$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: DVLvYo1nqHas3ovMek6UR1NIeHbFonFv7hPHS8Eas60= Subject key identifier: 1F:42:61:24:9B:0B:A2:82:7A:1A:2E:A3:26:C7:1F:4D:2F:3E:0C:65 Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 072E Signing time: Fri 22 Aug 2025 21:56:56 +0000 Manifest this update: Fri 22 Aug 2025 21:56:56 +0000 Manifest next update: Fri 29 Aug 2025 21:56:56 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: rxzS7rqKRrv0Vm/DdE14Mkxd7Qx4lraNH0wsQjbHAPU=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Aug 22 21:56:56 2025 GMT Not After : Aug 29 21:56:56 2025 GMT Subject: CN=68a8e7a8-eaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:b7:7e:ab:88:a3:de:2c:3f:23:5e:f4:49: 8d:46:d9:e9:a2:20:ff:93:13:63:e5:52:80:eb:a5: a8:0d:b6:00:4a:ac:bc:0d:42:45:c0:95:ff:54:95: d1:0b:d5:aa:52:2d:f0:ca:89:f5:8c:dc:1b:1b:a6: 8d:84:a9:b2:e5:14:f2:25:44:ef:55:02:98:eb:64: 4c:d1:d7:a8:21:b6:da:13:82:13:c7:02:de:14:e6: a2:6b:e6:46:87:5b:1b:ac:1a:28:22:ca:80:6c:bc: df:7c:c7:19:52:21:06:6d:f1:4e:73:e0:7f:46:b6: 43:c4:6a:5d:2d:1f:fb:39:8d:ac:20:88:25:93:11: da:01:6d:84:0c:35:c0:94:70:5c:e2:0d:ef:12:44: b5:82:ef:97:cf:1d:79:51:4a:96:73:85:ce:48:ba: 67:9e:ec:16:19:6f:f2:fe:15:cb:06:9f:bf:61:c6: a0:29:97:c4:cc:c0:85:20:de:75:62:b8:a4:84:74: 27:04:4e:3e:f6:9f:36:52:76:3a:ef:80:27:3d:1a: 7a:6b:e5:3a:25:12:8e:36:a7:fd:4b:0b:fe:7a:20: 62:40:a7:e0:b3:f5:2f:52:f3:8d:cb:0d:d0:7f:55: 0a:38:08:d7:67:6f:67:1c:83:82:36:8f:97:8b:fa: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:61:24:9B:0B:A2:82:7A:1A:2E:A3:26:C7:1F:4D:2F:3E:0C:65 X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:29:47:7f:64:37:48:bd:d2:0c:d1:9b:be:7f:a9:7c:3f:c7: f7:17:a6:f9:84:5b:ea:d1:2d:56:61:f0:44:b6:eb:2e:ef:51: bb:d3:ff:5e:f6:92:83:97:c2:76:5f:35:0b:be:f8:3a:81:82: 08:25:d5:11:16:9f:60:95:e9:80:63:c7:be:db:9f:4c:d4:3c: bc:f2:88:36:f7:69:84:e5:09:a4:bf:9d:3b:b5:3e:5b:10:15: c9:51:ff:bd:e0:4c:ed:7f:96:a9:c1:27:ac:9a:91:9e:9c:aa: f4:16:ce:57:53:94:25:c9:d2:6c:67:67:28:52:a1:dd:e7:ed: 53:02:f7:c8:ef:5c:08:81:cd:c8:dd:6c:84:10:22:72:c9:04: 1f:16:5a:62:49:a9:87:c6:ad:e6:f9:bf:ef:f0:29:d6:6e:2a: 8b:f1:88:f9:f5:f8:22:e5:6e:c8:35:2b:13:27:b0:00:7f:3a: fc:5c:aa:c4:4b:da:53:56:a2:1b:b1:57:b3:40:c7:79:3f:b1: fe:9d:57:64:61:34:5d:f7:35:f4:5b:15:8d:b3:fb:7e:14:cc: 0a:0f:bb:8e:62:a1:e8:40:7f:1f:b1:46:8d:60:6c:d6:df:7a: a4:1f:5b:e1:52:f9:10:a5:f4:83:6b:78:aa:73:37:c3:8b:7b: cb:33:27:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwODIyMjE1NjU2WhcNMjUwODI5MjE1NjU2WjAYMRYwFAYD VQQDEw02OGE4ZTdhOC1lYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RG3fquIo94sPyNe9EmNRtnpoiD/kxNj5VKA66WoDbYASqy8DUJFwJX/VJXR C9WqUi3wyon1jNwbG6aNhKmy5RTyJUTvVQKY62RM0deoIbbaE4ITxwLeFOaia+ZG h1sbrBooIsqAbLzffMcZUiEGbfFOc+B/RrZDxGpdLR/7OY2sIIglkxHaAW2EDDXA lHBc4g3vEkS1gu+Xzx15UUqWc4XOSLpnnuwWGW/y/hXLBp+/YcagKZfEzMCFIN51 YrikhHQnBE4+9p82UnY674AnPRp6a+U6JRKONqf9Swv+eiBiQKfgs/UvUvONyw3Q f1UKOAjXZ29nHIOCNo+Xi/p8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9CYSSb C6KCehouoybHH00vPgxlMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKKUd/ZDdIvdIM0Zu+f6l8P8f3F6b5hFvq0S1WYfBEtusu71G70/9e 9pKDl8J2XzULvvg6gYIIJdURFp9glemAY8e+259M1Dy88og292mE5Qmkv507tT5b EBXJUf+94Eztf5apwSesmpGenKr0Fs5XU5QlydJsZ2coUqHd5+1TAvfI71wIgc3I 3WyEECJyyQQfFlpiSamHxq3m+b/v8CnWbiqL8Yj59fgi5W7INSsTJ7AAfzr8XKrE S9pTVqIbsVezQMd5P7H+nVdkYTRd9zX0WxWNs/t+FMwKD7uOYqHoQH8fsUaNYGzW 33qkH1vhUvkQpfSDa3iqczfDi3vLMych -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:08 2025 by rpki-client