$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: KJ+6ddckHZJpZZZsaYsvhPnHanCADNqFjCiCghEdUl0= Subject key identifier: D3:54:53:19:F7:52:09:B7:23:A3:7B:D7:0C:25:9C:98:9B:B2:F0:D8 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34A6 Signing time: Sun 10 Aug 2025 15:07:25 +0000 Manifest this update: Sun 10 Aug 2025 15:07:25 +0000 Manifest next update: Sun 17 Aug 2025 15:07:25 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: BMIIvLFXeQX5cupR43eBldIdBzWlB4l3WoaBfIdWw1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Aug 10 15:07:25 2025 GMT Not After : Aug 17 15:07:25 2025 GMT Subject: CN=6898b5ad-f8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:35:7e:34:31:76:a2:c8:f3:dc:04:c0:8b: 99:2c:d7:ce:3b:c4:a3:6b:0a:9c:55:2f:68:82:6e: 6c:fa:33:b2:5c:6a:ea:84:5f:c3:47:80:3d:6e:0c: 77:82:84:11:c3:8e:02:3b:0d:1c:f1:5b:66:d3:1f: 62:68:92:f5:eb:5c:25:61:4f:1b:52:c1:65:c1:69: 2c:cf:e8:61:68:3d:5c:d6:ec:23:c9:93:74:54:be: 6d:a3:d8:a5:79:02:6b:84:df:45:42:65:aa:40:89: 54:2d:6f:5b:ea:bc:10:23:0a:72:f6:71:ce:06:f4: ae:96:dc:9c:c2:d5:78:b0:45:6e:06:58:99:77:46: 2f:11:1a:5a:84:50:96:d5:f6:0e:c1:c9:74:b1:77: 50:44:1d:47:97:7e:c1:42:a3:6d:d1:be:e0:23:05: d7:ed:3f:e8:6c:cd:61:06:11:ed:fb:52:4b:4b:26: 9c:0e:e8:52:ab:eb:7c:8b:9f:0b:33:e8:68:68:0b: 66:49:d1:30:30:b5:59:96:e1:ea:50:4a:76:a4:6e: 3b:75:8e:9c:e0:26:6d:2b:dc:42:cc:4c:a2:1a:97: d4:cb:b1:0f:4b:83:55:a9:2d:5a:f2:be:9f:f2:da: 65:ba:ee:b4:65:0f:19:e3:3a:72:0e:0d:74:99:8d: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:53:19:F7:52:09:B7:23:A3:7B:D7:0C:25:9C:98:9B:B2:F0:D8 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:8d:79:80:ae:ae:18:f4:d2:62:bb:3d:5e:08:26:d7:c2:b2: 94:d4:43:e0:5d:a3:4a:1a:1a:af:47:38:5d:90:b3:d5:81:3f: 08:b3:a4:14:d3:b7:b3:a2:19:72:bd:a3:f1:20:11:2d:79:b0: 8a:e2:7a:90:77:76:55:f1:0c:1a:de:ed:27:ed:ea:ff:82:f5: 02:20:3b:d7:8d:a0:86:bd:45:ef:aa:ba:8d:96:2c:e3:4a:c1: 94:e6:21:49:f0:fc:69:ed:be:c4:5f:0b:3d:aa:03:79:91:3a: d2:44:ea:eb:0c:fe:01:54:23:e1:f6:09:82:cc:00:4b:c7:11: b3:ff:d9:3b:a0:76:12:a6:87:da:49:95:ed:26:0e:1b:08:7e: 7b:9e:5d:c2:cd:37:cc:4e:c1:aa:60:47:b9:53:bf:ea:78:9b: 00:df:15:bc:1b:0e:e8:0e:3c:b6:a8:52:e5:6f:7a:65:bf:39: 47:bf:23:50:41:76:e9:be:6b:ef:79:4e:fc:cb:62:b4:51:93: 74:c2:ea:13:b2:b0:1f:5f:99:cc:7e:78:e2:7a:40:ee:04:ec: fb:f1:29:28:8f:54:84:19:92:ff:46:06:e8:1a:3e:7a:ac:5b: 11:18:8f:fd:2a:d1:e9:48:54:96:33:c2:36:58:34:2d:27:b2: 33:be:ae:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwODEwMTUwNzI1WhcNMjUwODE3MTUwNzI1WjAYMRYwFAYD VQQDEw02ODk4YjVhZC1mOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoA1fjQxdqLI89wEwIuZLNfOO8SjawqcVS9ogm5s+jOyXGrqhF/DR4A9bgx3 goQRw44COw0c8Vtm0x9iaJL161wlYU8bUsFlwWksz+hhaD1c1uwjyZN0VL5to9il eQJrhN9FQmWqQIlULW9b6rwQIwpy9nHOBvSultycwtV4sEVuBliZd0YvERpahFCW 1fYOwcl0sXdQRB1Hl37BQqNt0b7gIwXX7T/obM1hBhHt+1JLSyacDuhSq+t8i58L M+hoaAtmSdEwMLVZluHqUEp2pG47dY6c4CZtK9xCzEyiGpfUy7EPS4NVqS1a8r6f 8tpluu60ZQ8Z4zpyDg10mY1x3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNUUxn3 Ugm3I6N71wwlnJibsvDYMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDjXmArq4Y9NJiuz1eCCbXwrKU1EPgXaNKGhqvRzhdkLPVgT8Is6QU 07ezohlyvaPxIBEtebCK4nqQd3ZV8Qwa3u0n7er/gvUCIDvXjaCGvUXvqrqNlizj SsGU5iFJ8Pxp7b7EXws9qgN5kTrSROrrDP4BVCPh9gmCzABLxxGz/9k7oHYSpofa SZXtJg4bCH57nl3CzTfMTsGqYEe5U7/qeJsA3xW8Gw7oDjy2qFLlb3plvzlHvyNQ QXbpvmvveU78y2K0UZN0wuoTsrAfX5nMfnjiekDuBOz78Skoj1SEGZL/RgboGj56 rFsRGI/9KtHpSFSWM8I2WDQtJ7Izvq6q -----END CERTIFICATE-----Generated at Mon Aug 11 10:34:50 2025 by rpki-client