$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: dw71TokKtSaKASiVlMJGvurS+bQuaRt1IuDhUWbkIc0= Subject key identifier: 61:96:27:9D:0E:46:06:1A:35:50:78:37:B8:D8:3C:E9:C6:05:2B:B7 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E17 Signing time: Fri 22 Aug 2025 16:08:44 +0000 Manifest this update: Fri 22 Aug 2025 16:08:43 +0000 Manifest next update: Fri 29 Aug 2025 16:08:43 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: ZfpVaqRK0reSTfgY0tePv1MMp8p43pZ4oBjYxBe30QA=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7718 (0x1e26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Aug 22 16:08:43 2025 GMT Not After : Aug 29 16:08:43 2025 GMT Subject: CN=68a8960b-e054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:95:a3:96:c2:04:a0:f3:b1:cf:0c:c7:dc: 78:99:4b:82:b2:3e:1f:c8:8f:14:42:77:93:65:81: ec:36:1a:e0:5b:28:bd:1a:a8:87:fa:33:1d:24:92: d6:92:4d:76:1f:10:43:8e:a7:0a:d0:7e:c9:fa:20: c7:e3:8f:ad:a3:62:9b:84:be:2c:9a:13:7d:b2:73: ed:72:60:6e:74:62:c6:46:97:17:9c:ec:86:2b:e7: 86:1e:ae:82:9f:76:97:7f:1e:c0:ec:40:2e:e6:e9: fa:85:40:05:35:d2:b7:bd:6d:cf:b1:54:e1:67:0d: 21:1f:b3:59:8d:86:ef:7e:c0:f3:63:ea:73:71:e6: ce:ae:1d:27:18:ed:3f:47:60:89:24:76:79:86:fe: 0f:51:81:56:91:73:82:ba:ba:f9:18:32:81:39:9a: 5a:3d:c7:6e:50:d4:84:48:fe:85:26:ce:b2:75:e6: 41:99:b8:e6:71:f0:52:65:89:9b:0e:d4:63:85:54: a2:fa:0c:90:cb:6c:28:b8:f4:87:12:a6:47:5a:0c: 09:58:ad:4a:12:00:ae:ac:a4:d5:d3:0f:57:cf:49: 14:ae:89:14:f6:0e:80:ff:83:e6:fb:2e:33:05:32: b7:89:c4:bb:8a:3d:7f:a9:a4:57:f7:3f:01:f4:8b: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:27:9D:0E:46:06:1A:35:50:78:37:B8:D8:3C:E9:C6:05:2B:B7 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:41:75:15:4a:d1:4d:f4:a2:8a:99:ca:64:c9:bd:39:9e:a7: d3:ad:0d:3d:ea:06:f2:42:3a:06:12:e1:74:b6:64:21:45:50: bd:c1:46:66:1d:e1:a1:cc:3f:3d:aa:9f:cf:73:32:18:ab:d5: c1:b7:0a:f4:61:60:01:54:73:e2:f5:7a:74:0e:57:29:f5:01: 4f:df:a5:cb:6e:91:ab:ff:3f:10:fb:21:3b:b1:9f:f3:8f:d4: b0:ce:4a:2b:8e:f9:00:b9:6d:19:22:2d:b8:7b:30:c2:97:a5: 7d:24:61:95:32:b9:23:53:18:73:43:39:f9:4f:1d:c1:b3:0e: cf:6f:86:eb:a2:72:ee:76:b2:fc:30:ed:9d:9e:f2:38:f4:16: bd:eb:05:b5:f4:34:da:ec:96:aa:d6:b6:f5:83:14:bb:d5:67: 96:6f:88:c7:de:8d:00:1e:8f:66:63:f6:7d:3d:2c:b8:ac:e6: db:fc:c8:33:b2:90:19:a5:95:ce:a0:73:6f:1e:32:b7:ec:98: 77:93:80:b6:0c:71:98:7e:4d:2a:13:b4:a4:a5:19:2e:c9:06: 64:c6:77:7a:1d:a1:0e:82:64:18:8f:1c:73:6a:73:5a:e7:bc: 15:96:ad:94:a9:9f:6b:90:b2:6e:f7:82:21:57:c7:14:95:33: 11:1c:c8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwODIyMTYwODQzWhcNMjUwODI5MTYwODQzWjAYMRYwFAYD VQQDEw02OGE4OTYwYi1lMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2iVo5bCBKDzsc8Mx9x4mUuCsj4fyI8UQneTZYHsNhrgWyi9GqiH+jMdJJLW kk12HxBDjqcK0H7J+iDH44+to2KbhL4smhN9snPtcmBudGLGRpcXnOyGK+eGHq6C n3aXfx7A7EAu5un6hUAFNdK3vW3PsVThZw0hH7NZjYbvfsDzY+pzcebOrh0nGO0/ R2CJJHZ5hv4PUYFWkXOCurr5GDKBOZpaPcduUNSESP6FJs6ydeZBmbjmcfBSZYmb DtRjhVSi+gyQy2wouPSHEqZHWgwJWK1KEgCurKTV0w9Xz0kUrokU9g6A/4Pm+y4z BTK3icS7ij1/qaRX9z8B9Iu+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGWJ50O RgYaNVB4N7jYPOnGBSu3MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTQXUVStFN9KKKmcpkyb05nqfTrQ096gbyQjoGEuF0tmQhRVC9wUZm HeGhzD89qp/PczIYq9XBtwr0YWABVHPi9Xp0Dlcp9QFP36XLbpGr/z8Q+yE7sZ/z j9SwzkorjvkAuW0ZIi24ezDCl6V9JGGVMrkjUxhzQzn5Tx3Bsw7Pb4bronLudrL8 MO2dnvI49Ba96wW19DTa7Jaq1rb1gxS71WeWb4jH3o0AHo9mY/Z9PSy4rObb/Mgz spAZpZXOoHNvHjK37Jh3k4C2DHGYfk0qE7SkpRkuyQZkxnd6HaEOgmQYjxxzanNa 57wVlq2UqZ9rkLJu94IhV8cUlTMRHMh3 -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:43 2025 by rpki-client