$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: nnRArQKj4c+L8TPLLdkRbkabKTeh2g8velV13+dPt9k= Subject key identifier: 59:A7:D7:56:35:03:D4:2F:2C:5A:AA:19:0A:DF:5F:B4:1D:BD:D6:9F Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: 9F Signing time: Sat 19 Jul 2025 06:30:26 +0000 Manifest this update: Sat 19 Jul 2025 06:30:25 +0000 Manifest next update: Sat 26 Jul 2025 06:30:25 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: wEPV7hbOGz6YvDvfXf0NtYzEbWxW5NMf8/u4NGNhVj0=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: Z9wgm3vGJOLLYnMtYAwUdfFZW4JgmPyeFWsMY0AhztU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: Jul 19 06:30:25 2025 GMT Not After : Jul 26 06:30:25 2025 GMT Subject: CN=687b3b82-1061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:c4:14:93:09:65:30:27:ea:23:10:69:32: 5d:a7:1c:94:0e:ed:ad:73:fb:a3:2d:65:bf:09:bd: a5:88:67:7e:ee:c8:06:f4:23:71:3a:7d:4b:24:e5: 8a:00:0f:12:18:67:32:32:74:99:00:bb:d6:7d:cf: c1:74:24:ec:76:e4:d5:b7:b3:b0:8c:86:b5:6d:d8: 16:f5:20:90:49:9d:53:c3:8d:6d:11:9b:e8:03:61: f9:40:45:d0:17:0e:23:75:bf:3e:b0:7d:e8:b1:4e: b7:2b:3c:89:9f:28:1b:dc:71:21:cc:fd:f6:89:32: 48:63:1c:dd:cd:c4:9d:78:53:ea:b1:6b:47:30:25: 67:3d:cc:cd:ca:85:51:31:59:32:6f:2b:c2:aa:e3: 40:93:3e:ad:9e:d9:c5:06:65:9d:9c:ba:b2:34:86: 6f:fa:db:dc:83:16:32:92:62:eb:92:48:59:bf:a3: e6:4e:a9:44:11:30:7e:9c:75:66:13:c2:b4:39:bc: ff:29:d6:73:39:da:f7:a1:25:9b:08:7d:d2:bd:25: ce:c6:ca:b0:1f:cb:6f:6e:5c:4d:48:09:23:72:9a: 62:07:c1:bf:5a:4b:fb:95:40:72:8c:67:59:22:ca: 5f:32:7c:48:93:fd:78:90:b6:59:fd:31:31:5e:e0: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:D7:56:35:03:D4:2F:2C:5A:AA:19:0A:DF:5F:B4:1D:BD:D6:9F X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b5:9d:c7:df:8f:2a:46:da:06:4a:da:a1:ee:4c:1b:91:b7: f2:30:64:ed:5f:7d:53:29:bd:ca:5d:63:85:23:f5:2e:7a:83: 31:b5:36:3c:78:7e:cf:64:7c:b5:02:fc:fc:1e:4b:39:2b:cc: c3:67:14:97:b2:75:c4:8d:bf:86:66:56:50:30:20:16:cd:0f: 12:b0:f6:71:96:e1:9b:b1:39:10:11:d4:ca:59:33:88:c7:75: 7f:42:56:1d:ea:87:81:8d:d6:54:f0:88:cd:c0:86:ef:02:31: 18:cb:bb:73:82:4f:03:e4:d9:f5:2f:0a:65:0e:99:93:73:ab: ea:fa:00:89:9f:1d:8a:4b:d3:af:56:6d:3b:af:4b:97:28:2e: 8a:40:8d:79:83:24:c3:2d:6d:31:c3:f1:57:f5:af:08:06:a2: 4c:20:0c:c2:63:0a:bb:b5:c1:a6:fe:be:c1:66:64:26:88:19: 00:f9:ba:f0:8b:aa:90:5f:0d:97:7f:76:f0:e1:9b:3b:c4:48: e5:a1:31:85:94:9e:6f:d6:ba:ba:5e:e5:15:94:79:91:d1:3b: 3c:1f:3d:d2:1b:59:5d:b8:ac:8c:c3:ad:9a:e3:b1:83:05:fe: e8:40:c9:8e:ac:74:7a:04:62:1b:72:01:e8:cb:7d:4b:4d:c6: 6a:72:17:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjUwNzE5MDYzMDI1WhcNMjUwNzI2MDYzMDI1WjAYMRYwFAYD VQQDEw02ODdiM2I4Mi0xMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMfEFJMJZTAn6iMQaTJdpxyUDu2tc/ujLWW/Cb2liGd+7sgG9CNxOn1LJOWK AA8SGGcyMnSZALvWfc/BdCTsduTVt7OwjIa1bdgW9SCQSZ1Tw41tEZvoA2H5QEXQ Fw4jdb8+sH3osU63KzyJnygb3HEhzP32iTJIYxzdzcSdeFPqsWtHMCVnPczNyoVR MVkybyvCquNAkz6tntnFBmWdnLqyNIZv+tvcgxYykmLrkkhZv6PmTqlEETB+nHVm E8K0Obz/KdZzOdr3oSWbCH3SvSXOxsqwH8tvblxNSAkjcppiB8G/Wkv7lUByjGdZ IspfMnxIk/14kLZZ/TExXuD60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmn11Y1 A9QvLFqqGQrfX7QdvdafMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr UlJjT0JZNEs3YzY2MUpRRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArtZ3H348qRtoGStqh7kwbkbfyMGTtX31TKb3KXWOFI/UueoMxtTY8 eH7PZHy1Avz8Hks5K8zDZxSXsnXEjb+GZlZQMCAWzQ8SsPZxluGbsTkQEdTKWTOI x3V/QlYd6oeBjdZU8IjNwIbvAjEYy7tzgk8D5Nn1LwplDpmTc6vq+gCJnx2KS9Ov Vm07r0uXKC6KQI15gyTDLW0xw/FX9a8IBqJMIAzCYwq7tcGm/r7BZmQmiBkA+brw i6qQXw2Xf3bw4Zs7xEjloTGFlJ5v1rq6XuUVlHmR0Ts8Hz3SG1lduKyMw62a47GD Bf7oQMmOrHR6BGIbcgHoy31LTcZqchex -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:16 2025 by rpki-client