$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: bfQAdyXPiKTjXNKtsW5tY/PPR/kOau9Y+ft4RWPmdto= Subject key identifier: 2C:D2:18:69:CB:7F:27:4E:3F:33:77:12:DD:FD:A2:60:6A:EE:41:5C Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 9A Signing time: Sun 19 Oct 2025 09:36:13 +0000 Manifest this update: Sun 19 Oct 2025 09:36:12 +0000 Manifest next update: Sun 26 Oct 2025 09:36:12 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: gEHcotiMXpiC8CYcPJhH/WJsYZ822gOz9aruLiykJtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Oct 19 09:36:12 2025 GMT Not After : Oct 26 09:36:12 2025 GMT Subject: CN=68f4b10c-2aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:af:1a:89:7e:25:f4:f8:74:6b:87:11:4c: 52:b0:dd:79:00:16:b8:33:58:73:79:ce:db:e5:05: 31:ea:58:c5:8c:62:99:33:bc:26:da:3c:49:e3:d0: 69:27:b0:84:c8:79:e7:38:a4:2e:b9:ff:85:4d:c4: a0:fa:56:2c:60:00:be:6b:1d:12:dd:cb:7b:a9:72: 84:01:6e:3b:b7:26:a5:94:8b:b0:3e:c0:fc:38:bf: b0:1a:87:9c:9d:39:f2:bb:3c:2d:91:4c:2c:ba:9a: 60:d3:bb:21:03:9b:07:f8:4b:87:71:58:41:04:82: fe:e3:14:41:c8:92:d0:8c:c5:0d:1f:74:45:fc:80: 2e:e6:10:40:98:b9:8b:3f:7b:c9:78:02:c7:f1:de: 5c:a1:de:16:f1:ce:ef:10:f1:81:df:3e:28:43:ca: f8:36:ec:22:e5:1b:cd:c4:f0:e6:31:98:88:8d:f5: f5:f0:13:88:ee:92:41:76:92:36:b2:3e:32:68:e8: d2:f5:06:f3:a6:9e:b1:5f:d1:55:b9:8b:5b:d1:8d: cb:96:41:6c:72:e6:9e:e6:e5:c7:84:72:18:d4:cf: 6d:9c:2d:4a:fe:71:72:e4:31:b0:8c:77:05:7a:fb: 4a:48:7b:fe:0c:67:e2:ba:7b:5f:73:2c:45:86:e1: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D2:18:69:CB:7F:27:4E:3F:33:77:12:DD:FD:A2:60:6A:EE:41:5C X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:91:46:cc:60:c8:48:d9:3c:8c:7c:56:59:07:5f:ec:a4:b6: ca:19:41:a6:0b:23:a9:0b:f0:e8:ae:eb:4b:d5:ee:67:41:53: 3f:56:24:b8:09:1c:e2:00:59:40:95:c2:60:f8:14:f6:45:0e: de:83:0f:5d:09:1b:6c:ec:4d:7e:bc:12:2e:42:0a:27:56:b1: f7:8f:3f:c7:b0:76:2e:91:98:c9:39:1a:7f:ba:89:fc:0f:94: e4:e0:16:27:53:8b:30:d5:44:22:7c:e3:4e:6c:38:e3:23:c7: 26:2b:6b:60:35:b1:6c:71:d5:c4:f1:56:eb:c6:28:f8:11:3b: 79:e2:e7:d9:9e:04:b3:12:39:4c:94:f0:36:a6:fa:7e:92:31: 22:67:91:6d:8a:f0:b8:1b:b9:7c:1e:63:a3:0a:6e:0a:e4:3b: c4:52:94:34:42:83:6f:9b:c2:1d:6f:06:ad:8e:c3:ec:3d:db: c7:48:81:10:fb:92:91:cb:35:84:50:02:4f:41:43:20:ac:45: 14:bf:7d:7a:af:bf:bc:c9:12:1f:47:02:62:7f:71:38:6b:6e: 3a:25:df:0d:81:4d:21:5a:38:a4:c2:f3:8d:b2:c9:a6:6a:bd: e4:51:6b:5f:b9:dd:25:fe:4c:e6:75:a8:bc:8a:81:3f:91:c3: 64:04:93:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjUxMDE5MDkzNjEyWhcNMjUxMDI2MDkzNjEyWjAYMRYwFAYD VQQDEw02OGY0YjEwYy0yYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DSvGol+JfT4dGuHEUxSsN15ABa4M1hzec7b5QUx6ljFjGKZM7wm2jxJ49Bp J7CEyHnnOKQuuf+FTcSg+lYsYAC+ax0S3ct7qXKEAW47tyallIuwPsD8OL+wGoec nTnyuzwtkUwsuppg07shA5sH+EuHcVhBBIL+4xRByJLQjMUNH3RF/IAu5hBAmLmL P3vJeALH8d5cod4W8c7vEPGB3z4oQ8r4Nuwi5RvNxPDmMZiIjfX18BOI7pJBdpI2 sj4yaOjS9Qbzpp6xX9FVuYtb0Y3LlkFscuae5uXHhHIY1M9tnC1K/nFy5DGwjHcF evtKSHv+DGfiuntfcyxFhuGJEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzSGGnL fydOPzN3Et39omBq7kFcMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7kUbMYMhI2TyMfFZZB1/spLbKGUGmCyOpC/DorutL1e5nQVM/ViS4 CRziAFlAlcJg+BT2RQ7egw9dCRts7E1+vBIuQgonVrH3jz/HsHYukZjJORp/uon8 D5Tk4BYnU4sw1UQifONObDjjI8cmK2tgNbFscdXE8Vbrxij4ETt54ufZngSzEjlM lPA2pvp+kjEiZ5FtivC4G7l8HmOjCm4K5DvEUpQ0QoNvm8IdbwatjsPsPdvHSIEQ +5KRyzWEUAJPQUMgrEUUv316r7+8yRIfRwJif3E4a246Jd8NgU0hWjikwvONssmm ar3kUWtfud0l/kzmdai8ioE/kcNkBJPs -----END CERTIFICATE-----Generated at Mon Oct 20 11:17:58 2025 by rpki-client