$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: EpGUp3EZHd8k1s3fcsr3bzC0pS9ld0qjT+4RE2J+9Oo= Subject key identifier: 39:91:76:E2:97:B1:A3:B4:81:88:5D:48:DD:06:5A:54:3A:99:1D:0C Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 0714 Signing time: Wed 02 Jul 2025 22:09:32 +0000 Manifest this update: Wed 02 Jul 2025 22:09:31 +0000 Manifest next update: Wed 09 Jul 2025 22:09:31 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: 1NlOSk+w3d+eraLuSSbZfclY83HKqiNeeKyZes7R5YA=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Jul 2 22:09:31 2025 GMT Not After : Jul 9 22:09:31 2025 GMT Subject: CN=6865ae1b-7d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:01:9e:88:c3:bb:e5:bf:a6:34:cf:d4:f8: 44:52:06:7b:1d:97:d3:ce:5d:9a:47:cd:c0:f7:26: bf:69:81:48:6e:bc:6f:87:10:36:37:25:da:17:59: 83:51:6f:dc:bc:50:ad:75:6a:26:2e:19:e8:28:5a: ba:98:62:9b:ab:9d:20:bc:40:33:c8:41:42:91:5d: f0:7d:56:28:c4:5f:10:7b:39:25:a5:da:4e:f8:89: 9e:94:14:ba:e6:c3:0e:92:7f:01:75:54:88:55:d9: a7:17:ad:86:a7:fb:d0:d2:5f:6c:48:30:be:f4:ba: 28:60:ee:c0:5c:ba:68:51:4b:25:74:88:6c:7a:d7: 23:b1:82:b6:eb:ff:ae:d4:5a:01:14:b0:0a:23:79: a6:04:9b:d6:e6:c2:a9:7f:6b:8a:76:52:dc:cc:f2: 79:09:7e:b1:65:4c:5c:e3:70:58:af:08:ca:f2:53: 48:b8:00:43:d3:6a:a2:9d:70:a3:50:30:7c:09:8a: 37:42:76:ce:3b:45:93:ba:c0:62:89:d1:53:f4:65: 3d:d1:60:f5:60:7c:c6:39:ee:1d:9a:aa:18:4c:73: de:62:f7:77:98:ff:8a:fe:37:6b:b3:64:c1:b9:44: 46:2e:b9:92:5b:65:b3:3b:b0:e3:69:e9:c0:45:28: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:76:E2:97:B1:A3:B4:81:88:5D:48:DD:06:5A:54:3A:99:1D:0C X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:82:b8:0d:61:49:02:7e:b8:c0:c5:34:ad:76:b2:5d:0c:78: 03:a0:8e:0f:bd:b7:56:a5:f6:47:ed:5d:ee:3a:9f:54:0a:91: 89:d9:da:fc:6b:dc:11:3d:6f:0a:02:40:bd:42:9c:cb:db:99: 43:26:c3:d7:66:65:11:39:ac:6e:47:f3:1d:87:f1:ed:15:f0: bf:67:28:d7:99:2c:bc:a0:f6:26:68:0d:d9:b7:d6:a8:8b:26: cd:e2:ab:fe:ae:f4:59:08:3e:99:15:5b:6c:e5:be:9f:d7:64: bb:b2:cc:6e:15:0b:d8:b0:55:33:0b:7e:93:75:43:6c:43:97: 2c:a2:25:ce:1c:6f:5a:77:23:4f:29:9a:0f:32:b4:42:a1:d5: 07:49:db:5e:02:d5:1d:2b:13:71:db:85:7b:87:81:0f:7d:61: fa:85:8b:dc:d0:5e:85:d6:41:49:48:61:c0:a9:71:4b:cd:c4: d0:5b:25:4a:f5:b6:6f:c3:a8:49:18:a9:40:49:60:84:8e:66: a1:f0:3b:eb:ea:04:20:a4:5e:80:8a:18:9d:d1:0e:72:f8:8f: 4d:f2:40:63:a4:0c:2e:b6:1d:a4:ac:46:c2:75:15:b5:af:21: f4:d6:b6:a6:2b:24:9f:93:f4:90:3e:ec:e1:c0:0e:c8:74:e4: c2:97:cb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwNzAyMjIwOTMxWhcNMjUwNzA5MjIwOTMxWjAYMRYwFAYD VQQDEw02ODY1YWUxYi03ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRcBnojDu+W/pjTP1PhEUgZ7HZfTzl2aR83A9ya/aYFIbrxvhxA2NyXaF1mD UW/cvFCtdWomLhnoKFq6mGKbq50gvEAzyEFCkV3wfVYoxF8QezklpdpO+ImelBS6 5sMOkn8BdVSIVdmnF62Gp/vQ0l9sSDC+9LooYO7AXLpoUUsldIhsetcjsYK26/+u 1FoBFLAKI3mmBJvW5sKpf2uKdlLczPJ5CX6xZUxc43BYrwjK8lNIuABD02qinXCj UDB8CYo3QnbOO0WTusBiidFT9GU90WD1YHzGOe4dmqoYTHPeYvd3mP+K/jdrs2TB uURGLrmSW2WzO7DjaenARSgcawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmRduKX saO0gYhdSN0GWlQ6mR0MMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBgrgNYUkCfrjAxTStdrJdDHgDoI4PvbdWpfZH7V3uOp9UCpGJ2dr8 a9wRPW8KAkC9QpzL25lDJsPXZmUROaxuR/Mdh/HtFfC/ZyjXmSy8oPYmaA3Zt9ao iybN4qv+rvRZCD6ZFVts5b6f12S7ssxuFQvYsFUzC36TdUNsQ5csoiXOHG9adyNP KZoPMrRCodUHSdteAtUdKxNx24V7h4EPfWH6hYvc0F6F1kFJSGHAqXFLzcTQWyVK 9bZvw6hJGKlASWCEjmah8Dvr6gQgpF6Aihid0Q5y+I9N8kBjpAwuth2krEbCdRW1 ryH01ramKySfk/SQPuzhwA7IdOTCl8vV -----END CERTIFICATE-----Generated at Fri Jul 4 14:34:09 2025 by rpki-client