$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft File: NCaEGmQGa3hlW77KDAH9CfZXBTY.mft (raw, json) Hash identifier: zZWZk7y8pZI6aVYpNkkvsiMx9dH+kwxozjn2E86hgAE= Subject key identifier: 75:6F:81:12:D2:3B:92:D0:B4:6D:D0:EB:94:0B:4D:E6:61:18:2F:C6 Authority key identifier: 34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 Certificate issuer: /CN=A9157DAE/serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft Manifest number: 01B5 Signing time: Tue 12 Aug 2025 17:12:35 +0000 Manifest this update: Tue 12 Aug 2025 17:12:34 +0000 Manifest next update: Tue 19 Aug 2025 17:12:34 +0000 Files and hashes: 1: NCaEGmQGa3hlW77KDAH9CfZXBTY.crl (hash: +ckstMvAoShcQsB3N8mqV1I056JkWsMSDLQTaMQTGDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=3426841A64066B78655BBECA0C01FD09F6570536 Validity Not Before: Aug 12 17:12:34 2025 GMT Not After : Aug 19 17:12:34 2025 GMT Subject: CN=689b7602-a921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:c1:b3:98:03:42:24:31:5e:5a:35:61:61: c0:b7:6a:41:29:e2:d1:06:f7:5d:d9:95:87:d2:18: f2:53:e0:62:6d:d8:fc:02:52:dd:a4:2c:79:63:0d: c8:14:20:a1:0a:dd:6b:68:bb:87:de:a4:18:85:20: 88:b4:c8:83:10:f8:ce:ea:bd:d4:a3:3a:1d:3f:56: 51:0e:3a:d8:ab:aa:b0:8a:d0:38:4b:c7:0b:01:a1: 1d:e3:68:47:44:a7:cf:34:93:25:63:a3:dd:2b:1f: c8:9f:22:c2:ca:c4:e9:2e:3b:9c:6b:b3:45:f5:a1: e5:07:d5:cc:5d:00:a2:4b:7e:47:1a:dd:cd:be:26: 0c:87:d1:38:5a:a5:1d:f3:f9:8a:39:55:0d:8f:2b: 1e:eb:9d:47:cc:3b:05:db:ab:f0:5f:bd:b5:24:ed: 87:6a:1f:2c:7b:89:35:09:10:29:d0:82:89:71:aa: bc:bb:1b:fd:d4:6a:6f:ea:ce:2f:2c:f9:c8:4d:5f: 2d:b2:a7:10:76:5c:dc:e5:34:a7:8c:15:11:fa:8a: a2:ed:07:b6:ad:ec:ae:9c:d5:34:6b:28:e4:bc:6b: d6:6e:e4:e6:38:86:f1:b6:2c:5b:5d:d5:d1:6a:24: 58:69:61:ea:cb:d1:2b:e1:83:4a:5f:4a:5a:28:ab: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6F:81:12:D2:3B:92:D0:B4:6D:D0:EB:94:0B:4D:E6:61:18:2F:C6 X509v3 Authority Key Identifier: keyid:34:26:84:1A:64:06:6B:78:65:5B:BE:CA:0C:01:FD:09:F6:57:05:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NCaEGmQGa3hlW77KDAH9CfZXBTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/104A7E1EDFAD11ED95153D31C4F9AE02/NCaEGmQGa3hlW77KDAH9CfZXBTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1f:02:63:f4:1f:90:7e:8a:1f:87:d2:e3:36:82:d8:24:d8: 4f:a5:18:4c:e8:12:30:4a:f8:5e:4e:6f:bb:ef:6e:9f:8c:4d: 05:56:14:b6:f5:46:99:59:cc:9a:60:51:46:24:26:c3:63:18: 57:a1:98:1b:9a:f5:ca:1e:8b:81:bb:1d:34:65:b2:8d:7c:9f: 74:47:9b:64:45:51:a9:5f:da:56:13:3c:51:6a:a1:b1:b4:1c: 87:8c:0a:d6:27:6c:d5:ff:9a:08:d0:dd:a7:d6:ad:3d:81:b6: 17:2b:bd:2f:bc:27:5b:e8:75:eb:e8:6a:e1:dd:f1:14:94:ff: 9d:88:d6:1d:06:8c:4f:eb:56:49:59:46:72:66:f8:9a:4a:84: 6a:6d:1b:36:7e:d3:9e:31:1d:2b:ab:62:c6:a3:4a:d0:14:b9: 87:47:61:ee:31:d1:73:4e:4a:5e:63:3a:aa:c4:38:a7:42:b7: 96:bb:1f:55:7c:44:e6:bc:e5:06:94:67:33:d7:3c:04:f0:a7: 1e:08:e6:6c:62:fb:34:45:c2:29:a9:d4:01:7d:78:6d:9e:74: d7:6f:37:f9:f9:8b:61:aa:a8:b7:87:bd:13:2f:d3:01:9d:01: 23:25:af:21:16:55:e9:08:1e:79:ff:7c:11:d6:92:52:7a:64: 18:e0:59:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDM0MjY4NDFBNjQwNjZCNzg2NTVCQkVDQTBDMDFGRDA5 RjY1NzA1MzYwHhcNMjUwODEyMTcxMjM0WhcNMjUwODE5MTcxMjM0WjAYMRYwFAYD VQQDEw02ODliNzYwMi1hOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eXBs5gDQiQxXlo1YWHAt2pBKeLRBvdd2ZWH0hjyU+Bibdj8AlLdpCx5Yw3I FCChCt1raLuH3qQYhSCItMiDEPjO6r3UozodP1ZRDjrYq6qwitA4S8cLAaEd42hH RKfPNJMlY6PdKx/InyLCysTpLjuca7NF9aHlB9XMXQCiS35HGt3NviYMh9E4WqUd 8/mKOVUNjyse651HzDsF26vwX721JO2Hah8se4k1CRAp0IKJcaq8uxv91Gpv6s4v LPnITV8tsqcQdlzc5TSnjBUR+oqi7Qe2reyunNU0ayjkvGvWbuTmOIbxtixbXdXR aiRYaWHqy9Er4YNKX0paKKtWFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVvgRLS O5LQtG3Q65QLTeZhGC/GMB8GA1UdIwQYMBaAFDQmhBpkBmt4ZVu+ygwB/Qn2VwU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS8xMDRBN0UxRURG QUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2EzaGxXNzdLREFIOUNmWlhC VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL05DYUVHbVFHYTNobFc3N0tEQUg5Q2ZaWEJUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS8xMDRBN0UxRURGQUQxMUVEOTUxNTNEMzFDNEY5QUUwMi9OQ2FFR21RR2Ez aGxXNzdLREFIOUNmWlhCVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvHwJj9B+Qfoofh9LjNoLYJNhPpRhM6BIwSvheTm+7726fjE0FVhS2 9UaZWcyaYFFGJCbDYxhXoZgbmvXKHouBux00ZbKNfJ90R5tkRVGpX9pWEzxRaqGx tByHjArWJ2zV/5oI0N2n1q09gbYXK70vvCdb6HXr6Grh3fEUlP+diNYdBoxP61ZJ WUZyZviaSoRqbRs2ftOeMR0rq2LGo0rQFLmHR2HuMdFzTkpeYzqqxDinQreWux9V fETmvOUGlGcz1zwE8KceCOZsYvs0RcIpqdQBfXhtnnTXbzf5+Ythqqi3h70TL9MB nQEjJa8hFlXpCB55/3wR1pJSemQY4FnL -----END CERTIFICATE-----Generated at Wed Aug 13 08:47:14 2025 by rpki-client