$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: NIsEFQBFJN/1pERzN2hJK+lTGU8cGqQVD4Wjj5jYAlM= Subject key identifier: 23:B3:D0:4B:C9:15:17:F0:4E:78:BF:94:CC:0D:88:61:D1:2E:F5:1B Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: 0126 Signing time: Mon 11 Aug 2025 04:47:57 +0000 Manifest this update: Mon 11 Aug 2025 04:47:56 +0000 Manifest next update: Mon 18 Aug 2025 04:47:56 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: 3W8HP7Z2ZqefNy1UceyYaZG6YVj6pC7YuFxzfQuKqrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: Aug 11 04:47:56 2025 GMT Not After : Aug 18 04:47:56 2025 GMT Subject: CN=689975fc-914e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:3b:c5:4c:f2:bd:81:75:95:9a:57:bb:b3: 44:6f:49:8a:78:ed:c3:25:a7:a7:3a:08:7f:04:f0: 93:67:a0:99:4e:6f:71:a6:db:4c:b8:11:b5:3e:3a: 2e:d1:b1:df:bf:f4:47:1e:34:31:2f:32:70:f6:eb: ac:f3:65:4e:09:b1:45:6f:fc:05:93:4f:34:b3:46: b2:86:45:af:da:ad:99:8e:64:1d:a4:ca:85:78:19: cc:e4:3a:ec:b6:be:7f:ff:3f:55:6a:2b:58:bc:c3: db:57:66:e7:d1:fd:ac:56:7a:1e:1f:df:e9:0c:41: ad:b3:a8:d5:6d:db:cf:9b:35:a0:4f:7f:1f:71:65: d5:b6:84:10:8f:55:55:56:a0:42:54:46:95:4e:7a: 94:92:fc:af:01:31:03:ba:b9:3c:e6:db:86:24:74: f2:a6:0e:d5:9c:0e:a5:1f:af:ee:f8:f8:c4:8f:23: 90:75:92:6b:2d:97:5b:3d:2e:50:24:5d:63:7c:c5: 27:32:28:21:14:22:cc:ba:1f:e5:b7:60:02:6e:b4: 65:d9:b8:de:f7:72:57:4d:8e:e1:75:d7:51:4c:46: a7:23:b1:21:1b:65:97:4b:76:b8:d5:50:47:c0:37: 2a:11:a3:dc:45:40:f8:01:0e:32:0b:f1:b9:63:0e: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B3:D0:4B:C9:15:17:F0:4E:78:BF:94:CC:0D:88:61:D1:2E:F5:1B X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:60:2d:c9:60:38:40:76:f7:b3:11:30:35:d3:11:f4:29:e2: bc:ee:9e:19:96:66:38:e0:62:5b:84:9a:a7:2a:1c:6a:b1:70: 63:83:d7:d2:4f:0f:a5:54:4f:d8:11:9c:0e:05:c8:df:2c:65: ea:44:84:42:35:60:3b:70:7d:fc:1f:a4:f8:ac:fb:6c:44:91: 20:04:da:1a:44:02:0b:99:de:2b:0c:e6:5a:95:9a:fa:55:22: 2f:4a:b5:8a:c1:fa:8a:67:89:60:38:04:66:bf:4a:c4:09:9b: a2:9a:15:d5:d4:a4:d8:84:f7:8b:1b:08:6c:7b:c8:77:40:4e: a1:52:71:cb:fd:44:ae:29:8d:ab:be:f9:8e:de:d6:9f:22:30: 20:42:40:20:85:67:b0:3e:fd:33:0e:e4:a6:18:33:ca:02:de: ea:47:9b:fd:6f:96:a6:bb:d2:e0:a6:72:dd:72:11:89:49:4c: 5d:66:eb:f6:b7:a3:4c:c7:3e:b5:ca:5b:9a:57:5b:f7:86:65: a5:8a:e7:27:0f:ac:40:8b:7f:1a:54:e9:8c:96:1c:7d:ef:dd: a4:04:b1:5f:fa:cc:bb:30:51:1f:71:c1:99:08:05:87:8b:82: 2b:5c:9e:ae:26:c9:6c:c8:33:07:63:22:c3:ad:bb:06:45:71: 16:f8:c0:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjUwODExMDQ0NzU2WhcNMjUwODE4MDQ0NzU2WjAYMRYwFAYD VQQDEw02ODk5NzVmYy05MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9s7xUzyvYF1lZpXu7NEb0mKeO3DJaenOgh/BPCTZ6CZTm9xpttMuBG1Pjou 0bHfv/RHHjQxLzJw9uus82VOCbFFb/wFk080s0ayhkWv2q2ZjmQdpMqFeBnM5Drs tr5//z9VaitYvMPbV2bn0f2sVnoeH9/pDEGts6jVbdvPmzWgT38fcWXVtoQQj1VV VqBCVEaVTnqUkvyvATEDurk85tuGJHTypg7VnA6lH6/u+PjEjyOQdZJrLZdbPS5Q JF1jfMUnMighFCLMuh/lt2ACbrRl2bje93JXTY7hdddRTEanI7EhG2WXS3a41VBH wDcqEaPcRUD4AQ4yC/G5Yw6r+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOz0EvJ FRfwTni/lMwNiGHRLvUbMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhYC3JYDhAdvezETA10xH0KeK87p4ZlmY44GJbhJqnKhxqsXBjg9fS Tw+lVE/YEZwOBcjfLGXqRIRCNWA7cH38H6T4rPtsRJEgBNoaRAILmd4rDOZalZr6 VSIvSrWKwfqKZ4lgOARmv0rECZuimhXV1KTYhPeLGwhse8h3QE6hUnHL/USuKY2r vvmO3tafIjAgQkAghWewPv0zDuSmGDPKAt7qR5v9b5amu9LgpnLdchGJSUxdZuv2 t6NMxz61yluaV1v3hmWliucnD6xAi38aVOmMlhx9792kBLFf+sy7MFEfccGZCAWH i4IrXJ6uJslsyDMHYyLDrbsGRXEW+MCn -----END CERTIFICATE-----Generated at Tue Aug 12 18:57:48 2025 by rpki-client