$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: 385NDEBhfooXI1Jd/osxK214cMYxy+6lje7IdD2YFqQ= Subject key identifier: 68:F4:1D:3F:21:50:1E:29:18:C1:17:41:99:30:34:A1:45:2B:BC:FA Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 7D Signing time: Sat 23 Aug 2025 06:57:36 +0000 Manifest this update: Sat 23 Aug 2025 06:57:36 +0000 Manifest next update: Sat 30 Aug 2025 06:57:36 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: 4V+BE9vzj/aU3Ce2oAmy64s9pHB+dSoRu+5XbgVBTQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Aug 23 06:57:36 2025 GMT Not After : Aug 30 06:57:36 2025 GMT Subject: CN=68a96660-d802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:2d:98:8f:a8:3b:77:46:df:c3:b3:b4:66: 8f:77:11:db:f0:42:de:5e:42:be:45:76:5c:30:e7: 98:a8:b9:99:34:31:06:6e:07:20:32:01:95:1f:ea: f3:1d:38:29:18:0b:4e:0f:31:da:e2:fb:9b:f5:99: 00:5b:36:2b:1e:f6:2a:c2:fe:02:23:53:8f:fe:7c: 36:25:d5:6c:f5:b6:cb:e8:b6:d7:6e:ff:1e:4c:ab: 27:62:3c:df:5f:0c:c2:7a:75:db:e2:b4:08:95:b1: 21:41:18:ee:7f:c3:7e:e3:93:10:a1:ff:aa:8d:55: 0e:88:9c:e7:a8:b1:2b:20:20:12:04:18:f3:99:8d: b7:ff:f6:37:44:b8:58:cc:b7:38:b1:03:c7:10:c8: c5:4c:f8:1b:8e:95:f7:6b:ce:bd:6e:1d:29:2e:b4: 72:bf:37:3e:32:3b:81:77:55:65:88:43:17:0e:0f: a9:7c:ad:44:22:7d:ba:13:33:eb:26:7e:81:64:93: 34:8d:93:04:86:c9:ec:a2:da:2e:79:e8:db:a0:db: de:26:b0:0b:bf:97:a6:3e:e2:a5:2f:f2:55:93:2c: fd:26:17:55:80:db:27:48:f9:21:bf:dc:20:12:3b: c2:c5:88:03:8e:f9:c9:38:64:04:c4:64:4d:59:45: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:1D:3F:21:50:1E:29:18:C1:17:41:99:30:34:A1:45:2B:BC:FA X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d2:a3:eb:75:d6:13:bd:2b:22:a2:70:00:ef:b7:2d:4d:8f: b6:db:ca:88:e9:a9:fd:ad:52:72:1b:52:da:2b:41:e4:55:a3: 26:55:cd:c3:25:de:7f:2e:a9:ce:b5:72:07:7f:8c:6b:08:44: 97:1f:7f:18:9f:33:1b:5a:06:a1:ae:13:25:2e:a0:79:e6:82: 89:c1:de:2f:40:69:c7:74:09:ec:30:ac:cf:ef:a8:84:29:80: c2:1e:eb:ee:25:71:ea:d5:b4:64:03:54:cc:3f:b7:ec:34:81: 96:09:d1:9f:c6:ec:05:aa:e0:c6:40:c9:2b:ae:77:44:24:5b: 3f:7e:cd:0a:05:ae:ef:af:46:4d:17:14:03:80:f8:43:4b:b7: 07:79:fa:69:28:51:7f:ee:cf:28:5a:3e:7b:73:fe:25:6b:bb: e3:a8:5c:c5:23:d8:f8:f1:66:50:4d:28:f2:70:9b:3b:d3:2d: 7a:15:75:6b:79:7f:73:39:18:90:83:62:45:c6:93:9e:f9:ca: 20:37:ca:3b:c8:b1:9b:ae:3d:98:86:04:25:ff:dd:ab:59:55: cb:5a:0d:31:43:42:38:aa:cb:27:17:c4:37:25:e1:e2:17:08: e4:5c:a6:68:6d:3b:08:97:91:22:bb:ee:1a:b3:19:92:65:38: 7b:2d:d4:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA4MjMwNjU3MzZaFw0yNTA4MzAwNjU3MzZaMBgxFjAUBgNV BAMTDTY4YTk2NjYwLWQ4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrdC2Yj6g7d0bfw7O0Zo93EdvwQt5eQr5Fdlww55iouZk0MQZuByAyAZUf6vMd OCkYC04PMdri+5v1mQBbNise9irC/gIjU4/+fDYl1Wz1tsvottdu/x5MqydiPN9f DMJ6ddvitAiVsSFBGO5/w37jkxCh/6qNVQ6InOeosSsgIBIEGPOZjbf/9jdEuFjM tzixA8cQyMVM+BuOlfdrzr1uHSkutHK/Nz4yO4F3VWWIQxcOD6l8rUQifboTM+sm foFkkzSNkwSGyeyi2i556Nug294msAu/l6Y+4qUv8lWTLP0mF1WA2ydI+SG/3CAS O8LFiAOO+ck4ZATEZE1ZRZ8HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaPQdPyFQ HikYwRdBmTA0oUUrvPowHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGHSo+t11hO9KyKicADvty1Nj7bbyojpqf2tUnIbUtorQeRVoyZVzcMl 3n8uqc61cgd/jGsIRJcffxifMxtaBqGuEyUuoHnmgonB3i9Aacd0CewwrM/vqIQp gMIe6+4lcerVtGQDVMw/t+w0gZYJ0Z/G7AWq4MZAySuud0QkWz9+zQoFru+vRk0X FAOA+ENLtwd5+mkoUX/uzyhaPntz/iVru+OoXMUj2PjxZlBNKPJwmzvTLXoVdWt5 f3M5GJCDYkXGk575yiA3yjvIsZuuPZiGBCX/3atZVctaDTFDQjiqyycXxDcl4eIX CORcpmhtOwiXkSK77hqzGZJlOHst1IE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:29 2025 by rpki-client