$ rpki-client -vvf rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft File: NS1M7Db4784NhRINl9keIqNY9Ys.mft (raw, json) Hash identifier: umtNRZ1OBZI5SkPWx7TJJV4Zgn26gxAB6yMBVwPgCJg= Subject key identifier: 34:AF:10:0B:AC:25:2A:91:DD:90:BF:2B:9B:75:72:0D:BA:E5:0F:93 Authority key identifier: 35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B Certificate issuer: /CN=A9151AC7/serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft Manifest number: 42 Signing time: Tue 01 Jul 2025 08:12:27 +0000 Manifest this update: Tue 01 Jul 2025 08:12:26 +0000 Manifest next update: Tue 08 Jul 2025 08:12:26 +0000 Files and hashes: 1: NS1M7Db4784NhRINl9keIqNY9Ys.crl (hash: 84H3hxRJCVinuXFodeIQ1l0pjItuWvzCwblaQJDVKNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151AC7, serialNumber=352D4CEC36F8EFCE0D85120D97D91E22A358F58B Validity Not Before: Jul 1 08:12:26 2025 GMT Not After : Jul 8 08:12:26 2025 GMT Subject: CN=6863986b-c14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:55:6e:1f:e1:3e:9c:72:be:60:3a:f0:12:c3: 5b:e5:09:bd:9d:a0:47:97:82:4e:97:8f:00:a0:eb: 2d:2a:a6:b7:e3:cc:d0:91:0a:1e:09:77:0c:18:33: a1:bf:f2:cf:a9:10:53:39:4f:da:38:f0:52:2f:da: ac:f0:3f:10:84:d3:a2:28:74:6f:c5:a8:ca:fc:c5: 48:30:9d:a6:54:23:df:d2:d0:e2:97:b3:f1:a5:cc: 2c:52:2a:f8:82:94:0f:15:6d:bf:f0:e4:99:df:fc: 11:c6:b4:6a:de:f1:e6:86:74:13:3b:7d:88:53:d9: 17:7c:4d:bd:01:c5:29:51:47:5a:7c:9e:14:b4:94: 76:ac:8b:8f:1f:d6:3a:d1:dd:47:68:25:70:7c:d4: fc:37:e0:24:96:b7:84:b7:ec:53:0e:d9:f7:20:8d: c0:ad:7d:4d:08:6f:a0:1a:d6:55:94:6f:44:42:e7: 86:47:ae:45:11:f5:c9:30:c2:3b:1a:a3:6b:6c:03: 93:7e:2f:d6:12:5d:72:ad:1f:58:00:01:7e:98:df: 93:b2:7c:c8:f2:45:68:cc:9e:b2:57:e1:ca:82:46: d2:18:6b:83:5a:a6:69:c1:09:97:6f:76:f2:27:04: a4:d1:d9:a0:53:43:fa:2c:36:d8:bf:e0:fc:0b:5b: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AF:10:0B:AC:25:2A:91:DD:90:BF:2B:9B:75:72:0D:BA:E5:0F:93 X509v3 Authority Key Identifier: keyid:35:2D:4C:EC:36:F8:EF:CE:0D:85:12:0D:97:D9:1E:22:A3:58:F5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NS1M7Db4784NhRINl9keIqNY9Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AC7/41A46B50F39711EF9101D210C4F9AE02/NS1M7Db4784NhRINl9keIqNY9Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a6:3c:42:02:00:5f:49:ac:ac:85:b7:db:4e:84:d3:95:dc: