$ rpki-client -vvf rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft File: nplO914RM-YPAbmkigkmGVL7G4E.mft (raw, json) Hash identifier: z1LWqhvf7eNQ5GUU76aYgrJodpOKgVHZQOdhNit3/hM= Subject key identifier: AF:D2:D2:5D:BE:2C:88:FC:15:FD:E6:F4:E8:D7:75:4A:FE:C2:5A:2D Authority key identifier: 9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 Certificate issuer: /CN=A9172154/serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft Manifest number: 09DA Signing time: Fri 04 Jul 2025 20:17:35 +0000 Manifest this update: Fri 04 Jul 2025 20:17:35 +0000 Manifest next update: Fri 11 Jul 2025 20:17:35 +0000 Files and hashes: 1: nplO914RM-YPAbmkigkmGVL7G4E.crl (hash: uFRnViwd/8kcge/yYJPv3A1ruREOvA6MHyPQ8sEeSL4=) 2: 95A08652730D11ECAB074439C4F9AE02.roa (hash: 8SZ9w1bXpjgmgqCHhkJA4hqFkmJXaJwJe1y4R5qoWpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172154, serialNumber=9E994EF75E1133E60F01B9A48A09261952FB1B81 Validity Not Before: Jul 4 20:17:35 2025 GMT Not After : Jul 11 20:17:35 2025 GMT Subject: CN=686836df-3b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:bd:83:d8:d4:ca:32:ad:7d:a0:01:4a:ca: d2:1f:c2:9a:8f:3a:e2:10:d8:92:c1:67:75:22:c5: 58:b1:c9:37:92:ac:b3:eb:1d:75:92:3e:41:7e:b9: 7d:58:4a:da:43:f1:ee:fb:55:5c:7a:b2:99:a9:b2: e9:8b:83:ea:75:c6:4b:bb:08:0e:ce:ec:8e:0d:b1: 16:c8:47:60:e9:99:22:e5:43:2a:b6:f5:f0:f1:10: 71:5b:ee:e2:21:de:17:12:a4:09:30:57:4f:0b:19: 6a:eb:a5:8d:6f:68:97:20:f6:95:67:77:25:ac:d0: 6f:6c:d8:73:f2:63:5a:5a:3a:0e:09:74:57:c6:db: c0:63:fe:48:4b:39:6f:3f:c3:24:a0:29:77:a1:37: 79:8f:20:30:15:07:63:1d:5e:9b:6a:a3:6f:d2:e1: bc:2d:fa:fd:cc:75:a0:c8:0d:78:89:62:f4:ab:93: ab:44:08:68:ae:fa:c9:4a:3e:3b:4c:91:14:eb:e4: 94:7c:dc:3c:82:a1:11:f6:d3:b2:0b:8e:45:fb:f3: 1f:58:28:ef:55:cc:43:7d:5f:34:fb:01:ed:f7:c5: c8:b6:16:db:8f:b4:68:74:bf:f9:a2:44:64:d9:59: b0:8f:a2:b6:ec:a2:23:ef:a4:8d:45:ab:5f:be:1b: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D2:D2:5D:BE:2C:88:FC:15:FD:E6:F4:E8:D7:75:4A:FE:C2:5A:2D X509v3 Authority Key Identifier: keyid:9E:99:4E:F7:5E:11:33:E6:0F:01:B9:A4:8A:09:26:19:52:FB:1B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nplO914RM-YPAbmkigkmGVL7G4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172154/39A6CF2A809111EAAD134D6BC4F9AE02/nplO914RM-YPAbmkigkmGVL7G4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:a0:ee:62:39:32:85:29:99:ed:91:12:2f:1d:52:c7:40:d0: 