$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: NQe4nbg62GAJXMWTi1Q0KGwPSOSCqzL+54hBpRUEO1E= Subject key identifier: 28:B1:66:55:62:DC:F8:F2:21:44:79:84:2C:C5:01:13:98:1D:CF:74 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1222 Signing time: Fri 22 Aug 2025 19:23:47 +0000 Manifest this update: Fri 22 Aug 2025 19:23:47 +0000 Manifest next update: Fri 29 Aug 2025 19:23:47 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: KuXoqvtjVR7y7Q+Zm+KB5/k89a03kdYhQkCNvgW8daY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Aug 22 19:23:47 2025 GMT Not After : Aug 29 19:23:47 2025 GMT Subject: CN=68a8c3c3-75f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:e4:b0:25:5d:0c:8c:3c:f3:3a:27:b0:21: ca:82:9e:0e:ad:fe:d9:3a:98:23:8c:72:60:f1:5e: b1:53:a7:c7:68:66:59:ff:94:23:ce:4b:f8:52:d4: dd:dc:2b:a8:82:62:e4:50:60:02:d7:54:96:2a:be: df:05:6f:13:ef:08:9d:8a:16:83:94:b0:4f:c1:f2: 49:44:4a:7e:02:e3:df:87:1b:24:ee:f6:fd:1d:5f: 84:7c:da:ce:b7:f2:b2:66:6d:90:33:41:99:35:bb: 01:66:bb:96:d5:c6:f3:15:00:e2:12:00:ee:7a:48: 26:73:42:63:d0:94:69:45:6d:a9:e5:a1:b6:ba:22: 2e:e7:cd:20:04:0f:01:a9:57:98:80:50:9f:d0:59: 64:ca:d0:7c:62:b0:a3:e9:ac:c4:dc:2e:42:59:00: cc:72:01:c9:15:83:fc:ba:2e:02:54:a2:ff:64:aa: 7b:47:e9:2c:2a:75:36:18:22:1e:21:ba:b6:3b:0c: 48:60:74:98:f5:6a:b5:33:06:a9:2a:cd:d6:15:74: ce:c5:cc:46:70:7e:88:fb:40:81:6f:16:16:f6:53: f4:8e:d7:3d:1e:7c:0e:4b:9c:d7:ed:33:6d:6f:77: a2:e1:e7:04:4f:76:3b:7a:05:ef:43:6f:98:3d:ac: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:66:55:62:DC:F8:F2:21:44:79:84:2C:C5:01:13:98:1D:CF:74 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c5:04:b6:47:13:8b:cd:f6:60:8f:c8:7f:d5:a8:3f:89:d4: 82:cb:ee:c3:79:e8:01:52:9b:e2:29:63:e0:f2:28:e9:10:24: f7:46:ac:3c:3e:af:ca:f6:cf:0c:51:60:cc:c7:06:c6:d3:3f: 3a:3c:98:36:4b:ae:01:a8:9e:d8:28:ff:89:07:01:b0:50:e0: 26:29:8a:e4:3e:ce:1d:03:39:cf:bd:d6:b1:16:81:88:46:9e: cf:a7:39:1e:30:7b:5c:a9:ca:51:db:98:52:93:e7:7d:05:87: d5:e9:24:5e:09:7e:89:40:f5:d4:da:17:4e:a1:48:4d:21:8a: 5a:5a:da:59:6d:dd:a7:25:94:b4:f0:df:c1:43:4e:cc:10:f1: 52:1e:fd:fb:fa:49:4b:76:17:4b:2f:12:2e:e8:50:09:8e:84: b0:3f:ed:a4:f4:5f:00:af:04:72:79:2b:25:d0:54:0f:60:d7: 5b:53:cf:e9:dd:b7:76:4a:b6:d8:af:01:58:06:89:52:7d:8f: 7a:d5:ba:df:fc:55:8f:e3:37:75:35:b2:00:29:4b:7e:1f:3e: bd:24:b2:d8:3a:40:e1:80:f0:e3:4d:03:4f:1a:00:ba:11:a6: ae:0d:c4:ee:49:63:74:a1:13:85:13:68:a7:c6:43:9b:d9:02: 21:45:b6:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUwODIyMTkyMzQ3WhcNMjUwODI5MTkyMzQ3WjAYMRYwFAYD VQQDEw02OGE4YzNjMy03NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qvksCVdDIw88zonsCHKgp4Orf7ZOpgjjHJg8V6xU6fHaGZZ/5Qjzkv4UtTd 3CuogmLkUGAC11SWKr7fBW8T7widihaDlLBPwfJJREp+AuPfhxsk7vb9HV+EfNrO t/KyZm2QM0GZNbsBZruW1cbzFQDiEgDuekgmc0Jj0JRpRW2p5aG2uiIu580gBA8B qVeYgFCf0FlkytB8YrCj6azE3C5CWQDMcgHJFYP8ui4CVKL/ZKp7R+ksKnU2GCIe Ibq2OwxIYHSY9Wq1MwapKs3WFXTOxcxGcH6I+0CBbxYW9lP0jtc9HnwOS5zX7TNt b3ei4ecET3Y7egXvQ2+YPax83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCixZlVi 3PjyIUR5hCzFAROYHc90MB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1xQS2RxOLzfZgj8h/1ag/idSCy+7DeegBUpviKWPg8ijpECT3Rqw8 Pq/K9s8MUWDMxwbG0z86PJg2S64BqJ7YKP+JBwGwUOAmKYrkPs4dAznPvdaxFoGI Rp7PpzkeMHtcqcpR25hSk+d9BYfV6SReCX6JQPXU2hdOoUhNIYpaWtpZbd2nJZS0 8N/BQ07MEPFSHv37+klLdhdLLxIu6FAJjoSwP+2k9F8ArwRyeSsl0FQPYNdbU8/p 3bd2SrbYrwFYBolSfY961brf/FWP4zd1NbIAKUt+Hz69JLLYOkDhgPDjTQNPGgC6 EaauDcTuSWN0oROFE2inxkOb2QIhRbZn -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:17 2025 by rpki-client