$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json) Hash identifier: z4BSjDwj1HT1Uy7HnWmAiGKU2u4MUsZg8kxL5IcJqhw= Subject key identifier: 8C:7A:78:B7:A1:BD:24:68:7E:86:B5:EB:11:94:6D:26:FA:82:72:ED Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft Manifest number: 69 Signing time: Mon 11 Aug 2025 07:14:51 +0000 Manifest this update: Mon 11 Aug 2025 07:14:51 +0000 Manifest next update: Mon 18 Aug 2025 07:14:51 +0000 Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: DGRjwsgPvMIMBpk7K47GUreBCChtkm0iArklSfSWiZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146251, serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Validity Not Before: Aug 11 07:14:51 2025 GMT Not After : Aug 18 07:14:51 2025 GMT Subject: CN=6899986b-303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:18:69:b5:59:9c:af:db:f7:7c:c6:7d:fa: 5f:9e:6e:2b:2d:83:cd:a4:b5:38:0d:16:d3:87:45: af:ff:b3:92:80:5b:0a:db:7a:b3:74:12:03:b6:53: 60:e2:36:cd:2e:07:9f:15:55:5c:56:37:e6:19:a2: 6e:31:80:2f:85:a8:8a:d0:4f:c9:1e:b3:08:1a:bb: b5:51:2b:82:aa:5e:64:1e:49:71:2c:f0:8e:8f:15: bd:8f:8e:fa:89:9b:29:ac:a9:60:93:99:55:d8:d6: d4:a0:24:f6:51:6a:15:5f:e0:4f:cb:9e:d5:d1:11: 11:0f:e6:db:62:4c:89:8a:30:74:a4:b2:11:73:a5: 37:b1:b1:49:51:06:6f:9e:0b:4e:51:f5:30:58:7a: 68:f6:ce:63:9b:01:36:a5:5a:3d:2a:a7:86:0e:11: 97:43:1b:dc:91:ed:c7:83:cb:79:fe:ac:94:b3:f9: 9c:01:1f:d9:fa:cf:6e:d1:fd:5b:78:51:b2:16:df: fc:c2:94:a5:01:82:5c:03:13:15:de:aa:51:c9:fe: 01:60:43:8a:03:6c:59:2f:69:db:37:63:c3:2a:fb: 67:8b:29:f0:c4:0c:84:87:41:3e:b8:00:2f:f3:2e: e6:d1:25:11:31:43:24:6f:7d:9e:0f:34:c8:71:4f: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:78:B7:A1:BD:24:68:7E:86:B5:EB:11:94:6D:26:FA:82:72:ED X509v3 Authority Key Identifier: keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:09:16:fb:82:f4:de:a2:14:93:35:8f:2e:1a:88:22:31:68: 51:8a:6b:21:99:e8:ef:43:92:d9:ef:95:66:78:9d:76:46:f9: f6:b5:cc:10:77:cb:3d:73:e7:0f:56:9d:3b:c6:4a:2a:e0:b3: 66:da:f2:ed:55:7b:0f:34:ac:e3:e6:4a:1c:83:a3:6b:45:9f: 1f:05:f9:04:9f:92:b3:2b:92:40:86:18:b4:3d:8c:4b:1e:b9: 04:1d:21:94:22:a6:1a:d8:39:74:e7:87:e3:38:35:4f:f9:b6: 46:df:42:50:10:69:1c:d3:4b:c3:4a:67:b0:db:b3:d0:f6:28: 3d:0f:67:f6:4f:8d:04:1d:d4:90:60:cf:73:ee:6a:60:9f:ed: ed:06:7f:dc:8e:89:36:84:21:ac:f6:d4:6f:67:9b:60:8a:0a: df:f5:ec:56:7b:05:d8:5e:f4:17:c9:d5:b3:6c:64:f8:4c:05: ae:86:89:93:fa:71:b7:46:5d:11:d1:94:f5:32:03:a0:be:4c: e0:f0:18:af:2a:95:45:7f:a0:71:dd:7a:84:4b:16:85:c1:e2: 86:4c:e2:d3:c5:95:2c:65:44:85:3e:5b:7d:28:df:26:4f:a8: ab:0d:be:81:aa:bf:45:72:82:c6:41:0c:a1:9e:9d:1a:c2:d4: 90:ca:0e:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjI1MTExMC8GA1UEBRMoMzYwQzdDN0I1QzZDNjlBOTA2OUQ4MjVCRjFDNzBBRjIw OERBMzM3QjAeFw0yNTA4MTEwNzE0NTFaFw0yNTA4MTgwNzE0NTFaMBgxFjAUBgNV BAMTDTY4OTk5ODZiLTMwM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLmBhptVmcr9v3fMZ9+l+ebistg82ktTgNFtOHRa//s5KAWwrberN0EgO2U2Di Ns0uB58VVVxWN+YZom4xgC+FqIrQT8keswgau7VRK4KqXmQeSXEs8I6PFb2PjvqJ mymsqWCTmVXY1tSgJPZRahVf4E/LntXREREP5ttiTImKMHSkshFzpTexsUlRBm+e C05R9TBYemj2zmObATalWj0qp4YOEZdDG9yR7ceDy3n+rJSz+ZwBH9n6z27R/Vt4 UbIW3/zClKUBglwDExXeqlHJ/gFgQ4oDbFkvads3Y8Mq+2eLKfDEDISHQT64AC/z LubRJRExQyRvfZ4PNMhxT7OVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjHp4t6G9 JGh+hrXrEZRtJvqCcu0wHwYDVR0jBBgwFoAUNgx8e1xsaakGnYJb8ccK8gjaM3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MjUxLzBCMTZFQUE0RDg3 MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFrR25ZSmI4Y2NLOGdqYU0z cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmd4OGUxeHNhYWtHbllKYjhjY0s4Z2phTTNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MjUxLzBCMTZFQUE0RDg3MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFr R25ZSmI4Y2NLOGdqYU0zcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKkJFvuC9N6iFJM1jy4aiCIxaFGKayGZ6O9DktnvlWZ4nXZG+fa1zBB3 yz1z5w9WnTvGSirgs2ba8u1Vew80rOPmShyDo2tFnx8F+QSfkrMrkkCGGLQ9jEse uQQdIZQiphrYOXTnh+M4NU/5tkbfQlAQaRzTS8NKZ7Dbs9D2KD0PZ/ZPjQQd1JBg z3PuamCf7e0Gf9yOiTaEIaz21G9nm2CKCt/17FZ7Bdhe9BfJ1bNsZPhMBa6GiZP6 cbdGXRHRlPUyA6C+TODwGK8qlUV/oHHdeoRLFoXB4oZM4tPFlSxlRIU+W30o3yZP qKsNvoGqv0VygsZBDKGenRrC1JDKDuM= -----END CERTIFICATE-----Generated at Wed Aug 13 08:50:43 2025 by rpki-client