$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft File: nJp0feAK9FuI94QRKOidsT0jFyk.mft (raw, json) Hash identifier: /XrrbbVAiCYktUwQp9lXabfGbKvj5FPpg4KVfVvB7Ps= Subject key identifier: 30:49:43:B5:B3:36:31:22:2E:1E:67:83:E6:7F:33:67:09:8D:18:2A Authority key identifier: 9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 Certificate issuer: /CN=A9131AC1/serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Certificate serial: 0600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft Manifest number: 05FE Signing time: Fri 22 Aug 2025 23:02:51 +0000 Manifest this update: Fri 22 Aug 2025 23:02:50 +0000 Manifest next update: Fri 29 Aug 2025 23:02:50 +0000 Files and hashes: 1: nJp0feAK9FuI94QRKOidsT0jFyk.crl (hash: ibY7sGe1ss6+DPAoMkqqmiGd3Mk5rjpVxEYR/U2hdt0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1536 (0x600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AC1, serialNumber=9C9A747DE00AF45B88F7841128E89DB13D231729 Validity Not Before: Aug 22 23:02:50 2025 GMT Not After : Aug 29 23:02:50 2025 GMT Subject: CN=68a8f71b-da68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:26:ff:83:d9:63:87:78:a6:05:67:f3:8e: 68:b3:c5:0c:84:cb:84:4b:90:a5:d4:df:ec:dd:7b: 69:5a:d2:de:41:e8:8f:cb:b5:e0:b6:8a:14:58:bf: 55:7f:2a:79:29:77:11:9d:6f:6a:77:d4:fd:55:4d: 2d:cd:fb:b7:3b:82:59:1c:ba:d5:8a:57:c5:b8:ed: b8:2e:e4:a2:04:64:f9:d5:61:6b:e0:95:ef:a2:d1: 58:ae:d7:22:76:8d:6f:62:e1:96:ae:5f:2c:a6:c1: 01:b3:3e:2e:41:ca:8e:3a:90:11:44:e8:3e:17:5c: 83:57:14:cb:f9:e0:90:32:8b:4e:32:86:07:b2:57: d4:15:a6:e8:1c:f6:89:ed:d3:38:bc:0d:a2:aa:87: 8d:e7:6d:9e:0b:5e:71:f9:aa:de:1a:94:de:20:8e: 1d:e4:cc:38:e2:4f:2c:9b:db:e7:07:a6:1f:1e:fb: f8:3a:be:c4:f7:b6:54:22:21:b3:61:88:c3:86:f3: f7:f6:3b:d9:b0:d7:13:98:bd:08:e2:b4:b1:a0:5b: 47:72:0c:9b:2c:de:de:69:7d:ab:22:b7:56:88:ea: 89:f5:1d:39:cc:b8:3e:4d:84:5d:3d:84:67:1e:3e: 2d:f3:6d:54:06:4f:20:5f:df:44:53:ba:16:7f:b8: 54:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:49:43:B5:B3:36:31:22:2E:1E:67:83:E6:7F:33:67:09:8D:18:2A X509v3 Authority Key Identifier: keyid:9C:9A:74:7D:E0:0A:F4:5B:88:F7:84:11:28:E8:9D:B1:3D:23:17:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJp0feAK9FuI94QRKOidsT0jFyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AC1/FE68D3C4B99011EB9ABE7E4EC4F9AE02/nJp0feAK9FuI94QRKOidsT0jFyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2d:18:dd:6c:12:70:42:8a:7e:a5:67:38:da:6c:b8:fd:ee: 47:a2:51:a5:79:9f:7d:b9:2d:6c:e0:21:76:9e:7b:c0:05:3f: 18:fe:95:f2:fc:3b:85:b3:25:31:7f:64:23:f6:5f:2c:2a:16: e5:2f:21:3b:1b:9e:04:18:a1:61:5b:e8:70:bc:95:b7:de:0c: 6c:9d:50:75:56:1a:e4:1b:51:6c:b6:5a:46:e4:6b:58:af:86: 30:e9:b4:56:1c:e0:7a:21:30:d4:c0:ff:2d:f2:76:0b:3f:70: 1f:0e:0d:aa:50:6c:31:ec:05:1e:a4:bc:d7:f0:64:b1:23:7c: cb:61:c2:07:02:35:b1:51:77:6d:0c:6b:19:2f:ec:b3:d4:98: 13:54:c5:08:9c:25:ba:f2:ee:f9:c2:06:ff:d5:48:99:d4:b5: c4:79:de:0b:07:19:b2:00:ad:3e:70:53:36:e1:db:b7:ed:ce: df:47:32:2f:8e:1c:53:58:57:25:07:a4:20:0e:90:25:40:91: de:a4:4f:cc:1b:fa:46:e0:6a:b1:04:37:71:e7:2f:e2:97:89: ba:0e:c7:dc:ef:fc:85:f5:6b:0c:20:f4:23:56:35:26:11:4c: d7:b4:23:16:63:03:b5:ff:4d:d5:5c:c4:32:fa:46:39:d4:ff: 70:45:7d:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQzExMTAvBgNVBAUTKDlDOUE3NDdERTAwQUY0NUI4OEY3ODQxMTI4RTg5REIx M0QyMzE3MjkwHhcNMjUwODIyMjMwMjUwWhcNMjUwODI5MjMwMjUwWjAYMRYwFAYD VQQDEw02OGE4ZjcxYi1kYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Am/4PZY4d4pgVn845os8UMhMuES5Cl1N/s3XtpWtLeQeiPy7XgtooUWL9V fyp5KXcRnW9qd9T9VU0tzfu3O4JZHLrVilfFuO24LuSiBGT51WFr4JXvotFYrtci do1vYuGWrl8spsEBsz4uQcqOOpARROg+F1yDVxTL+eCQMotOMoYHslfUFaboHPaJ 7dM4vA2iqoeN522eC15x+areGpTeII4d5Mw44k8sm9vnB6YfHvv4Or7E97ZUIiGz YYjDhvP39jvZsNcTmL0I4rSxoFtHcgybLN7eaX2rIrdWiOqJ9R05zLg+TYRdPYRn Hj4t821UBk8gX99EU7oWf7hUBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBJQ7Wz NjEiLh5ng+Z/M2cJjRgqMB8GA1UdIwQYMBaAFJyadH3gCvRbiPeEESjonbE9Ixcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFDMS9GRTY4RDNDNEI5 OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlGdUk5NFFSS09pZHNUMGpG eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KcDBmZUFLOUZ1STk0UVJLT2lkc1QwakZ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFDMS9GRTY4RDNDNEI5OTAxMUVCOUFCRTdFNEVDNEY5QUUwMi9uSnAwZmVBSzlG dUk5NFFSS09pZHNUMGpGeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9LRjdbBJwQop+pWc42my4/e5HolGleZ99uS1s4CF2nnvABT8Y/pXy /DuFsyUxf2Qj9l8sKhblLyE7G54EGKFhW+hwvJW33gxsnVB1VhrkG1FstlpG5GtY r4Yw6bRWHOB6ITDUwP8t8nYLP3AfDg2qUGwx7AUepLzX8GSxI3zLYcIHAjWxUXdt DGsZL+yz1JgTVMUInCW68u75wgb/1UiZ1LXEed4LBxmyAK0+cFM24du37c7fRzIv jhxTWFclB6QgDpAlQJHepE/MG/pG4GqxBDdx5y/il4m6Dsfc7/yF9WsMIPQjVjUm EUzXtCMWYwO1/03VXMQy+kY51P9wRX16 -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:18 2025 by rpki-client