$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft File: NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft (raw, json) Hash identifier: 1sQDk7mY7Yl7qhpzZIXfnH/pTaFCpPCDjF/nJCBZnqg= Subject key identifier: 63:9C:FB:EC:9B:A4:48:A2:98:CF:17:5B:5F:7A:70:C6:7D:FB:62:8D Authority key identifier: 34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A Certificate issuer: /CN=A91B927E/serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Certificate serial: 0A64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft Manifest number: 1173 Signing time: Sun 10 Aug 2025 19:40:24 +0000 Manifest this update: Sun 10 Aug 2025 19:40:23 +0000 Manifest next update: Sun 17 Aug 2025 19:40:23 +0000 Files and hashes: 1: NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl (hash: 7xAra2zF2ObOb++AJag3tibRNmpzyJ0Pw1E4k6CmAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2660 (0xa64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=346DF0EF4D8BC63C3824D6E4900674632547B08A Validity Not Before: Aug 10 19:40:23 2025 GMT Not After : Aug 17 19:40:23 2025 GMT Subject: CN=6898f5a8-edfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:d9:87:db:19:7a:18:6d:0b:f1:c0:0f:3c: 79:49:7d:f8:b2:e9:9a:09:06:4c:19:6e:a4:ad:24: e1:2a:6f:16:02:6d:22:f4:e5:58:ca:e8:37:fe:43: 75:c7:d6:c4:cd:95:ee:27:37:bb:85:f4:b7:8d:71: 52:6b:5c:26:4e:3f:aa:66:28:3b:b0:3a:7f:b8:1b: ea:70:49:9c:60:19:e2:cc:3c:65:4e:c6:89:32:0c: 2a:b9:f8:47:16:ab:1e:49:06:11:ba:f7:75:43:65: b2:15:8d:c2:8b:d1:25:b9:b1:b9:c7:50:9a:18:fd: 16:d8:07:37:74:f0:e3:b0:e4:24:ab:3e:a8:a2:fc: 44:de:14:ca:12:09:96:ab:28:57:42:c4:95:af:46: e7:f2:05:f7:0f:dd:c8:83:bb:32:98:4b:2c:2e:2c: 3f:0d:cd:98:da:97:bf:70:c5:a7:fa:56:67:e0:54: 2a:cc:f4:e0:f2:b0:f7:92:f7:d2:25:de:7d:41:7c: aa:d5:a6:28:37:0d:79:ed:2e:96:57:d8:b3:0f:5f: 03:72:a2:49:1a:8e:d9:db:8c:79:09:3f:52:36:94: ff:ab:a6:76:9f:2a:09:85:69:21:92:ba:35:83:86: 66:6b:9b:10:6f:d1:af:62:82:cd:66:53:f6:71:c0: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:FB:EC:9B:A4:48:A2:98:CF:17:5B:5F:7A:70:C6:7D:FB:62:8D X509v3 Authority Key Identifier: keyid:34:6D:F0:EF:4D:8B:C6:3C:38:24:D6:E4:90:06:74:63:25:47:B0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NG3w702Lxjw4JNbkkAZ0YyVHsIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/NG3w702Lxjw4JNbkkAZ0YyVHsIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ef:98:66:bb:7a:77:71:6b:a4:9e:d2:1d:89:92:dd:96:b4: 6f:2f:e1:c2:fa:57:fe:91:fd:d3:25:0c:35:6c:25:80:dd:76: da:71:a5:48:67:a6:16:b7:47:af:a5:b8:5e:a3:09:cf:b6:18: db:64:49:b3:12:55:ae:ac:68:8f:8a:01:05:25:de:47:a8:b3: 43:15:a2:06:e5:92:29:2c:67:c6:5a:f0:90:9b:99:c3:d4:68: 9b:bc:0e:4d:b9:85:c0:84:2a:f8:0c:15:db:82:ae:a6:1a:b6: 6d:40:4b:51:80:2f:a5:7a:f4:b8:96:a0:2c:97:1e:11:dc:bc: fd:ff:13:d4:62:de:8b:99:3e:fd:e0:9f:0f:6b:1f:60:4e:d3: 20:6a:9d:28:25:6e:53:2f:83:c6:06:3f:73:ba:99:18:f7:ea: 0e:ab:76:8c:4a:c7:ba:e0:5e:28:72:2d:e2:ae:b4:10:f8:3c: 43:2e:a5:c0:59:71:a1:fb:37:fe:86:0d:d4:c1:4a:31:d9:a0: 29:2f:22:61:9c:9c:a0:74:6e:53:c4:26:86:4a:26:b4:70:8d: 47:11:99:de:3a:83:44:f5:f6:2e:62:49:0d:67:4d:2f:03:96: 9b:3a:c7:c3:3d:58:7e:18:14:d8:b8:92:55:f2:1c:0c:c9:a5: 3d:fa:1d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDM0NkRGMEVGNEQ4QkM2M0MzODI0RDZFNDkwMDY3NDYz MjU0N0IwOEEwHhcNMjUwODEwMTk0MDIzWhcNMjUwODE3MTk0MDIzWjAYMRYwFAYD VQQDEw02ODk4ZjVhOC1lZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IbZh9sZehhtC/HADzx5SX34sumaCQZMGW6krSThKm8WAm0i9OVYyug3/kN1 x9bEzZXuJze7hfS3jXFSa1wmTj+qZig7sDp/uBvqcEmcYBnizDxlTsaJMgwqufhH FqseSQYRuvd1Q2WyFY3Ci9ElubG5x1CaGP0W2Ac3dPDjsOQkqz6oovxE3hTKEgmW qyhXQsSVr0bn8gX3D93Ig7symEssLiw/Dc2Y2pe/cMWn+lZn4FQqzPTg8rD3kvfS Jd59QXyq1aYoNw157S6WV9izD18DcqJJGo7Z24x5CT9SNpT/q6Z2nyoJhWkhkro1 g4Zma5sQb9GvYoLNZlP2ccB7hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOc++yb pEiimM8XW196cMZ9+2KNMB8GA1UdIwQYMBaAFDRt8O9Ni8Y8OCTW5JAGdGMlR7CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhqdzRKTmJra0FaMFl5Vkhz SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05HM3c3MDJMeGp3NEpOYmtrQVowWXlWSHNJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9ORzN3NzAyTHhq dzRKTmJra0FaMFl5VkhzSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU75hmu3p3cWukntIdiZLdlrRvL+HC+lf+kf3TJQw1bCWA3XbacaVI Z6YWt0evpbheownPthjbZEmzElWurGiPigEFJd5HqLNDFaIG5ZIpLGfGWvCQm5nD 1GibvA5NuYXAhCr4DBXbgq6mGrZtQEtRgC+levS4lqAslx4R3Lz9/xPUYt6LmT79 4J8Pax9gTtMgap0oJW5TL4PGBj9zupkY9+oOq3aMSse64F4oci3irrQQ+DxDLqXA WXGh+zf+hg3UwUox2aApLyJhnJygdG5TxCaGSia0cI1HEZneOoNE9fYuYkkNZ00v A5abOsfDPVh+GBTYuJJV8hwMyaU9+h00 -----END CERTIFICATE-----Generated at Mon Aug 11 09:55:09 2025 by rpki-client