$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: JbSJy9TyrslkBuKlVQxc0bKki8yFS7fuzINdzp+xXtw= Subject key identifier: D5:5A:C0:E3:A1:CE:7A:49:7C:5B:07:F0:3B:C5:3A:1E:DA:CE:AF:F7 Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0727 Signing time: Fri 08 Aug 2025 22:13:06 +0000 Manifest this update: Fri 08 Aug 2025 22:13:06 +0000 Manifest next update: Fri 15 Aug 2025 22:13:06 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: i5mTkbfw85EaRK0OSdgWD2RcPdMAf77kEsgduTIWqiM=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Aug 8 22:13:06 2025 GMT Not After : Aug 15 22:13:06 2025 GMT Subject: CN=68967672-b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bd:50:91:4e:7a:8f:f5:da:79:39:11:c4:a5: 35:d6:fe:6d:10:9c:31:b3:fd:b4:e2:fb:a9:01:3e: af:b2:f9:6d:5c:99:2f:dd:38:f4:4e:b2:e8:41:cc: c4:01:b1:15:1c:3e:79:76:5a:5c:0e:db:f4:94:a1: 33:f2:f5:76:f6:9f:2c:6d:ad:b9:fd:4c:d2:75:9a: 58:a7:02:53:5b:62:a0:ef:c4:e8:37:b8:fe:0e:86: 28:75:12:16:56:44:d8:2b:55:ae:4c:c3:70:6d:57: 12:b4:67:6c:75:02:ed:6d:49:97:d0:57:8d:ed:9b: 5e:86:24:73:48:cf:2a:70:24:79:70:ba:0d:d1:30: 90:fb:88:82:f3:68:2f:84:3c:9e:87:f0:d4:65:71: b0:b4:b7:59:3d:10:af:d0:21:de:00:71:a5:3f:26: 80:f4:8b:c4:27:a8:19:88:b0:a9:98:24:0e:1a:92: 93:90:b0:b6:d2:fd:9b:09:fd:ab:c4:66:09:70:37: 42:47:f9:48:8b:ff:86:41:43:bb:6b:94:78:87:fc: 10:fa:69:b0:cf:f7:53:7b:7f:b1:53:c7:c3:80:da: 45:20:ef:fe:a9:da:fd:05:e1:ce:c6:89:13:2f:02: 84:a0:17:ba:d7:89:1f:52:8e:88:37:86:19:c1:65: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5A:C0:E3:A1:CE:7A:49:7C:5B:07:F0:3B:C5:3A:1E:DA:CE:AF:F7 X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:67:84:33:fc:0b:1b:0d:40:cf:5d:8f:60:07:ff:09:c1: 7b:34:8d:9d:11:0d:2c:d0:9d:a6:26:8d:c7:5a:23:80:e6:7e: 80:f7:1f:ae:97:af:c9:77:8f:18:1a:e2:27:d0:b6:63:07:91: 4f:39:81:9b:ca:48:bd:c9:67:f0:da:0e:83:fe:e4:71:98:29: 0e:33:e0:17:7e:91:ec:f1:89:ea:b5:33:70:be:6b:4f:74:a6: 9f:fd:26:ff:75:81:71:ad:ea:a7:fd:41:d9:4b:87:08:8d:e2: c1:e1:db:ae:32:ef:00:1f:1d:83:0e:c4:3c:e7:eb:70:b0:47: a9:17:dd:e4:d3:2c:61:88:a5:88:f4:1b:47:50:f5:a7:44:be: 68:2d:48:19:fd:1f:44:16:8d:9c:8a:f9:33:02:c6:26:5e:65: 5e:12:35:87:53:c8:cb:38:45:6c:f7:94:d4:cc:cb:2e:6f:d2: c8:90:f1:d7:f7:35:8d:26:0a:17:3a:9c:ec:75:fc:f7:44:e7: fa:f9:13:10:0b:a3:4b:04:54:d7:45:8d:ae:c1:06:9f:0a:5f: a1:e6:56:7b:03:cb:05:d2:04:0f:0d:54:4e:04:56:32:74:b5: 91:28:2a:99:ed:f9:4a:40:73:34:ec:c3:19:97:95:ee:1e:c2: f6:28:1f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwODA4MjIxMzA2WhcNMjUwODE1MjIxMzA2WjAYMRYwFAYD VQQDEw02ODk2NzY3Mi1iMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5r1QkU56j/XaeTkRxKU11v5tEJwxs/204vupAT6vsvltXJkv3Tj0TrLoQczE AbEVHD55dlpcDtv0lKEz8vV29p8sba25/UzSdZpYpwJTW2Kg78ToN7j+DoYodRIW VkTYK1WuTMNwbVcStGdsdQLtbUmX0FeN7ZtehiRzSM8qcCR5cLoN0TCQ+4iC82gv hDyeh/DUZXGwtLdZPRCv0CHeAHGlPyaA9IvEJ6gZiLCpmCQOGpKTkLC20v2bCf2r xGYJcDdCR/lIi/+GQUO7a5R4h/wQ+mmwz/dTe3+xU8fDgNpFIO/+qdr9BeHOxokT LwKEoBe614kfUo6IN4YZwWVbkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVawOOh znpJfFsH8DvFOh7azq/3MB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcOmeEM/wLGw1Az12PYAf/CcF7NI2dEQ0s0J2mJo3HWiOA5n6A9x+u l6/Jd48YGuIn0LZjB5FPOYGbyki9yWfw2g6D/uRxmCkOM+AXfpHs8YnqtTNwvmtP dKaf/Sb/dYFxreqn/UHZS4cIjeLB4duuMu8AHx2DDsQ85+twsEepF93k0yxhiKWI 9BtHUPWnRL5oLUgZ/R9EFo2civkzAsYmXmVeEjWHU8jLOEVs95TUzMsub9LIkPHX 9zWNJgoXOpzsdfz3ROf6+RMQC6NLBFTXRY2uwQafCl+h5lZ7A8sF0gQPDVROBFYy dLWRKCqZ7flKQHM07MMZl5XuHsL2KB8y -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:25 2025 by rpki-client