$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: D8jAnBk8OxWPBlDHDmCTEZHg4bcEGaozSmr+yWt2ZRg= Subject key identifier: 29:91:25:BF:89:E7:D4:18:B2:5C:6E:4D:93:1B:47:63:04:41:44:1E Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 074B Signing time: Sat 18 Oct 2025 23:05:57 +0000 Manifest this update: Sat 18 Oct 2025 23:05:57 +0000 Manifest next update: Sat 25 Oct 2025 23:05:57 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: MNYz+XyKm1UixyvntuHA/aWTWp6yp30+vuqz+Axy2fw=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Oct 18 23:05:57 2025 GMT Not After : Oct 25 23:05:57 2025 GMT Subject: CN=68f41d55-396f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:0b:4a:bc:c1:bb:08:d2:ea:7a:52:91:f7: 84:9f:d8:e1:ea:28:a7:e2:04:b9:2d:91:f1:1b:e2: e7:ca:5d:d2:da:88:75:8d:97:9e:69:50:d8:f2:be: 68:90:3d:78:de:97:ad:e7:a4:e0:a1:27:0b:91:0e: 84:72:c2:3f:d2:2f:92:58:e2:c3:97:4c:5a:12:e4: 3e:5b:29:10:b5:75:db:ad:93:dc:5f:d4:84:07:8d: 4b:91:4b:3b:ad:18:c1:07:70:33:12:4e:7f:b3:3e: d4:e6:5e:f2:0c:b6:94:91:b5:0a:0f:a3:45:dc:db: 9b:e3:16:df:ea:55:48:21:49:98:cc:b5:55:ca:2a: 03:2c:42:fc:12:b2:c6:e1:9a:76:c7:2e:b3:b9:ea: 25:36:3e:4d:6a:a8:d4:a1:70:fd:40:f3:78:c5:51: b7:86:95:73:49:a1:3f:3a:b4:94:f3:ab:2a:7b:69: 66:ec:f8:dc:13:2d:fa:e0:06:da:1b:8b:f7:3f:e2: 69:8b:c0:7f:a2:83:23:23:11:70:a0:03:5b:28:a8: d7:9b:34:f3:37:ba:a4:ee:83:4e:7f:81:df:fa:7c: c0:f1:b3:f2:14:ba:67:81:82:ad:1e:2c:82:40:a5: 08:ea:bf:41:77:2d:35:23:7b:8c:f0:70:bd:db:dc: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:91:25:BF:89:E7:D4:18:B2:5C:6E:4D:93:1B:47:63:04:41:44:1E X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:da:6d:92:21:bb:3c:07:ff:86:73:a2:01:42:9e:17:1b:95: 72:33:11:42:0e:c4:56:4f:0f:32:ad:a0:b0:69:ff:3a:c8:af: 71:c7:f6:ba:f2:36:d2:07:9a:23:48:82:82:7d:55:ed:f5:53: 55:11:e3:9f:89:b6:c8:5c:2a:0d:af:ed:2c:e7:57:0a:ce:a9: df:be:46:63:06:5f:7e:46:2b:4f:ee:3b:10:45:d6:d4:2e:1f: 0f:cf:3d:bc:d2:0d:4b:3a:f4:6b:f9:8c:f0:91:88:0c:3c:f0: 58:11:9e:34:59:04:c8:19:ac:c8:60:d8:41:37:b1:97:de:c0: 46:2f:ae:76:cd:0d:8e:8c:90:c3:ed:37:e1:39:e1:bb:3d:ff: 41:48:13:49:d7:04:cd:df:06:c7:ea:c0:f5:d3:b1:a0:87:a3: 0e:83:9b:0c:f9:c2:8e:24:e4:9a:a1:10:6c:44:e8:73:8c:a1: ee:a3:e8:41:d7:9a:48:9f:0c:e4:c2:64:0c:32:ad:de:c9:b5: f2:c2:9b:a7:5a:47:7b:7c:e6:0c:4b:c9:73:2b:28:dc:b0:1b: 49:fa:b7:7e:ec:f4:c6:2e:b2:56:35:67:8d:4c:c7:bf:f8:48: 50:b9:1d:9c:7d:8a:f8:e7:3d:cf:27:d9:2f:d3:82:35:be:cc: d1:e1:17:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUxMDE4MjMwNTU3WhcNMjUxMDI1MjMwNTU3WjAYMRYwFAYD VQQDEw02OGY0MWQ1NS0zOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyoLSrzBuwjS6npSkfeEn9jh6iin4gS5LZHxG+Lnyl3S2oh1jZeeaVDY8r5o kD143pet56TgoScLkQ6EcsI/0i+SWOLDl0xaEuQ+WykQtXXbrZPcX9SEB41LkUs7 rRjBB3AzEk5/sz7U5l7yDLaUkbUKD6NF3Nub4xbf6lVIIUmYzLVVyioDLEL8ErLG 4Zp2xy6zueolNj5NaqjUoXD9QPN4xVG3hpVzSaE/OrSU86sqe2lm7PjcEy364Aba G4v3P+Jpi8B/ooMjIxFwoANbKKjXmzTzN7qk7oNOf4Hf+nzA8bPyFLpngYKtHiyC QKUI6r9Bdy01I3uM8HC929z/OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmRJb+J 59QYslxuTZMbR2MEQUQeMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl2m2SIbs8B/+Gc6IBQp4XG5VyMxFCDsRWTw8yraCwaf86yK9xx/a6 8jbSB5ojSIKCfVXt9VNVEeOfibbIXCoNr+0s51cKzqnfvkZjBl9+RitP7jsQRdbU Lh8Pzz280g1LOvRr+YzwkYgMPPBYEZ40WQTIGazIYNhBN7GX3sBGL652zQ2OjJDD 7TfhOeG7Pf9BSBNJ1wTN3wbH6sD107Ggh6MOg5sM+cKOJOSaoRBsROhzjKHuo+hB 15pInwzkwmQMMq3eybXywpunWkd7fOYMS8lzKyjcsBtJ+rd+7PTGLrJWNWeNTMe/ +EhQuR2cfYr45z3PJ9kv04I1vszR4Rcr -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:28 2025 by rpki-client