$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: bEwHz4nFYdS0qq3fLlZ9g/W2DMRDCo70+h9byt0+JW8= Subject key identifier: 44:07:EB:12:FE:3C:EE:89:EE:EB:7B:64:47:C6:B0:09:23:30:21:8E Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E06 Signing time: Sun 20 Jul 2025 16:07:11 +0000 Manifest this update: Sun 20 Jul 2025 16:07:11 +0000 Manifest next update: Sun 27 Jul 2025 16:07:11 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: Qx4DJkIpOkKfFgiXCPJvzbwAkXUCHC69syXzmNIaDJk=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7701 (0x1e15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jul 20 16:07:11 2025 GMT Not After : Jul 27 16:07:11 2025 GMT Subject: CN=687d142f-aea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:f7:4c:98:1d:f6:c5:37:a7:b7:b4:2b:5f: f5:3a:bb:52:dc:4b:f6:39:d8:12:41:7d:f6:44:e7: 82:c2:e8:63:c7:10:fc:0c:f3:2e:36:60:00:7e:87: 95:86:b9:9a:6f:86:42:f0:cf:ca:3f:f6:11:11:d0: 27:d9:80:d5:e9:cc:ca:43:d6:20:5e:d6:00:d6:62: ab:01:a5:d3:12:3c:ef:94:61:89:f5:2e:0f:93:26: 04:d7:ef:e9:5c:2b:21:92:d0:45:c5:61:12:e6:5d: 21:b7:a5:0d:82:11:28:b8:26:65:4a:17:d3:46:a2: d1:77:96:60:43:c9:06:4a:9e:f5:d5:c9:89:9f:14: 65:29:7d:dc:b4:5b:ff:b4:3a:24:85:9a:93:4e:a5: 69:e6:18:49:01:59:27:1c:c1:ef:ca:21:f7:64:06: 59:66:ea:7a:99:de:8b:93:63:45:7a:6f:96:7f:dd: ba:d5:c6:f2:6d:63:39:7e:1b:ed:9d:b4:29:a9:22: d7:e3:04:51:84:cf:89:51:8c:7a:f2:3b:bd:f0:32: af:bb:bb:03:65:26:76:f7:91:31:07:18:eb:30:2f: c5:39:6f:7b:01:0f:b2:c9:02:68:3f:cd:ee:81:e5: fd:2f:a9:52:e2:d6:4d:38:ab:93:84:e6:ca:5a:eb: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:07:EB:12:FE:3C:EE:89:EE:EB:7B:64:47:C6:B0:09:23:30:21:8E X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b1:e9:46:9d:a9:ca:64:e4:28:38:83:de:41:1c:c2:a7:57: 13:40:15:5a:54:1e:c1:84:88:d2:d3:04:00:c0:08:fb:8e:99: 31:6b:bb:33:b0:2b:0a:79:12:df:c0:d6:3f:22:70:a6:4e:fa: 17:14:29:76:9f:08:44:d8:f3:01:94:b9:71:99:d8:84:dc:b7: 01:5b:ef:b2:17:16:ba:57:11:dc:24:d7:44:de:0b:fc:db:1f: 66:7b:4b:18:67:f5:7d:be:84:f1:c6:f9:e3:1f:84:9a:0a:f5: bd:06:2d:d1:56:47:5d:49:b4:75:71:46:fd:36:4f:68:66:ee: 85:9f:b9:4b:3d:a0:9c:9b:15:fa:43:1a:d8:20:5c:ae:53:da: 99:0b:c2:5a:35:ab:ef:74:88:f5:8c:fb:e1:df:13:0c:54:45: 48:08:6a:24:79:40:00:e1:de:f3:4b:c4:1f:a7:69:13:b4:06: 3a:5a:cc:c6:bd:2d:1c:bf:10:0b:7b:78:06:22:d2:a2:1a:5d: b3:c2:4c:1d:74:7e:f6:7b:cd:e0:20:bd:45:05:4f:31:61:81: 68:b5:2e:02:69:b0:15:15:b9:5f:f6:4b:13:8d:11:79:a9:51: 11:0c:0e:cd:82:7c:df:a7:ba:2e:97:9b:c9:6c:bb:5b:fe:27: 5b:cc:2e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNzIwMTYwNzExWhcNMjUwNzI3MTYwNzExWjAYMRYwFAYD VQQDEw02ODdkMTQyZi1hZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUr3TJgd9sU3p7e0K1/1OrtS3Ev2OdgSQX32ROeCwuhjxxD8DPMuNmAAfoeV hrmab4ZC8M/KP/YREdAn2YDV6czKQ9YgXtYA1mKrAaXTEjzvlGGJ9S4PkyYE1+/p XCshktBFxWES5l0ht6UNghEouCZlShfTRqLRd5ZgQ8kGSp711cmJnxRlKX3ctFv/ tDokhZqTTqVp5hhJAVknHMHvyiH3ZAZZZup6md6Lk2NFem+Wf9261cbybWM5fhvt nbQpqSLX4wRRhM+JUYx68ju98DKvu7sDZSZ295ExBxjrMC/FOW97AQ+yyQJoP83u geX9L6lS4tZNOKuThObKWusAowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQH6xL+ PO6J7ut7ZEfGsAkjMCGOMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYselGnanKZOQoOIPeQRzCp1cTQBVaVB7BhIjS0wQAwAj7jpkxa7sz sCsKeRLfwNY/InCmTvoXFCl2nwhE2PMBlLlxmdiE3LcBW++yFxa6VxHcJNdE3gv8 2x9me0sYZ/V9voTxxvnjH4SaCvW9Bi3RVkddSbR1cUb9Nk9oZu6Fn7lLPaCcmxX6 QxrYIFyuU9qZC8JaNavvdIj1jPvh3xMMVEVICGokeUAA4d7zS8Qfp2kTtAY6WszG vS0cvxALe3gGItKiGl2zwkwddH72e83gIL1FBU8xYYFotS4CabAVFblf9ksTjRF5 qVERDA7Ngnzfp7oul5vJbLtb/idbzC7K -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:18 2025 by rpki-client