$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: t/H0c1sMjpFyOiGJmNUswRE5rjT+IUxIVflv64+3XAY= Subject key identifier: 51:4E:E7:3C:E3:F2:B1:C3:9A:63:5D:20:3F:0F:B6:81:E0:E5:64:B8 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E11 Signing time: Sun 10 Aug 2025 16:03:30 +0000 Manifest this update: Sun 10 Aug 2025 16:03:29 +0000 Manifest next update: Sun 17 Aug 2025 16:03:29 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: ApyWOLsoZt9soDoxp26cQqg2wq5FqXhXnNu+iFYA7bY=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7712 (0x1e20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Aug 10 16:03:29 2025 GMT Not After : Aug 17 16:03:29 2025 GMT Subject: CN=6898c2d2-84ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:40:a8:1b:ab:26:d2:e2:68:43:be:14:a1: 91:c2:1b:0e:94:d4:6c:bf:87:e2:74:a3:4e:b3:cb: bb:a9:58:ed:8b:6c:65:9a:89:45:2a:1d:25:5a:fc: 02:9f:78:74:0b:6f:d9:30:ef:b2:75:b5:9e:b7:dd: cc:cb:2a:46:f7:1f:64:fc:cd:12:9c:57:a3:db:2a: 33:87:e0:94:68:c8:32:16:47:94:22:fe:1b:4b:2f: cc:8d:2b:1c:c6:a6:9a:e6:36:e9:db:c5:40:e1:57: b5:33:31:b2:4e:f6:89:aa:9b:73:42:98:a6:2c:60: 60:2e:a1:c4:66:e2:fc:f3:cb:cc:7b:e4:43:54:d0: c3:65:97:b0:c0:5a:49:a2:6f:70:fb:7f:02:f7:1a: ab:23:50:6f:b6:8f:7e:d2:c7:a5:e2:ff:3c:d1:f1: a0:42:a9:61:37:1d:e1:8e:f1:51:94:dc:51:fb:49: 86:fa:5e:42:70:61:c5:84:84:10:01:4b:29:4c:e8: e3:4b:ed:d0:66:b5:99:aa:ff:6c:b6:6e:39:de:f4: c7:f6:fd:41:26:5b:98:cc:ec:3e:c3:24:79:eb:d0: 17:15:fb:08:dd:e5:1b:42:9a:ad:62:28:c7:ce:77: ab:5c:af:fb:a9:8c:90:36:ce:87:26:d6:65:e9:45: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:E7:3C:E3:F2:B1:C3:9A:63:5D:20:3F:0F:B6:81:E0:E5:64:B8 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:c6:0a:83:ee:66:34:36:a1:13:f8:7e:d5:81:2c:a2:2b: be:bc:61:b2:c3:db:d7:48:4d:85:90:96:2b:39:bc:5d:8b:b2: 83:6d:0e:43:6b:2c:e3:1a:f0:4a:63:ec:db:99:35:d2:62:eb: 0f:9e:ce:bb:70:89:a1:5f:75:fb:a1:01:83:0e:63:19:dd:d2: 91:67:2e:3a:d1:fb:19:6c:da:1e:37:94:c6:a8:d5:39:8e:e2: fd:37:df:81:72:35:55:81:e5:19:c9:7d:de:f6:04:31:f5:e3: a1:64:61:d5:97:69:69:9b:cf:7b:0d:59:44:32:65:64:0d:d2: 7b:21:30:88:d8:f1:1a:9b:6b:f2:98:a5:cc:38:f5:97:26:3f: ea:67:1e:05:39:c4:7f:77:8e:98:46:45:79:48:ca:79:0b:a9: 08:70:82:7b:0a:cb:d6:44:07:8f:82:59:1c:4e:f9:5c:63:a3: 9d:d8:cb:d7:03:fb:b0:16:2d:22:98:58:97:bb:66:2f:6a:68: 86:3e:a2:da:d2:28:5e:3b:02:39:bf:21:c2:eb:67:00:27:e4: 34:8e:30:66:f3:e4:98:ad:92:d7:4b:2a:84:6a:97:e8:49:e9: fe:18:b3:ec:e6:a4:63:b1:4e:18:37:de:a6:4c:01:c5:8e:30: 19:fa:38:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwODEwMTYwMzI5WhcNMjUwODE3MTYwMzI5WjAYMRYwFAYD VQQDEw02ODk4YzJkMi04NGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHpAqBurJtLiaEO+FKGRwhsOlNRsv4fidKNOs8u7qVjti2xlmolFKh0lWvwC n3h0C2/ZMO+ydbWet93MyypG9x9k/M0SnFej2yozh+CUaMgyFkeUIv4bSy/MjSsc xqaa5jbp28VA4Ve1MzGyTvaJqptzQpimLGBgLqHEZuL888vMe+RDVNDDZZewwFpJ om9w+38C9xqrI1Bvto9+0sel4v880fGgQqlhNx3hjvFRlNxR+0mG+l5CcGHFhIQQ AUspTOjjS+3QZrWZqv9stm453vTH9v1BJluYzOw+wyR569AXFfsI3eUbQpqtYijH znerXK/7qYyQNs6HJtZl6UWprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFO5zzj 8rHDmmNdID8PtoHg5WS4MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBfsYKg+5mNDahE/h+1YEsoiu+vGGyw9vXSE2FkJYrObxdi7KDbQ5D ayzjGvBKY+zbmTXSYusPns67cImhX3X7oQGDDmMZ3dKRZy460fsZbNoeN5TGqNU5 juL9N9+BcjVVgeUZyX3e9gQx9eOhZGHVl2lpm897DVlEMmVkDdJ7ITCI2PEam2vy mKXMOPWXJj/qZx4FOcR/d46YRkV5SMp5C6kIcIJ7CsvWRAePglkcTvlcY6Od2MvX A/uwFi0imFiXu2YvamiGPqLa0iheOwI5vyHC62cAJ+Q0jjBm8+SYrZLXSyqEapfo Sen+GLPs5qRjsU4YN96mTAHFjjAZ+jg3 -----END CERTIFICATE-----Generated at Sun Aug 10 18:27:13 2025 by rpki-client