6a:f9:75:f7:7f:7b:19:83:47:59:57:88:68:55:c6:f5:4c:13: ca:b7:3c:cd:e2:76:47:c4:e0:59:62:fe:a3:d4:b6:66:73:11: 8d:fd:d2:b1:c3:b6:b2:90:8d:d1:4a:42:4d:1b:f9:fa:b4:a0: 70:21:96:3b:a5:db:1e:ee:a4:8f:9d:e9:af:05:98:85:04:f8: 32:45:7f:0e:ea:67:09:a8:36:72:9d:c3:36:e0:38:ea:54:63: 29:e4:b3:d9:b2:71:e3:5a:b9:95:d9:66:e3:e7:85:35:95:cb: e4:2f:c3:e3:15:78:15:cb:76:cc:99:04:08:0a:d2:ba:c6:9c: 6e:2d:4e:e0:24:8d:bc:df:b1:10:88:ab:1a:2a:d1:6f:74:3e: 97:64:fe:cf:b9:55:74:73:76:3a:86:f0:8e:8b:e5:cc:1b:86: 17:de:d4:50:73:ec:2d:4e:76:71:93:7f:55:e7:85:2a:75:ca: 74:1e:01:2c:2e:62:3f:c6:86:2a:a4:d0:c4:1c:a8:63:d0:56: 63:b7:33:1f:07:96:4d:6d:e6:59:84:af:d7:f6:bf:a0:1f:ca: 6f:eb:ff:19:11:cd:6c:51:8e:c9:ff:7a:ca:cf:de:c2:a6:62: a1:2c:fa:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIxNTQxMTAvBgNVBAUTKDlFOTk0RUY3NUUxMTMzRTYwRjAxQjlBNDhBMDkyNjE5 NTJGQjFCODEwHhcNMjUwNzA0MjAxNzM1WhcNMjUwNzExMjAxNzM1WjAYMRYwFAYD VQQDEw02ODY4MzZkZi0zYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmK9g9jUyjKtfaABSsrSH8KajzriENiSwWd1IsVYsck3kqyz6x11kj5Bfrl9 WEraQ/Hu+1VcerKZqbLpi4PqdcZLuwgOzuyODbEWyEdg6Zki5UMqtvXw8RBxW+7i Id4XEqQJMFdPCxlq66WNb2iXIPaVZ3clrNBvbNhz8mNaWjoOCXRXxtvAY/5ISzlv P8MkoCl3oTd5jyAwFQdjHV6baqNv0uG8Lfr9zHWgyA14iWL0q5OrRAhorvrJSj47 TJEU6+SUfNw8gqER9tOyC45F+/MfWCjvVcxDfV80+wHt98XIthbbj7RodL/5okRk 2Vmwj6K27KIj76SNRatfvhssLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/S0l2+ LIj8Ff3m9OjXdUr+wlotMB8GA1UdIwQYMBaAFJ6ZTvdeETPmDwG5pIoJJhlS+xuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjE1NC8zOUE2Q0YyQTgw OTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0tWVBBYm1raWdrbUdWTDdH NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25wbE85MTRSTS1ZUEFibWtpZ2ttR1ZMN0c0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjE1NC8zOUE2Q0YyQTgwOTExMUVBQUQxMzRENkJDNEY5QUUwMi9ucGxPOTE0Uk0t WVBBYm1raWdrbUdWTDdHNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPoO5iOTKFKZntkRIvHVLHQNBq+XX3f3sZg0dZV4hoVcb1TBPKtzzN 4nZHxOBZYv6j1LZmcxGN/dKxw7aykI3RSkJNG/n6tKBwIZY7pdse7qSPnemvBZiF BPgyRX8O6mcJqDZyncM24DjqVGMp5LPZsnHjWrmV2Wbj54U1lcvkL8PjFXgVy3bM mQQICtK6xpxuLU7gJI2837EQiKsaKtFvdD6XZP7PuVV0c3Y6hvCOi+XMG4YX3tRQ c+wtTnZxk39V54Uqdcp0HgEsLmI/xoYqpNDEHKhj0FZjtzMfB5ZNbeZZhK/X9r+g H8pv6/8ZEc1sUY7J/3rKz97CpmKhLPoJ -----END CERTIFICATE-----Generated at Sun Jul 6 01:14:42 2025 by rpki-client