$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: rthT5CF0D5MCcQXwrHrTo0BdykcoQ7sf5azqNmMf8RQ= Subject key identifier: 0D:50:D4:2D:D1:B8:63:3A:88:82:08:C4:E4:F4:58:CC:CA:16:71:0A Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 0825 Signing time: Fri 22 Aug 2025 21:09:37 +0000 Manifest this update: Fri 22 Aug 2025 21:09:36 +0000 Manifest next update: Fri 29 Aug 2025 21:09:36 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: vcqaN9oD8BO+C/+iVPWgDX1yvVnT/t+hUaUn6begGvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Aug 22 21:09:36 2025 GMT Not After : Aug 29 21:09:36 2025 GMT Subject: CN=68a8dc90-3bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:b1:d7:a8:eb:0f:27:22:b4:7b:3f:bc:b2: b1:02:6a:9b:c3:f1:b5:66:ad:93:6e:a2:b9:56:db: 81:31:21:d2:e2:b6:39:dc:f0:e0:b6:b9:ce:db:07: ff:31:88:76:7f:7a:aa:4f:30:ef:ee:ca:87:d3:21: e2:08:1f:77:94:35:7c:9c:08:e6:f1:c6:06:18:c5: 55:d7:2b:dc:6c:c8:ce:0b:73:cb:3f:d4:45:cd:27: dc:82:c7:49:55:c7:91:03:3e:5a:54:d4:af:3c:28: 46:14:3c:e4:49:95:d7:95:2c:34:e5:8e:6b:9b:df: 9c:a5:b3:ea:f8:53:18:84:de:16:62:75:a7:bb:46: be:30:8f:25:12:28:14:95:58:c2:fd:a1:e9:e7:4e: a5:39:7b:2b:51:69:5c:8b:9b:4e:98:ce:21:8a:01: 14:61:93:cb:86:6a:b5:84:80:39:69:4f:cc:81:f0: 20:4e:d2:b5:85:a5:a6:e7:ed:1c:2d:65:f6:80:62: 05:8d:71:fe:bc:34:69:52:5b:d2:d6:38:5d:c8:cd: 4e:e1:39:e1:63:87:51:47:68:3b:2b:07:fd:ba:fc: 6c:c6:dd:73:d4:7d:f3:00:25:4b:a0:a1:59:51:57: 51:87:64:74:58:b7:99:7c:1d:fa:37:42:3b:a6:0c: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:D4:2D:D1:B8:63:3A:88:82:08:C4:E4:F4:58:CC:CA:16:71:0A X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9d:81:a5:d3:64:9e:91:85:dd:7c:72:12:c2:e6:35:7c:13: 02:73:fd:03:7b:4e:c6:bc:d6:70:d8:03:f4:3e:1c:95:44:65: 2a:c1:14:88:ac:d9:ee:ca:06:f7:09:62:01:0f:c5:50:e9:df: 50:10:b1:34:2c:65:5f:ea:8c:15:08:d1:6e:17:25:ab:d0:db: a3:aa:43:30:87:a1:37:da:50:a1:aa:ee:5e:50:55:09:65:34: 89:25:39:11:15:51:63:c3:a1:91:10:81:33:43:37:a7:c7:08: 05:33:02:62:3e:7e:8a:96:5e:fd:d4:7a:20:1f:7e:a6:c1:4b: b8:40:7f:60:ab:6e:84:5d:a8:a1:6e:76:0b:a1:37:15:d3:56: 0f:f1:53:6b:58:aa:f4:a3:b6:97:c6:50:05:49:ed:1a:31:d0: 47:3e:56:b7:b0:d4:7f:ff:66:58:02:3c:b2:63:68:a1:6f:0a: 37:25:bb:7a:52:c1:f7:db:68:ae:54:21:65:6b:11:66:bb:c9: d2:26:0f:df:36:71:c1:60:9c:e7:b5:71:50:3e:24:6b:1e:3c: 37:95:f5:c8:a9:d8:a0:e3:c2:34:e8:2a:72:29:13:fd:b4:9f: 4a:ab:99:b2:83:a4:9f:32:62:70:c7:6d:d0:9d:85:4a:9e:bd: c4:1a:6b:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjUwODIyMjEwOTM2WhcNMjUwODI5MjEwOTM2WjAYMRYwFAYD VQQDEw02OGE4ZGM5MC0zYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0Gx16jrDycitHs/vLKxAmqbw/G1Zq2TbqK5VtuBMSHS4rY53PDgtrnO2wf/ MYh2f3qqTzDv7sqH0yHiCB93lDV8nAjm8cYGGMVV1yvcbMjOC3PLP9RFzSfcgsdJ VceRAz5aVNSvPChGFDzkSZXXlSw05Y5rm9+cpbPq+FMYhN4WYnWnu0a+MI8lEigU lVjC/aHp506lOXsrUWlci5tOmM4higEUYZPLhmq1hIA5aU/MgfAgTtK1haWm5+0c LWX2gGIFjXH+vDRpUlvS1jhdyM1O4TnhY4dRR2g7Kwf9uvxsxt1z1H3zACVLoKFZ UVdRh2R0WLeZfB36N0I7pgwOtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1Q1C3R uGM6iIIIxOT0WMzKFnEKMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnnYGl02SekYXdfHISwuY1fBMCc/0De07GvNZw2AP0PhyVRGUqwRSI rNnuygb3CWIBD8VQ6d9QELE0LGVf6owVCNFuFyWr0NujqkMwh6E32lChqu5eUFUJ ZTSJJTkRFVFjw6GREIEzQzenxwgFMwJiPn6Kll791HogH36mwUu4QH9gq26EXaih bnYLoTcV01YP8VNrWKr0o7aXxlAFSe0aMdBHPla3sNR//2ZYAjyyY2ihbwo3Jbt6 UsH322iuVCFlaxFmu8nSJg/fNnHBYJzntXFQPiRrHjw3lfXIqdig48I06CpyKRP9 tJ9Kq5myg6SfMmJwx23QnYVKnr3EGmtO -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:20 2025 by rpki-client