$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: EBGy09d0Lj2NSvrdSH/eSOb/EuTazM9PyxZ2ptVwJNo= Subject key identifier: 7E:C7:48:BC:D3:61:CA:E1:1D:30:B1:86:14:8E:87:2A:3D:D6:D4:75 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1260 Signing time: Sat 18 Oct 2025 20:06:29 +0000 Manifest this update: Sat 18 Oct 2025 20:06:28 +0000 Manifest next update: Sat 25 Oct 2025 20:06:28 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: 9mnCZ6zs9Tuftg4XC/f1+otYsxSh/qDWEzfEfCZJKcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Oct 18 20:06:28 2025 GMT Not After : Oct 25 20:06:28 2025 GMT Subject: CN=68f3f345-cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:fc:6f:50:c9:dc:19:18:e2:92:a4:e2:23: fc:c1:5a:a6:30:a4:a6:b9:87:ee:52:54:73:4f:40: 5e:b1:c5:26:a5:d6:22:59:fd:40:c3:3e:64:40:f1: 46:f6:02:a7:a9:bc:f5:13:e2:dd:03:24:15:12:5d: 60:90:a8:19:ba:07:d8:ef:b2:c2:eb:e9:b8:a8:d9: cc:6c:da:e2:30:a9:b9:a3:1e:f8:a4:40:50:67:cb: 70:96:7e:8d:2b:ba:74:eb:9f:62:3f:b1:42:d9:ef: 66:c0:b6:46:34:6e:82:f5:7e:c4:9a:f8:12:db:4a: 37:b7:23:61:0e:6a:f9:96:5f:ca:0c:17:9d:bf:ef: e5:3e:d1:7d:05:fc:08:8a:dd:82:cd:a6:57:ee:3b: fe:e3:fa:4b:4f:bd:c1:99:4a:c1:e1:a2:cc:cb:ad: 3c:7c:e2:45:37:7d:6c:bc:3a:db:cc:21:67:17:b4: 86:b8:a5:13:3d:3e:cb:ad:af:dc:19:c1:fa:bc:49: 0b:12:34:d6:c3:b3:2f:b3:20:6f:be:38:75:71:9e: 29:d5:10:cb:9e:71:e6:52:7a:22:e1:d7:1f:95:45: 2c:43:bb:9b:55:ad:35:14:f0:fd:ff:54:04:13:2f: 58:49:03:4c:6a:63:4e:91:03:db:5d:32:77:25:71: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C7:48:BC:D3:61:CA:E1:1D:30:B1:86:14:8E:87:2A:3D:D6:D4:75 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:09:de:3f:84:eb:b9:e1:48:a4:20:0f:03:2a:29:dc:d3:fa: 2e:54:23:3b:44:37:b4:9a:8d:86:37:a1:63:a9:b1:68:f6:57: 2c:67:de:45:47:ce:90:41:64:42:ad:18:89:da:b5:4d:ef:45: 28:1c:44:e8:45:f1:3f:06:0a:89:68:5f:88:a3:c5:cc:58:ea: 41:8e:d6:3c:f2:ba:f6:2d:f4:52:ff:d8:d3:d0:54:27:66:f3: 3b:7c:38:38:dd:fc:84:d4:41:a3:40:84:8f:f8:4d:9e:95:29: 41:75:18:4b:4a:eb:67:18:74:bd:39:36:c5:70:d0:60:43:7a: 0f:13:04:15:84:3d:49:da:e0:2c:c7:63:e9:d9:69:52:a0:5f: 22:98:99:c2:7c:a6:4c:f8:80:70:5c:82:8b:78:55:be:df:dd: a7:67:87:24:4f:7d:d6:7e:8a:b4:6e:ac:d2:ea:88:1a:ba:c2: f2:27:39:bb:86:2d:a6:73:7a:15:53:b3:e7:c5:2c:63:04:73: 9b:e4:6a:ad:91:68:75:89:19:96:7c:ff:4b:2a:9b:55:cc:19: 93:6e:36:58:ae:3e:f8:f3:76:f9:85:bd:a7:b8:e4:93:47:44: 7d:e1:c2:94:d3:6e:84:90:10:0d:3c:a0:67:10:24:78:16:b1: 2b:83:8c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUxMDE4MjAwNjI4WhcNMjUxMDI1MjAwNjI4WjAYMRYwFAYD VQQDEw02OGYzZjM0NS1jZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmv8b1DJ3BkY4pKk4iP8wVqmMKSmuYfuUlRzT0BescUmpdYiWf1Awz5kQPFG 9gKnqbz1E+LdAyQVEl1gkKgZugfY77LC6+m4qNnMbNriMKm5ox74pEBQZ8twln6N K7p0659iP7FC2e9mwLZGNG6C9X7EmvgS20o3tyNhDmr5ll/KDBedv+/lPtF9BfwI it2CzaZX7jv+4/pLT73BmUrB4aLMy608fOJFN31svDrbzCFnF7SGuKUTPT7Lra/c GcH6vEkLEjTWw7MvsyBvvjh1cZ4p1RDLnnHmUnoi4dcflUUsQ7ubVa01FPD9/1QE Ey9YSQNMamNOkQPbXTJ3JXEszQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7HSLzT YcrhHTCxhhSOhyo91tR1MB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Cd4/hOu54UikIA8DKinc0/ouVCM7RDe0mo2GN6FjqbFo9lcsZ95F R86QQWRCrRiJ2rVN70UoHEToRfE/BgqJaF+Io8XMWOpBjtY88rr2LfRS/9jT0FQn ZvM7fDg43fyE1EGjQISP+E2elSlBdRhLSutnGHS9OTbFcNBgQ3oPEwQVhD1J2uAs x2Pp2WlSoF8imJnCfKZM+IBwXIKLeFW+392nZ4ckT33Wfoq0bqzS6ogausLyJzm7 hi2mc3oVU7PnxSxjBHOb5GqtkWh1iRmWfP9LKptVzBmTbjZYrj7483b5hb2nuOST R0R94cKU026EkBANPKBnECR4FrErg4xO -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:49 2025 by rpki-client