$ rpki-client -vvf rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft File: NxkwlLzz42Ui-tvxlU7l_51gHg4.mft (raw, json) Hash identifier: jvKyDn+CKZ1LWeF63hRQHXfJPOHLjB8ypXwsvUDiBBE= Subject key identifier: 26:65:BE:DE:57:D8:3C:CC:98:CA:09:27:46:A0:3C:8B:F9:A3:D9:8D Authority key identifier: 37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E Certificate issuer: /CN=A9134285/serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft Manifest number: 064B Signing time: Wed 02 Jul 2025 22:55:06 +0000 Manifest this update: Wed 02 Jul 2025 22:55:05 +0000 Manifest next update: Wed 09 Jul 2025 22:55:05 +0000 Files and hashes: 1: NxkwlLzz42Ui-tvxlU7l_51gHg4.crl (hash: OCg5pynLkqS9j7qL2yWlm1JCFNVu8Can+Eudd5THGyQ=) 2: 3A00D342928511EB8B3AAC22C4F9AE02.roa (hash: aj64AT3Eg74eRiHek2DyIpF1DXkedRqzt0byGVydNm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134285, serialNumber=37193094BCF3E36522FADBF1954EE5FF9D601E0E Validity Not Before: Jul 2 22:55:05 2025 GMT Not After : Jul 9 22:55:05 2025 GMT Subject: CN=6865b8c9-6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:29:d4:68:cb:33:6b:d7:88:f2:0c:e3:36: d8:86:c1:2b:77:e4:af:c9:ce:32:a1:0a:73:4f:1c: 58:cf:b9:cf:47:d0:88:aa:70:75:71:8d:5b:60:a6: dc:b9:e6:8d:9f:ab:f1:9f:93:2e:e9:da:a0:90:87: 0b:e0:b6:8f:93:63:94:c0:a5:86:7c:dd:2b:93:2b: 1c:4d:34:03:8a:ed:0f:ac:0e:96:48:40:82:bf:7a: ec:ce:b0:b8:ea:1c:a4:9a:35:95:0e:45:64:d8:20: bf:88:af:c9:a5:ad:7e:e4:6a:50:e0:84:0e:72:ae: a9:ab:b6:ab:da:7d:ff:28:84:76:0b:06:dd:e5:85: 7d:36:44:82:99:16:20:4c:e3:91:0c:1e:62:4c:71: 25:df:50:ee:d5:7d:0d:f3:d7:00:33:fb:10:f9:55: 0a:4d:76:51:bb:10:58:1e:2c:fd:f3:89:40:76:b1: ce:74:4b:5b:69:eb:2f:fb:e1:0c:ab:00:be:63:f3: 59:a8:54:18:43:fa:55:fe:9e:ce:93:60:7b:b0:4e: de:9b:69:8e:a2:48:ba:bf:c8:06:c1:7a:b7:77:4d: d1:3b:b3:d8:02:f3:be:0d:4d:76:0a:57:c2:13:e7: 4c:37:65:66:98:9b:84:a9:db:b1:74:61:c8:e7:53: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:65:BE:DE:57:D8:3C:CC:98:CA:09:27:46:A0:3C:8B:F9:A3:D9:8D X509v3 Authority Key Identifier: keyid:37:19:30:94:BC:F3:E3:65:22:FA:DB:F1:95:4E:E5:FF:9D:60:1E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxkwlLzz42Ui-tvxlU7l_51gHg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134285/6F15B572928311EB80970420C4F9AE02/NxkwlLzz42Ui-tvxlU7l_51gHg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d5:fe:2f:e4:99:44:88:16:7b:40:d8:be:9e:64:75:b3:da: 