$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: +pdZ4tHWKYr7eaunDF1vFT195hsssUhkP61fC0V1vOo= Subject key identifier: F4:7E:21:34:20:76:B7:47:9F:5F:B1:AE:97:82:42:6E:15:9C:9D:96 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1DFD Signing time: Wed 02 Jul 2025 16:13:14 +0000 Manifest this update: Wed 02 Jul 2025 16:13:13 +0000 Manifest next update: Wed 09 Jul 2025 16:13:13 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: TGq4lIanNPSNYZbOWRP54srW54Ik/HH0cHGWz71A+0E=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7692 (0x1e0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jul 2 16:13:13 2025 GMT Not After : Jul 9 16:13:13 2025 GMT Subject: CN=68655a99-6da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:b1:77:50:77:72:d6:c1:31:05:a4:8c:08: 74:21:e0:06:8f:d6:13:0d:08:8e:b3:9b:d3:3b:95: a6:33:8d:97:a6:bc:ad:d8:6c:f1:5b:ed:dc:d5:1a: 51:00:23:19:ef:6d:3c:83:46:bd:60:c1:e4:53:fc: 3a:7a:bc:a9:22:8b:f6:20:f2:45:47:7e:b0:00:7b: fe:b3:61:0c:16:1a:a6:72:50:71:3b:ee:41:8d:06: 0f:e3:92:15:91:b3:c9:8e:e0:72:7e:bb:d6:d2:a3: de:66:94:dd:e4:0e:51:78:d7:b5:37:15:ef:a6:5d: 9f:83:29:a0:c7:3a:c1:51:37:c2:d1:18:79:c7:a6: 64:e3:5d:a4:e0:9e:97:09:eb:b7:c6:38:10:07:c0: f9:89:92:a2:6b:71:d8:b6:2b:6c:61:f4:f6:af:e5: c0:90:8a:a8:65:e3:f9:db:74:b8:bd:c3:6d:5c:c5: 1c:c2:79:ef:1d:c9:10:22:68:e7:4b:1d:be:1b:ce: cf:d2:ee:5e:9d:1b:f7:58:0c:01:0a:c6:b1:b3:07: 7c:11:14:85:d8:88:2f:f6:5e:93:a9:e0:8e:bf:e9: d2:14:e3:ff:75:74:b8:2d:3a:56:a4:0a:f9:db:83: ae:d2:f0:8d:64:c8:b9:a3:67:cc:2e:83:5c:c1:fc: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:21:34:20:76:B7:47:9F:5F:B1:AE:97:82:42:6E:15:9C:9D:96 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:95:b5:0f:12:56:53:df:b2:0d:31:71:49:03:5a:8b:c5: f4:1d:b0:a2:87:96:cd:03:e4:a1:ab:ad:db:3c:3d:5e:ef:84: 91:5c:1d:96:39:0a:38:12:9a:31:51:da:38:64:50:10:04:27: d2:a2:f7:b2:2a:d5:30:b7:4d:2f:26:ff:5f:ac:a9:1c:16:8f: 94:30:96:36:c8:75:d9:70:df:7b:6d:01:e4:43:3d:78:24:0e: e9:76:05:6b:fd:c7:21:9e:74:79:ee:ad:1e:31:fc:18:91:57: f7:b2:16:50:e1:b1:84:83:93:c9:ba:f0:e2:0c:f2:0a:3b:28: 95:80:57:ad:53:77:c3:c4:e6:1c:8f:95:87:45:ae:a8:bb:92: 4b:e8:14:7e:1a:c8:84:b7:9f:58:78:c9:d7:28:2b:3a:b5:46: 01:52:36:c6:1b:89:67:a8:a1:92:29:51:eb:84:1e:1e:1c:a0: a5:96:63:d7:bb:12:19:91:40:f4:9d:cb:38:36:64:28:24:84: b0:b5:38:30:ba:c1:4a:ea:26:b7:5c:d5:59:b8:50:d5:4b:4b: 81:b1:a5:b8:46:39:1f:b9:9f:97:bb:2b:d4:f2:25:8b:3f:f8: fc:ba:de:39:46:c7:08:ea:92:3c:bc:8e:92:35:53:dd:f9:26: 7c:30:65:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNzAyMTYxMzEzWhcNMjUwNzA5MTYxMzEzWjAYMRYwFAYD VQQDEw02ODY1NWE5OS02ZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDmxd1B3ctbBMQWkjAh0IeAGj9YTDQiOs5vTO5WmM42Xpryt2GzxW+3c1RpR ACMZ7208g0a9YMHkU/w6erypIov2IPJFR36wAHv+s2EMFhqmclBxO+5BjQYP45IV kbPJjuByfrvW0qPeZpTd5A5ReNe1NxXvpl2fgymgxzrBUTfC0Rh5x6Zk412k4J6X Ceu3xjgQB8D5iZKia3HYtitsYfT2r+XAkIqoZeP523S4vcNtXMUcwnnvHckQImjn Sx2+G87P0u5enRv3WAwBCsaxswd8ERSF2Igv9l6TqeCOv+nSFOP/dXS4LTpWpAr5 24Ou0vCNZMi5o2fMLoNcwfzc4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR+ITQg drdHn1+xrpeCQm4VnJ2WMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACcZW1DxJWU9+yDTFxSQNai8X0HbCih5bNA+Shq63bPD1e74SRXB2W OQo4EpoxUdo4ZFAQBCfSoveyKtUwt00vJv9frKkcFo+UMJY2yHXZcN97bQHkQz14 JA7pdgVr/cchnnR57q0eMfwYkVf3shZQ4bGEg5PJuvDiDPIKOyiVgFetU3fDxOYc j5WHRa6ou5JL6BR+GsiEt59YeMnXKCs6tUYBUjbGG4lnqKGSKVHrhB4eHKCllmPX uxIZkUD0ncs4NmQoJISwtTgwusFK6ia3XNVZuFDVS0uBsaW4RjkfuZ+XuyvU8iWL P/j8ut45RscI6pI8vI6SNVPd+SZ8MGXO -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:32 2025 by rpki-client