$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: dKnJ2K2PBAWNcifuiSjgyQ+4TqDmRz0Q2vQmqBL+QwA= Subject key identifier: 92:FB:1B:97:CA:B5:9C:04:EB:97:FF:77:3E:02:50:7D:33:99:98:A2 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 3492 Signing time: Wed 02 Jul 2025 15:13:50 +0000 Manifest this update: Wed 02 Jul 2025 15:13:49 +0000 Manifest next update: Wed 09 Jul 2025 15:13:49 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: GpyR4+Ox+35DL1o1s3XzL0gVUf5YogPPmiSb/pYJ1k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Jul 2 15:13:49 2025 GMT Not After : Jul 9 15:13:49 2025 GMT Subject: CN=68654cae-3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:8f:6d:af:2c:2b:f5:d0:fd:9f:b0:14:d7: fe:84:72:c6:f9:69:d9:ae:69:9f:6f:06:a9:65:4a: 20:1e:14:67:e3:5e:9e:7a:ca:d0:0d:11:b0:fe:fa: c8:37:75:f1:24:47:78:b3:46:9a:63:f6:49:50:63: 18:09:14:ac:56:c8:ae:68:e4:d1:1b:98:df:fa:3f: c1:73:2d:d3:22:b0:92:c8:39:5d:ed:c3:44:f4:ad: 1c:71:de:8d:9d:69:8f:02:07:35:cd:8d:99:50:04: c3:71:43:2d:74:73:db:a3:85:90:51:ad:ce:be:37: ae:59:4d:bd:28:de:f2:20:6b:c6:ed:cb:fe:06:b3: 84:3f:d7:25:9d:e6:1d:a9:69:ab:79:eb:63:49:7e: dc:fe:74:b8:00:29:06:1f:fe:39:50:59:b8:10:db: 69:50:72:ae:4b:cf:a8:f0:fb:d4:56:87:72:7b:fe: 79:a7:3b:22:7d:9f:a6:64:f4:23:d5:08:46:81:c0: 7a:ea:d6:4b:45:1d:14:9f:ec:26:b1:52:ea:a9:ff: e7:57:e7:58:d4:41:e1:97:46:fc:6e:23:6e:13:3f: cf:a3:ad:fd:28:67:93:1c:9c:db:b0:98:f6:5c:68: 42:1e:79:92:49:b1:06:4b:57:5a:43:6f:c0:32:c7: 2a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:1B:97:CA:B5:9C:04:EB:97:FF:77:3E:02:50:7D:33:99:98:A2 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:16:ba:48:ea:f3:9f:05:7c:13:6e:24:0b:4f:03:33:db: 92:a4:a8:0b:86:cf:11:0a:46:a1:ae:b0:e5:b2:fd:7f:a8:85: 2a:14:af:01:58:a2:8d:d1:bd:16:d8:8e:f8:61:91:a2:e6:99: 37:99:83:ea:03:b2:22:5e:02:40:12:e0:e7:4e:42:af:f6:31: 4f:46:f1:96:c4:83:de:b2:62:fb:76:34:ab:6d:9e:99:2c:b8: e8:78:99:2a:77:66:8d:be:29:d8:a0:96:d8:c2:1c:15:e2:24: 67:f6:30:09:6f:b0:a2:b1:c0:82:8a:4b:2a:2a:d1:17:77:af: 6c:fd:d6:0b:28:30:52:31:6f:7b:e0:10:a0:18:f4:52:b7:1a: fe:83:de:53:23:98:70:91:96:55:95:c9:4a:8d:50:af:f2:e6: a4:a3:17:1d:bb:00:26:d3:a1:4f:34:52:51:07:ec:0b:1d:53: 9d:87:c7:6f:1d:3e:e3:86:2b:f2:90:b4:27:52:fc:23:3d:c7: d0:dc:04:3c:be:34:ce:a6:40:88:94:df:0e:76:c8:1f:a8:76: 92:81:48:ef:31:c7:0b:fa:ca:e0:a4:43:30:fb:4c:5a:49:51: 19:48:25:d3:8e:09:b5:92:ac:09:a1:45:eb:b3:ac:f7:f7:c6: ff:c5:78:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwNzAyMTUxMzQ5WhcNMjUwNzA5MTUxMzQ5WjAYMRYwFAYD VQQDEw02ODY1NGNhZS0zYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy+Pba8sK/XQ/Z+wFNf+hHLG+WnZrmmfbwapZUogHhRn416eesrQDRGw/vrI N3XxJEd4s0aaY/ZJUGMYCRSsVsiuaOTRG5jf+j/Bcy3TIrCSyDld7cNE9K0ccd6N nWmPAgc1zY2ZUATDcUMtdHPbo4WQUa3OvjeuWU29KN7yIGvG7cv+BrOEP9clneYd qWmreetjSX7c/nS4ACkGH/45UFm4ENtpUHKuS8+o8PvUVodye/55pzsifZ+mZPQj 1QhGgcB66tZLRR0Un+wmsVLqqf/nV+dY1EHhl0b8biNuEz/Po639KGeTHJzbsJj2 XGhCHnmSSbEGS1daQ2/AMscqawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL7G5fK tZwE65f/dz4CUH0zmZiiMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Vha6SOrznwV8E24kC08DM9uSpKgLhs8RCkahrrDlsv1/qIUqFK8B WKKN0b0W2I74YZGi5pk3mYPqA7IiXgJAEuDnTkKv9jFPRvGWxIPesmL7djSrbZ6Z LLjoeJkqd2aNvinYoJbYwhwV4iRn9jAJb7CiscCCiksqKtEXd69s/dYLKDBSMW97 4BCgGPRStxr+g95TI5hwkZZVlclKjVCv8uakoxcduwAm06FPNFJRB+wLHVOdh8dv HT7jhivykLQnUvwjPcfQ3AQ8vjTOpkCIlN8OdsgfqHaSgUjvMccL+srgpEMw+0xa SVEZSCXTjgm1kqwJoUXrs6z398b/xXi+ -----END CERTIFICATE-----Generated at Fri Jul 4 01:16:16 2025 by rpki-client