77:c5:59:30:ea:7a:83:14:36:3f:30:df:43:34:a9:81:d3:38: a8:57:5e:d2:69:a4:7d:d3:18:18:bc:c4:3a:e9:23:b6:18:31: 1a:e9:4d:4b:4c:21:a1:b5:61:44:eb:32:5c:dd:16:54:86:13: 6b:28:c7:c7:f3:e7:b8:82:9a:01:48:79:37:44:0b:61:58:9d: 43:cf:ef:74:bb:c0:0f:12:7f:84:e6:bf:eb:a0:d6:6a:61:0d: c0:3b:79:98:42:d7:27:66:42:9b:e5:aa:96:d8:17:63:64:0e: 8d:8b:02:fb:6e:a3:57:04:53:2b:6a:f5:f1:3e:05:69:a8:cf: 10:11:c5:e4:e9:cc:fa:58:07:28:e0:78:22:12:bf:01:fd:de: 19:62:21:7e:ed:c7:6f:d7:b2:8a:7c:94:85:5a:1f:b9:13:21: 3f:6f:f3:56:b3:84:24:a8:5b:b0:2c:10:3b:cc:ea:07:c9:43: 8b:08:05:1e:4d:47:38:66:18:6c:f3:e0:0a:4e:9c:e7:1c:b3: 82:4e:ba:34:59:92:46:29:d6:23:8a:1e:30:54:9d:b3:3d:88: 00:0e:78:48:76:8d:bc:b2:be:83:c2:57:ae:56:3d:75:8e:d2: 81:70:b9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyODUxMTAvBgNVBAUTKDM3MTkzMDk0QkNGM0UzNjUyMkZBREJGMTk1NEVFNUZG OUQ2MDFFMEUwHhcNMjUwNzAyMjI1NTA1WhcNMjUwNzA5MjI1NTA1WjAYMRYwFAYD VQQDEw02ODY1YjhjOS02NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudop1GjLM2vXiPIM4zbYhsErd+Svyc4yoQpzTxxYz7nPR9CIqnB1cY1bYKbc ueaNn6vxn5Mu6dqgkIcL4LaPk2OUwKWGfN0rkyscTTQDiu0PrA6WSECCv3rszrC4 6hykmjWVDkVk2CC/iK/Jpa1+5GpQ4IQOcq6pq7ar2n3/KIR2Cwbd5YV9NkSCmRYg TOORDB5iTHEl31Du1X0N89cAM/sQ+VUKTXZRuxBYHiz984lAdrHOdEtbaesv++EM qwC+Y/NZqFQYQ/pV/p7Ok2B7sE7em2mOoki6v8gGwXq3d03RO7PYAvO+DU12ClfC E+dMN2VmmJuEqduxdGHI51NVWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZlvt5X 2DzMmMoJJ0agPIv5o9mNMB8GA1UdIwQYMBaAFDcZMJS88+NlIvrb8ZVO5f+dYB4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDI4NS82RjE1QjU3Mjky ODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQyVWktdHZ4bFU3bF81MWdI ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054a3dsTHp6NDJVaS10dnhsVTdsXzUxZ0hnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDI4NS82RjE1QjU3MjkyODMxMUVCODA5NzA0MjBDNEY5QUUwMi9OeGt3bEx6ejQy VWktdHZ4bFU3bF81MWdIZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz1f4v5JlEiBZ7QNi+nmR1s9p3xVkw6nqDFDY/MN9DNKmB0zioV17S aaR90xgYvMQ66SO2GDEa6U1LTCGhtWFE6zJc3RZUhhNrKMfH8+e4gpoBSHk3RAth WJ1Dz+90u8APEn+E5r/roNZqYQ3AO3mYQtcnZkKb5aqW2BdjZA6NiwL7bqNXBFMr avXxPgVpqM8QEcXk6cz6WAco4HgiEr8B/d4ZYiF+7cdv17KKfJSFWh+5EyE/b/NW s4QkqFuwLBA7zOoHyUOLCAUeTUc4Zhhs8+AKTpznHLOCTro0WZJGKdYjih4wVJ2z PYgADnhIdo28sr6DwleuVj11jtKBcLn9 -----END CERTIFICATE-----Generated at Thu Jul 3 18:19:41 2025 by rpki-client