$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft File: Ns9cwKYOC31UYSoS61uYkoRobbA.mft (raw, json) Hash identifier: TTY3uWwqBiLVhqhyjJIEPaVbQN5XnO4oQMQikF9xkBg= Subject key identifier: 9B:14:58:52:62:57:73:1E:62:D5:F9:BB:59:77:36:47:A2:6B:98:35 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:12:43 +0000 Manifest this update: Sat 23 Aug 2025 03:12:42 +0000 Manifest next update: Sat 30 Aug 2025 03:12:42 +0000 Files and hashes: 1: Ns9cwKYOC31UYSoS61uYkoRobbA.crl (hash: gru30zz8ZKwWxL1g9S6frlmK+zRGS+cFld8kSiuOUoU=) 2: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (hash: TcJPWywxYGP4zNwqCV3RMOeXIr2sCq4he29rvfSHcP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: Aug 23 03:12:42 2025 GMT Not After : Aug 30 03:12:42 2025 GMT Subject: CN=68a931aa-9130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f7:4c:99:65:e8:bf:2d:9f:eb:00:dc:5f:70: 97:9b:07:98:7e:4d:fd:af:ed:65:1e:9a:79:13:9e: 5f:a1:fd:88:aa:21:af:89:a6:5a:1f:73:86:5b:51: ef:ef:db:d0:62:a8:28:ca:f7:f7:f0:fd:9a:96:cf: aa:fe:7c:ca:d3:9b:e9:3b:76:3e:7d:ae:ad:48:06: 7b:43:b5:da:2f:fc:fe:43:b3:ae:75:8c:23:c0:7c: 7d:af:5f:7b:10:f4:1d:cf:27:49:e0:bb:4b:aa:53: 3c:51:79:c6:ff:98:a2:2f:3f:c9:6f:ce:09:38:5d: 5a:0f:94:f2:0d:66:2e:c1:df:73:d0:21:9c:6f:31: f9:4b:5e:5d:ab:05:89:de:59:c0:bd:54:de:16:cc: 4e:d4:b8:16:7d:e8:3d:19:39:6b:cc:db:3f:11:92: f7:24:df:e4:d3:26:77:9c:d4:18:50:60:6d:11:e7: 34:a2:b0:96:6a:ca:29:a0:c3:cb:fd:1c:4b:33:21: 85:d3:c3:40:8f:69:81:3e:20:66:81:68:31:27:0a: a0:5e:d5:c4:fe:28:20:1a:f2:28:b1:8c:87:52:e2: cd:81:f4:04:e9:3b:38:1e:6b:bb:b6:f3:32:77:b7: ec:31:a8:3c:65:75:f6:1b:75:e8:ce:85:8b:b6:25: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:58:52:62:57:73:1E:62:D5:F9:BB:59:77:36:47:A2:6B:98:35 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:01:54:18:a9:b7:14:8d:31:94:eb:17:62:c6:db:84:10:3e: d1:02:d5:79:80:57:b7:c5:6a:80:3a:2f:d0:1b:4f:14:05:42: 40:9c:c4:1f:38:37:27:0d:45:75:93:24:5d:26:1b:7c:7c:2c: 3a:1f:07:32:07:cf:6c:e1:d3:f6:22:24:dc:ef:95:b5:40:b3: 55:ec:30:ef:01:de:b2:5e:96:e5:57:12:0a:46:29:8b:0f:50: 14:2a:b4:39:33:8b:2b:51:2a:9f:bd:cc:f0:21:65:16:c4:58: 22:e1:bc:30:c1:76:39:01:50:05:49:d9:f0:24:ca:08:5a:b4: 36:e2:3b:46:c9:0f:91:54:fa:3b:1b:68:fe:05:b9:1d:42:95: ae:0c:d2:dd:7a:1b:7b:30:39:9f:a5:c3:e3:40:69:66:53:37: d0:d6:ba:b2:5c:9a:8e:b0:bf:9e:a4:61:c2:8a:da:da:2c:96: 2e:86:ee:2e:4f:a5:80:c7:72:2a:aa:84:bb:1e:42:e5:a4:ad: 4b:6b:7b:a1:ce:a1:a1:84:46:10:2c:ba:3a:88:b3:9b:3a:02: 3e:12:19:1b:be:2f:2d:f3:48:9f:60:43:ce:de:a4:5a:4d:07: 94:50:1e:42:78:5e:39:a7:51:1d:d6:4d:1c:dc:9c:97:1a:02: e6:31:8f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwODIzMDMxMjQyWhcNMjUwODMwMDMxMjQyWjAYMRYwFAYD VQQDEw02OGE5MzFhYS05MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/dMmWXovy2f6wDcX3CXmweYfk39r+1lHpp5E55fof2IqiGviaZaH3OGW1Hv 79vQYqgoyvf38P2als+q/nzK05vpO3Y+fa6tSAZ7Q7XaL/z+Q7OudYwjwHx9r197 EPQdzydJ4LtLqlM8UXnG/5iiLz/Jb84JOF1aD5TyDWYuwd9z0CGcbzH5S15dqwWJ 3lnAvVTeFsxO1LgWfeg9GTlrzNs/EZL3JN/k0yZ3nNQYUGBtEec0orCWasopoMPL /RxLMyGF08NAj2mBPiBmgWgxJwqgXtXE/iggGvIosYyHUuLNgfQE6Ts4Hmu7tvMy d7fsMag8ZXX2G3XozoWLtiWaBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsUWFJi V3MeYtX5u1l3Nkeia5g1MB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNBMi8wMjgyN0NGOEU0MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0Mz MVVZU29TNjF1WWtvUm9iYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaAVQYqbcUjTGU6xdixtuEED7RAtV5gFe3xWqAOi/QG08UBUJAnMQf ODcnDUV1kyRdJht8fCw6HwcyB89s4dP2IiTc75W1QLNV7DDvAd6yXpblVxIKRimL D1AUKrQ5M4srUSqfvczwIWUWxFgi4bwwwXY5AVAFSdnwJMoIWrQ24jtGyQ+RVPo7 G2j+BbkdQpWuDNLdeht7MDmfpcPjQGlmUzfQ1rqyXJqOsL+epGHCitraLJYuhu4u T6WAx3IqqoS7HkLlpK1La3uhzqGhhEYQLLo6iLObOgI+Ehkbvi8t80ifYEPO3qRa TQeUUB5CeF45p1Ed1k0c3JyXGgLmMY8F -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:58 2025 by rpki-client