$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: 767xiIkZ3CC9GeA/QwB7LAaVVOTIxlz6qYhz2dELeew= Subject key identifier: AF:C1:06:A1:D4:52:B1:7C:37:70:2C:88:01:CC:14:33:CD:7A:F5:5A Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: AA Signing time: Sat 09 Aug 2025 06:35:42 +0000 Manifest this update: Sat 09 Aug 2025 06:35:42 +0000 Manifest next update: Sat 16 Aug 2025 06:35:42 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: hR3dwSA8AYbedz6E+aWbts6W9pNpvjXdLCx0Ro1KL/E=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: Z9wgm3vGJOLLYnMtYAwUdfFZW4JgmPyeFWsMY0AhztU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: Aug 9 06:35:42 2025 GMT Not After : Aug 16 06:35:42 2025 GMT Subject: CN=6896ec3e-70bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:d3:01:4b:ad:84:e0:6a:55:08:ff:77:44: 03:eb:a1:74:9d:f1:c8:23:7c:16:76:10:30:de:3f: ff:df:e3:00:05:79:42:94:fb:0e:4a:3a:65:0f:29: 84:e5:b9:63:1c:d0:8d:61:4f:9d:4e:0b:e7:85:0b: 2d:6a:02:d2:d0:33:eb:32:98:ff:f8:e2:dc:eb:c8: f3:29:96:cc:b6:3a:dc:53:b4:15:9f:41:4b:49:9e: ae:b7:f7:a0:c8:36:e8:62:a1:d4:a4:3a:62:47:9e: 83:21:a5:a3:f3:13:d7:d4:5c:d6:b9:92:1e:be:9c: 9d:f9:e2:f1:bb:9e:02:01:27:4a:4e:45:eb:18:e2: 79:04:a6:4f:97:5d:2f:72:89:08:ee:ec:f8:d6:3e: c8:7e:c6:4a:38:fb:ac:58:e4:26:ef:0d:dc:97:d9: 65:23:03:57:0e:f7:8c:e6:22:61:04:16:31:f7:e5: d2:f8:18:d8:4f:79:0f:9b:4c:d7:7f:d8:c2:cb:08: 10:0a:31:29:dd:52:42:de:fe:88:12:0e:5f:f9:5d: 0f:ee:b6:f9:a3:15:e0:7e:76:60:5c:e8:61:5d:07: b9:cb:0c:b9:ad:99:17:7b:18:d2:65:88:70:99:c4: 55:c4:dd:e0:81:e3:37:ca:12:07:14:28:e5:93:7d: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C1:06:A1:D4:52:B1:7C:37:70:2C:88:01:CC:14:33:CD:7A:F5:5A X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:73:22:1e:a7:e5:6e:c4:fc:29:da:99:2f:47:7d:3c:4b:d1: b6:b3:b6:bd:17:c9:b2:e3:4e:50:6b:fe:8a:09:f6:8a:86:94: bd:29:74:21:29:4a:fb:49:2a:42:27:66:10:98:95:ad:59:97: 15:15:58:5a:af:b2:ad:89:7f:06:bc:36:dd:43:8c:9b:1c:19: 31:54:fc:36:c4:11:ea:26:32:fe:b2:37:04:7a:02:12:4d:89: d0:c0:4e:17:5e:e3:cc:2d:08:99:84:67:9c:6b:20:04:0f:69: e1:fd:e6:e0:d0:52:0d:39:cc:f2:de:ca:16:d3:02:dc:8e:16: 2e:3c:e5:5d:dd:44:49:1a:64:44:bd:d1:e2:82:0c:29:38:b2: 03:2f:85:18:f4:b7:87:cf:ba:8d:41:05:a3:10:3b:0b:fe:2f: cc:4b:d2:b0:6f:fa:6f:8e:9c:20:06:5d:a7:e5:a6:17:8c:6c: fd:2c:c5:bb:d4:ee:55:63:91:6a:0e:53:29:42:a9:b6:d8:44: 0c:83:ba:9c:1a:5a:c5:16:21:32:ba:d7:cc:97:5c:d7:6e:aa: 6b:6f:41:25:78:1b:ad:48:4a:a0:25:61:14:2a:32:5b:0d:36: a4:a7:11:06:de:ad:ab:1e:90:fb:01:1a:6b:62:6e:47:bf:eb: 3f:13:6e:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjUwODA5MDYzNTQyWhcNMjUwODE2MDYzNTQyWjAYMRYwFAYD VQQDEw02ODk2ZWMzZS03MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XXTAUuthOBqVQj/d0QD66F0nfHII3wWdhAw3j//3+MABXlClPsOSjplDymE 5bljHNCNYU+dTgvnhQstagLS0DPrMpj/+OLc68jzKZbMtjrcU7QVn0FLSZ6ut/eg yDboYqHUpDpiR56DIaWj8xPX1FzWuZIevpyd+eLxu54CASdKTkXrGOJ5BKZPl10v cokI7uz41j7IfsZKOPusWOQm7w3cl9llIwNXDveM5iJhBBYx9+XS+BjYT3kPm0zX f9jCywgQCjEp3VJC3v6IEg5f+V0P7rb5oxXgfnZgXOhhXQe5ywy5rZkXexjSZYhw mcRVxN3ggeM3yhIHFCjlk32S+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/BBqHU UrF8N3AsiAHMFDPNevVaMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr UlJjT0JZNEs3YzY2MUpRRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHcyIep+VuxPwp2pkvR308S9G2s7a9F8my405Qa/6KCfaKhpS9KXQh KUr7SSpCJ2YQmJWtWZcVFVhar7KtiX8GvDbdQ4ybHBkxVPw2xBHqJjL+sjcEegIS TYnQwE4XXuPMLQiZhGecayAED2nh/ebg0FINOczy3soW0wLcjhYuPOVd3URJGmRE vdHiggwpOLIDL4UY9LeHz7qNQQWjEDsL/i/MS9Kwb/pvjpwgBl2n5aYXjGz9LMW7 1O5VY5FqDlMpQqm22EQMg7qcGlrFFiEyutfMl1zXbqprb0EleButSEqgJWEUKjJb DTakpxEG3q2rHpD7ARprYm5Hv+s/E24u -----END CERTIFICATE-----Generated at Sat Aug 9 10:36:09 2025 by rpki-client