$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: aWhADBHiyfZYRYUOMNDEC48olwXrt96u7Y4DP5Vif/E= Subject key identifier: 07:40:CE:FC:19:42:89:DC:A8:C2:AE:A0:1D:99:5B:47:03:FE:97:E3 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34AC Signing time: Fri 22 Aug 2025 15:10:59 +0000 Manifest this update: Fri 22 Aug 2025 15:10:58 +0000 Manifest next update: Fri 29 Aug 2025 15:10:58 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: WAa5FXVenIfjFRwHOH5RxKuhr/AIGafKEUl06l0l1is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Aug 22 15:10:58 2025 GMT Not After : Aug 29 15:10:58 2025 GMT Subject: CN=68a88883-f4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:26:6c:07:6a:c4:f3:78:27:ee:d1:c5:5b: 71:0b:89:a9:8e:2e:88:a8:e5:9b:df:fe:59:f7:8d: 5e:b7:c4:1e:51:3c:07:a1:fe:44:bd:ba:6c:9c:aa: 38:1a:be:92:92:04:7d:55:37:a4:8b:a2:4e:99:44: 2b:b9:5f:e4:21:93:af:58:4e:e7:70:93:92:11:b8: e0:e9:5e:9f:87:6d:e3:58:e5:a7:73:de:e1:38:35: 52:43:cf:d1:96:ca:f7:f4:a7:3a:45:d4:ce:42:7f: 72:38:62:ac:e8:15:f3:51:5e:fb:81:32:ab:ce:2b: 97:b7:59:2a:7c:c6:3c:35:26:57:78:a1:5a:ee:57: 25:55:94:c4:fd:a8:da:b6:57:f6:2d:1a:2a:94:28: 42:d4:f2:aa:a3:c8:a6:a0:dc:fd:46:04:92:23:68: 40:c3:cb:bb:e7:bb:a6:de:3a:3d:61:28:57:b4:72: 56:8f:40:d9:38:14:47:8a:c8:1d:9f:23:41:89:0a: ec:67:8f:b8:ad:f0:a0:d5:b4:62:25:c5:a6:e6:19: b6:d3:cf:96:72:84:29:67:23:d1:ef:09:1d:a1:89: 49:ca:ab:53:cb:3b:83:e6:58:6e:d5:77:40:86:4e: b5:cf:82:5a:38:b6:43:18:2f:9a:77:c6:33:62:d7: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:CE:FC:19:42:89:DC:A8:C2:AE:A0:1D:99:5B:47:03:FE:97:E3 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d5:57:a0:5c:83:53:8e:74:23:f3:03:d2:a4:26:35:12:37: ab:14:8a:6c:a2:7b:11:a2:3a:7b:01:35:77:38:95:71:3f:da: 07:1d:9a:d8:bb:2d:f9:5c:a5:3b:20:a2:59:06:b0:0d:c7:8e: 57:58:b3:21:59:60:16:e8:ec:b1:96:61:b2:85:7c:e0:e5:c9: f3:c5:ca:23:fe:41:42:4b:56:9e:7c:2c:ec:d5:9e:fc:35:cc: 2f:ba:ed:d3:36:53:b0:d7:78:8c:c4:95:d6:75:3e:4e:fa:d6: a2:da:d6:45:4f:6d:c4:c4:a6:c0:80:2e:06:50:b5:c5:12:6a: c6:10:92:34:c5:cf:7e:a3:58:85:d6:6f:13:5e:ce:1a:44:da: 10:bd:ac:ed:36:4a:8a:33:11:a7:89:fa:26:9a:73:cd:0c:48: f8:cc:fa:56:27:b8:47:89:cc:b1:86:54:ec:1c:15:3b:ff:93: e2:be:3d:6c:08:a7:31:71:36:1e:40:36:4b:9a:64:21:3a:37: 9b:01:e4:ff:33:e5:d9:5e:cf:33:b1:77:f2:e2:71:b9:60:72: d0:ff:36:69:b5:2f:56:23:83:74:c3:8d:35:9a:28:6b:d2:b6: f7:6d:f0:39:eb:24:82:e2:99:73:9e:66:5a:0c:b9:41:2e:8e: 4c:14:5a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwODIyMTUxMDU4WhcNMjUwODI5MTUxMDU4WjAYMRYwFAYD VQQDEw02OGE4ODg4My1mNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28smbAdqxPN4J+7RxVtxC4mpji6IqOWb3/5Z941et8QeUTwHof5EvbpsnKo4 Gr6SkgR9VTeki6JOmUQruV/kIZOvWE7ncJOSEbjg6V6fh23jWOWnc97hODVSQ8/R lsr39Kc6RdTOQn9yOGKs6BXzUV77gTKrziuXt1kqfMY8NSZXeKFa7lclVZTE/aja tlf2LRoqlChC1PKqo8imoNz9RgSSI2hAw8u757um3jo9YShXtHJWj0DZOBRHisgd nyNBiQrsZ4+4rfCg1bRiJcWm5hm208+WcoQpZyPR7wkdoYlJyqtTyzuD5lhu1XdA hk61z4JaOLZDGC+ad8YzYtfq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdAzvwZ QoncqMKuoB2ZW0cD/pfjMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ1VegXINTjnQj8wPSpCY1EjerFIpsonsRojp7ATV3OJVxP9oHHZrY uy35XKU7IKJZBrANx45XWLMhWWAW6OyxlmGyhXzg5cnzxcoj/kFCS1aefCzs1Z78 Ncwvuu3TNlOw13iMxJXWdT5O+tai2tZFT23ExKbAgC4GULXFEmrGEJI0xc9+o1iF 1m8TXs4aRNoQvaztNkqKMxGnifommnPNDEj4zPpWJ7hHicyxhlTsHBU7/5Pivj1s CKcxcTYeQDZLmmQhOjebAeT/M+XZXs8zsXfy4nG5YHLQ/zZptS9WI4N0w401mihr 0rb3bfA56ySC4plznmZaDLlBLo5MFFqo -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:51 2025 by rpki-client