$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: e+wqHCkq14h69gnarn4D5GmZBP3Ax3pm1W4ucywfbog= Subject key identifier: 23:4F:0B:BF:0C:A0:03:77:04:88:42:12:E6:76:D8:B2:99:8E:FB:25 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1DF2 Signing time: Sat 14 Jun 2025 16:03:50 +0000 Manifest this update: Sat 14 Jun 2025 16:03:50 +0000 Manifest next update: Sat 21 Jun 2025 16:03:50 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: tuPe/9t54Aw5ZoLQnnb15rVyWvkxd0yjUuNeyRGxWzg=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: k9wr3qZcJ76UlwuVZn3FECVmsL3FOhLSrWOZD7INceU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7680 (0x1e00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jun 14 16:03:50 2025 GMT Not After : Jun 21 16:03:50 2025 GMT Subject: CN=684d9d66-c63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:d4:92:88:bf:0e:1f:90:fa:59:a1:da:27: fc:40:92:77:39:ac:25:c1:2a:38:d0:f6:b4:50:4b: e6:7b:c3:a1:4b:ce:ef:fd:a5:1e:9e:46:57:19:1f: b9:c6:b4:ec:1b:75:2d:3f:f0:69:8c:e4:0d:58:3b: 54:f7:f6:8d:09:3d:0b:8c:94:4e:30:f4:69:25:34: b4:34:8e:29:d2:af:ed:9c:7c:af:32:99:54:0f:de: 7a:49:58:13:0a:7b:e6:59:e4:7c:87:7f:43:36:c2: 25:15:3d:e9:a5:f0:85:3a:47:bd:b3:b1:b9:ba:47: 34:66:99:d4:59:fa:9e:d3:8a:fc:78:16:40:f2:a4: 21:57:b3:22:72:b1:49:9e:63:6c:e6:66:29:52:fe: 42:30:dd:c5:ea:90:5d:fa:8a:53:42:be:23:30:83: 87:3c:f4:a3:9a:cd:66:f4:52:17:7f:b5:b9:bb:8f: 09:79:d3:dc:30:13:43:25:93:ce:b3:b5:58:4b:37: e9:46:37:ac:42:2e:92:ad:5c:b3:59:d2:ea:27:33: 07:4b:63:e0:38:49:e7:dc:9e:99:00:a2:26:73:ec: 8b:cd:05:03:af:c8:fe:45:67:79:a7:77:6a:8e:39: bc:10:0f:4f:75:d9:8e:5d:51:82:b5:ba:f5:ca:7f: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4F:0B:BF:0C:A0:03:77:04:88:42:12:E6:76:D8:B2:99:8E:FB:25 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b2:eb:25:f2:b5:96:5b:d0:2d:9a:4b:9e:72:90:01:49:98: 73:76:38:1e:c9:43:2b:a9:ac:4c:b4:cd:d6:f8:f1:0b:19:90: 64:22:1c:f0:77:9c:77:ad:78:1c:48:8e:29:ef:98:51:1d:6e: 82:8b:ae:57:10:41:40:e2:96:d1:56:4e:c1:b9:ca:48:ed:ec: 92:46:26:ca:0c:7d:ed:b7:45:ef:61:8a:07:ca:70:00:9c:f5: 51:0f:f6:bf:e0:70:5e:07:5e:04:7f:85:77:94:04:84:76:03: 54:4c:5d:87:ae:89:6e:40:0d:f9:1b:73:ad:96:0f:99:91:be: 7e:78:56:f7:7c:d8:31:32:95:b6:16:19:6f:97:42:4a:07:30: f5:44:3c:22:49:1f:9f:74:08:65:85:2e:65:c8:c3:9e:9c:43: 58:cf:ec:00:51:86:95:11:99:28:ce:5e:5b:b4:62:89:23:bd: f9:c2:fd:93:70:c3:e0:ae:60:b3:83:57:04:19:6f:2d:c8:11: 95:8e:19:19:b0:ca:f6:9f:ad:60:bd:90:8c:fe:b0:f6:88:97: 0f:a4:33:e7:eb:47:2a:30:49:bd:de:07:7b:fc:4f:74:d9:4c: 8a:2e:4d:7a:fc:e1:6a:61:48:e1:eb:db:29:83:24:5f:e6:01: a2:a4:d0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNjE0MTYwMzUwWhcNMjUwNjIxMTYwMzUwWjAYMRYwFAYD VQQDEw02ODRkOWQ2Ni1jNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjTUkoi/Dh+Q+lmh2if8QJJ3OawlwSo40Pa0UEvme8OhS87v/aUenkZXGR+5 xrTsG3UtP/BpjOQNWDtU9/aNCT0LjJROMPRpJTS0NI4p0q/tnHyvMplUD956SVgT CnvmWeR8h39DNsIlFT3ppfCFOke9s7G5ukc0ZpnUWfqe04r8eBZA8qQhV7MicrFJ nmNs5mYpUv5CMN3F6pBd+opTQr4jMIOHPPSjms1m9FIXf7W5u48JedPcMBNDJZPO s7VYSzfpRjesQi6SrVyzWdLqJzMHS2PgOEnn3J6ZAKImc+yLzQUDr8j+RWd5p3dq jjm8EA9PddmOXVGCtbr1yn8LowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNPC78M oAN3BIhCEuZ22LKZjvslMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPsusl8rWWW9AtmkuecpABSZhzdjgeyUMrqaxMtM3W+PELGZBkIhzw d5x3rXgcSI4p75hRHW6Ci65XEEFA4pbRVk7BucpI7eySRibKDH3tt0XvYYoHynAA nPVRD/a/4HBeB14Ef4V3lASEdgNUTF2HroluQA35G3Otlg+Zkb5+eFb3fNgxMpW2 Fhlvl0JKBzD1RDwiSR+fdAhlhS5lyMOenENYz+wAUYaVEZkozl5btGKJI735wv2T cMPgrmCzg1cEGW8tyBGVjhkZsMr2n61gvZCM/rD2iJcPpDPn60cqMEm93gd7/E90 2UyKLk16/OFqYUjh69spgyRf5gGipNAo -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:32 2025 by rpki-client