$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: 3NgT8wuReBAMmy3bBqsojQKfyoP6JICPuwhURnsLE0Y= Subject key identifier: 1C:A7:A4:33:35:65:C7:D9:FA:1B:4B:AD:E0:80:CC:12:0F:09:C9:1F Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 11E9 Signing time: Wed 02 Jul 2025 19:32:05 +0000 Manifest this update: Wed 02 Jul 2025 19:32:05 +0000 Manifest next update: Wed 09 Jul 2025 19:32:05 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: fu7Ca4GIGWdPHFYmsF6Ksf3tEiW7XtQYA4h8Y0XKbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Jul 2 19:32:05 2025 GMT Not After : Jul 9 19:32:05 2025 GMT Subject: CN=68658935-54a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7f:12:e4:4f:cf:4b:63:a4:02:e3:3f:77:45: 9f:aa:3a:f7:cf:8b:ec:11:a6:58:9e:98:f3:e9:26: f1:1b:cd:c7:81:64:59:bd:0a:43:be:0d:81:8b:df: 9f:53:76:94:4c:77:07:f8:99:8e:be:af:d2:e8:c6: ef:67:94:6c:d9:95:b9:85:f4:44:e1:4d:fe:a3:e8: a0:dc:d2:9d:f7:82:e2:2b:14:5e:7b:d3:bf:20:3e: d2:3d:28:05:67:c0:62:c9:79:53:5a:5a:e7:04:9e: 1b:3d:fd:22:b0:a7:a1:4b:c3:02:36:9e:8c:f1:f9: 73:8b:de:df:fb:36:1e:b7:f7:38:8f:45:af:74:d1: 58:2a:04:ba:ee:af:ea:41:2e:87:da:df:b7:de:05: 8d:0f:b2:d0:1e:35:20:3f:94:94:06:71:ca:f2:a8: 28:d4:e2:e9:57:f2:c1:e9:82:92:c8:13:9a:7f:a9: bd:2d:00:b5:ac:ff:f4:c8:92:c4:bd:87:42:32:cf: 8b:b2:c9:e7:4e:56:89:c6:6d:4c:1b:a8:32:17:cf: 9d:1d:33:20:37:d7:b9:16:8a:d4:d7:da:78:da:79: b0:2e:dd:b5:fb:92:9a:4b:19:59:ce:22:21:c3:15: 09:b6:1c:11:e8:a3:ca:f7:9e:cc:04:d1:d7:ac:b9: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:A4:33:35:65:C7:D9:FA:1B:4B:AD:E0:80:CC:12:0F:09:C9:1F X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8e:03:a6:d6:77:2e:e7:9f:93:f3:3c:56:95:98:0b:ad:7e: a2:02:20:42:3e:be:c6:df:a6:96:ec:99:79:3f:6f:88:4b:f8: 12:d7:83:4e:56:63:03:71:65:45:58:db:46:d9:01:42:56:83: 70:1c:5c:f9:8d:8e:ee:cb:ac:5f:6a:43:2a:47:aa:0d:e3:53: 80:d1:85:d8:78:f3:1a:f1:46:8f:09:fb:ef:8e:55:fc:26:ea: 2a:52:4f:41:c4:c1:7d:88:1e:a5:51:8f:7c:6f:6d:af:56:5a: 39:e6:73:ad:f3:44:b7:ee:e6:45:79:4a:22:6c:93:59:5b:9f: 1e:c2:46:1c:a3:18:56:91:67:fe:8f:ac:db:40:df:4e:c5:90: 44:6d:60:73:e5:d0:33:b0:b2:86:50:6b:05:80:f1:b5:59:0a: c6:c2:c7:59:24:69:fe:92:fb:8b:8a:be:f7:a7:25:1b:6d:ad: bb:d5:5b:8f:a3:65:34:e9:de:b8:03:b9:ce:48:d5:a3:b3:8c: b5:12:1a:25:59:7c:ee:83:a3:5b:c4:c1:47:fc:35:a5:09:2f: 5e:a4:e6:d6:02:61:21:e1:b9:0b:2d:7c:6a:48:ab:05:a8:87: 1c:3c:b5:25:e0:9b:3c:84:bc:5c:9f:47:af:13:89:a9:93:73: bf:10:0a:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUwNzAyMTkzMjA1WhcNMjUwNzA5MTkzMjA1WjAYMRYwFAYD VQQDEw02ODY1ODkzNS01NGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv38S5E/PS2OkAuM/d0Wfqjr3z4vsEaZYnpjz6SbxG83HgWRZvQpDvg2Bi9+f U3aUTHcH+JmOvq/S6MbvZ5Rs2ZW5hfRE4U3+o+ig3NKd94LiKxRee9O/ID7SPSgF Z8BiyXlTWlrnBJ4bPf0isKehS8MCNp6M8flzi97f+zYet/c4j0WvdNFYKgS67q/q QS6H2t+33gWND7LQHjUgP5SUBnHK8qgo1OLpV/LB6YKSyBOaf6m9LQC1rP/0yJLE vYdCMs+LssnnTlaJxm1MG6gyF8+dHTMgN9e5ForU19p42nmwLt21+5KaSxlZziIh wxUJthwR6KPK957MBNHXrLlcbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBynpDM1 ZcfZ+htLreCAzBIPCckfMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5jgOm1ncu55+T8zxWlZgLrX6iAiBCPr7G36aW7Jl5P2+IS/gS14NO VmMDcWVFWNtG2QFCVoNwHFz5jY7uy6xfakMqR6oN41OA0YXYePMa8UaPCfvvjlX8 JuoqUk9BxMF9iB6lUY98b22vVlo55nOt80S37uZFeUoibJNZW58ewkYcoxhWkWf+ j6zbQN9OxZBEbWBz5dAzsLKGUGsFgPG1WQrGwsdZJGn+kvuLir73pyUbba271VuP o2U06d64A7nOSNWjs4y1EholWXzug6NbxMFH/DWlCS9epObWAmEh4bkLLXxqSKsF qIccPLUl4Js8hLxcn0evE4mpk3O/EAqj -----END CERTIFICATE-----Generated at Thu Jul 3 09:51:33 2025 by rpki-client