af:c5:3f:2c:72:c6:b3:e1:97:29:a3:46:c8:4b:71:a2:9e:ea: df:b9:5d:aa:58:ed:96:a2:cf:b5:61:56:b0:54:a8:86:a9:7c: ff:46:67:b0:56:79:b8:25:db:ac:c3:76:f1:7a:d1:16:5f:16: 43:d4:72:32:50:e1:9a:b3:33:07:3d:e0:71:25:8f:51:9a:50: 1d:e5:b1:89:fc:e1:ba:d6:f2:e5:b7:93:0c:54:61:7f:2a:cf: 42:9f:a6:3e:90:b9:cf:7e:2b:bc:4b:12:fa:9d:b9:50:3e:03: cd:a7:ae:d3:46:89:78:48:ed:80:74:0b:60:cc:d8:b5:fb:73: d2:25:03:9a:18:4d:c7:fb:86:df:98:22:68:b9:d6:fb:71:8b: fd:bc:21:d6:22:a7:55:be:33:f6:6b:ce:d7:58:87:e0:42:d2: a2:f9:4f:e5:e1:f0:38:16:c9:3c:54:e2:d8:f7:75:02:a9:51: 3a:e9:9a:44:e0:95:c7:d1:76:1d:42:a7:6f:4b:9b:2a:25:7a: ed:d9:f1:82:86:e9:a5:26:d8:9f:25:a5:c5:cc:b3:07:e3:35: fb:93:ac:8a:44:11:00:61:03:e3:c2:ad:a0:17:9d:eb:2d:39: b4:3c:ac:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MUFDNzExMC8GA1UEBRMoMzUyRDRDRUMzNkY4RUZDRTBEODUxMjBEOTdEOTFFMjJB MzU4RjU4QjAeFw0yNTA3MDEwODEyMjZaFw0yNTA3MDgwODEyMjZaMBgxFjAUBgNV BAMTDTY4NjM5ODZiLWMxNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcVW4f4T6ccr5gOvASw1vlCb2doEeXgk6XjwCg6y0qprfjzNCRCh4JdwwYM6G/ 8s+pEFM5T9o48FIv2qzwPxCE06IodG/FqMr8xUgwnaZUI9/S0OKXs/GlzCxSKviC lA8Vbb/w5Jnf/BHGtGre8eaGdBM7fYhT2Rd8Tb0BxSlRR1p8nhS0lHasi48f1jrR 3UdoJXB81Pw34CSWt4S37FMO2fcgjcCtfU0Ib6Aa1lWUb0RC54ZHrkUR9ckwwjsa o2tsA5N+L9YSXXKtH1gAAX6Y35OyfMjyRWjMnrJX4cqCRtIYa4NapmnBCZdvdvIn BKTR2aBTQ/osNti/4PwLWw8/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNK8QC6wl KpHdkL8rm3VyDbrlD5MwHwYDVR0jBBgwFoAUNS1M7Db4784NhRINl9keIqNY9Ysw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxQUM3LzQxQTQ2QjUwRjM5 NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0TmhSSU5sOWtlSXFOWTlZ cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlMxTTdEYjQ3ODROaFJJTmw5a2VJcU5ZOVlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx QUM3LzQxQTQ2QjUwRjM5NzExRUY5MTAxRDIxMEM0RjlBRTAyL05TMU03RGI0Nzg0 TmhSSU5sOWtlSXFOWTlZcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOmPEICAF9JrKyFt9tOhNOV3K/FPyxyxrPhlymjRshLcaKe6t+5XapY 7Zaiz7VhVrBUqIapfP9GZ7BWebgl26zDdvF60RZfFkPUcjJQ4ZqzMwc94HElj1Ga UB3lsYn84brW8uW3kwxUYX8qz0Kfpj6Quc9+K7xLEvqduVA+A82nrtNGiXhI7YB0 C2DM2LX7c9IlA5oYTcf7ht+YImi51vtxi/28IdYip1W+M/ZrztdYh+BC0qL5T+Xh 8DgWyTxU4tj3dQKpUTrpmkTglcfRdh1Cp29Lmyoleu3Z8YKG6aUm2J8lpcXMswfj NfuTrIpEEQBhA+PCraAXnestObQ8rIY= -----END CERTIFICATE-----Generated at Thu Jul 3 06:02:09 2025 by rpki-client