CN=A91570D9/serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft Manifest number: 09 Signing time: Sat 23 Aug 2025 08:24:58 +0000 Manifest this update: Sat 23 Aug 2025 08:24:58 +0000 Manifest next update: Sat 30 Aug 2025 08:24:58 +0000 Files and hashes: 1: nqxU6fn1nmg49IRgQhBWMwZtII4.crl (hash: bo3xtnLoohgEX3n6RVFoxGkUaycnJvlZODb1QZUEGj8=) 2: AA3F24B67D8011F083953324C4F9AE02.roa (hash: oUOKfGpowL+63AVr56ivCHHAJRNhENKlNPtv0dg5ub8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570D9, serialNumber=9EAC54E9F9F59E6838F4846042105633066D208E Validity Not Before: Aug 23 08:24:58 2025 GMT Not After : Aug 30 08:24:58 2025 GMT Subject: CN=68a97ada-f86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:ee:66:d6:a4:51:c9:65:d4:ca:71:90:20: ef:90:c5:b5:64:12:41:dd:88:4e:69:67:1e:5b:7f: 97:4e:b5:89:44:cf:bf:0c:17:95:8c:54:ed:10:7c: 56:13:c4:69:06:b5:96:31:dc:70:d9:d4:1a:c2:50: 1d:b1:b6:3b:12:74:5a:de:22:a5:79:53:71:30:8f: b5:df:5d:6f:88:a1:ee:d8:cc:b6:c0:e1:4c:d4:aa: 94:c3:30:fb:92:b6:74:56:99:af:55:e9:d3:51:8d: f9:41:98:b6:2e:c8:57:9c:00:a1:43:af:11:17:55: e7:28:55:55:e3:21:99:34:71:89:f7:3a:84:49:0c: ea:f3:ff:c8:c8:01:fe:5b:83:85:fa:13:b7:a8:20: 67:b1:b2:ef:a7:4d:f2:51:3a:60:df:67:3a:d7:99: e7:b3:64:4a:c9:c1:78:b2:21:ca:22:09:9a:88:7f: f1:e8:e7:66:fb:b9:c0:66:cf:97:e0:b3:51:e3:c0: 78:df:ca:32:fe:59:a6:a2:52:f4:53:92:ec:cd:c6: 61:cb:40:9e:ce:b6:ea:c3:df:14:f8:e5:e5:07:49: 73:c3:5f:fe:f2:2d:ec:fb:43:0a:ab:a7:84:ac:c1: a3:8c:4a:5d:9e:45:04:83:2d:b0:8e:bb:ab:73:2f: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:80:C1:B3:37:F4:98:EE:9A:8B:CB:09:80:F7:DA:3C:4B:96:60 X509v3 Authority Key Identifier: keyid:9E:AC:54:E9:F9:F5:9E:68:38:F4:84:60:42:10:56:33:06:6D:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nqxU6fn1nmg49IRgQhBWMwZtII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570D9/2ECB2FFA7D8011F0A9785423C4F9AE02/nqxU6fn1nmg49IRgQhBWMwZtII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:96:fa:de:7c:18:17:56:c8:e3:b6:56:df:e2:4d:3c:7a:45: 20:88:cb:2e:6c:01:e3:c0:d3:76:30:de:75:d3:5d:76:e2:52: 53:05:7f:54:88:82:a1:be:93:ea:94:40:1f:1a:f8:11:54:81: 77:03:2d:83:ad:31:84:1a:b1:b9:47:fe:10:8d:26:1c:f6:e6: a6:b0:7a:83:27:88:c9:bc:38:b4:15:62:fa:15:4f:fc:c9:8b: 7a:ff:21:86:6a:b3:85:87:7a:49:53:77:0b:f3:cf:86:4c:c4: 98:84:90:00:64:b9:8d:e2:83:59:b4:3b:6b:4a:ea:7e:ab:c8: b6:0c:bf:f0:8d:07:be:d4:a7:ef:8a:ea:e1:26:98:c9:82:f2: 39:ac:b8:b1:5f:17:97:05:6e:e7:e3:89:3a:90:75:f1:42:5e: 23:5c:25:fc:b9:67:d2:ce:18:67:03:1c:d2:c1:a1:07:58:df: c6:66:1f:0a:2e:91:a6:eb:9d:30:74:bc:0e:bc:80:db:69:04: 65:ff:f6:49:1b:56:2e:5e:95:43:9f:b4:53:4a:7d:10:44:09: 10:7b:cd:99:d7:fb:f0:4c:f7:58:4f:95:b3:a9:eb:08:45:2c: 46:72:89:e1:a0:ab:ce:8a:5d:f6:f2:d1:1e:a6:d8:ed:c3:ec: 39:ac:95:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzBEOTExMC8GA1UEBRMoOUVBQzU0RTlGOUY1OUU2ODM4RjQ4NDYwNDIxMDU2MzMw NjZEMjA4RTAeFw0yNTA4MjMwODI0NThaFw0yNTA4MzAwODI0NThaMBgxFjAUBgNV BAMTDTY4YTk3YWRhLWY4NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/PO5m1qRRyWXUynGQIO+QxbVkEkHdiE5pZx5bf5dOtYlEz78MF5WMVO0QfFYT xGkGtZYx3HDZ1BrCUB2xtjsSdFreIqV5U3Ewj7XfXW+Ioe7YzLbA4UzUqpTDMPuS tnRWma9V6dNRjflBmLYuyFecAKFDrxEXVecoVVXjIZk0cYn3OoRJDOrz/8jIAf5b g4X6E7eoIGexsu+nTfJROmDfZzrXmeezZErJwXiyIcoiCZqIf/Ho52b7ucBmz5fg s1HjwHjfyjL+WaaiUvRTkuzNxmHLQJ7OturD3xT45eUHSXPDX/7yLez7Qwqrp4Ss waOMSl2eRQSDLbCOu6tzL5tDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdqaAwbM3 9JjumovLCYD32jxLlmAwHwYDVR0jBBgwFoAUnqxU6fn1nmg49IRgQhBWMwZtII4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3MEQ5LzJFQ0IyRkZBN0Q4 MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1nNDlJUmdRaEJXTXdadElJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnF4VTZmbjFubWc0OUlSZ1FoQldNd1p0SUk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 MEQ5LzJFQ0IyRkZBN0Q4MDExRjBBOTc4NTQyM0M0RjlBRTAyL25xeFU2Zm4xbm1n NDlJUmdRaEJXTXdadElJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyW+t58GBdWyOO2Vt/iTTx6RSCIyy5sAePA03Yw3nXTXXbiUlMFf1SI gqG+k+qUQB8a+BFUgXcDLYOtMYQasblH/hCNJhz25qaweoMniMm8OLQVYvoVT/zJ i3r/IYZqs4WHeklTdwvzz4ZMxJiEkABkuY3ig1m0O2tK6n6ryLYMv/CNB77Up++K 6uEmmMmC8jmsuLFfF5cFbufjiTqQdfFCXiNcJfy5Z9LOGGcDHNLBoQdY38ZmHwou kabrnTB0vA68gNtpBGX/9kkbVi5elUOftFNKfRBECRB7zZnX+/BM91hPlbOp6whF LEZyieGgq86KXfby0R6m2O3D7Dmsld8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:58 2025 by rpki-client