$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: FbaKnXcJCYDv42dsJwHwv6Fa1JIn7Ko+mtAtC7pOFlk= Subject key identifier: 23:AB:9B:4D:69:3B:86:94:7B:19:D7:16:A0:58:DB:A4:7A:EC:D8:7E Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 6B Signing time: Sat 19 Jul 2025 07:10:52 +0000 Manifest this update: Sat 19 Jul 2025 07:10:51 +0000 Manifest next update: Sat 26 Jul 2025 07:10:51 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: urETysApEAXT/9fZnCIzjpxBal/TKU/1ImC8vWkV9og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Jul 19 07:10:51 2025 GMT Not After : Jul 26 07:10:51 2025 GMT Subject: CN=687b44fb-a971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:28:03:1e:5a:36:1c:a4:39:09:4c:23:f1: cc:27:dd:1a:9c:22:ce:4c:1c:a8:42:0d:17:bd:39: 1d:b7:08:2b:34:93:5d:73:7a:62:f2:15:e4:ef:86: cd:27:90:3d:b9:2d:72:bb:05:03:a4:47:be:d6:c6: c9:b5:6c:cc:34:2a:35:5f:5b:92:11:76:cb:68:17: 03:2f:2e:21:a7:72:dd:d0:b6:3d:ea:9c:63:1d:af: 08:f5:96:9b:e2:bd:de:93:f5:63:c8:96:c5:62:0a: 93:36:14:45:33:68:f0:44:a8:0d:91:62:61:1b:cb: 22:5d:dc:82:83:44:4c:e0:81:e4:1a:79:21:de:22: 34:36:2c:db:56:bd:6a:e5:d7:c5:b3:2d:2b:46:5c: 8a:59:b8:10:96:7c:3b:b4:4e:12:6a:e9:a2:57:96: f8:0c:14:90:86:2b:83:48:c0:a0:de:96:fe:f6:0c: 64:db:f8:ad:0d:69:13:5b:8a:f5:25:31:e6:5a:b4: d7:96:3d:54:d4:4c:a5:b9:21:03:50:a7:e7:10:a1: 8d:d5:86:ca:3e:69:e1:0a:66:b0:42:1a:2a:59:ad: b1:1d:5d:b1:8c:03:c4:60:03:4c:4d:07:ea:0c:b6: 51:f8:10:20:85:99:47:e9:f6:a2:23:98:e6:e6:e1: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AB:9B:4D:69:3B:86:94:7B:19:D7:16:A0:58:DB:A4:7A:EC:D8:7E X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:10:57:11:ab:66:1b:15:91:33:8a:97:76:c5:c8:f5:c3:9b: a6:40:3a:f2:ee:63:8a:af:7c:31:78:51:44:eb:b3:dd:c5:e0: 5a:d4:c4:96:30:9f:50:2a:7b:0f:69:6e:f8:11:c9:79:db:d4: 37:44:9d:81:10:d6:d3:39:36:fc:81:2a:d9:a7:e8:c0:cc:54: 14:df:ec:96:69:f2:ac:a0:e7:29:96:e8:41:78:4b:ad:43:88: 5b:e9:31:ba:94:81:1b:46:37:fa:d9:72:a3:74:f8:5e:2e:04: 87:5b:1e:1f:f3:5a:78:09:09:e9:e1:5f:12:29:d3:da:b7:62: 64:91:da:4a:1b:fd:36:b6:25:ef:5e:f5:bb:b4:72:2a:95:ad: 2c:4d:34:08:a6:64:eb:d1:e6:b7:0e:57:f7:cb:ed:7f:90:46: 24:09:1b:d4:7e:ff:51:02:91:ff:34:5f:cd:19:b9:7a:0c:40: 50:ef:88:88:1e:c8:8c:a2:83:e5:91:a8:ef:57:42:e5:1b:40: 73:1f:60:77:53:6e:6a:49:51:fc:30:37:3f:3a:07:02:0a:f4: 94:70:5f:42:e1:fc:93:24:7b:b6:35:ad:92:5f:92:34:08:9c: f7:74:64:66:fc:84:16:e1:15:95:c8:85:89:3c:8b:b6:99:c2: fd:4a:ce:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA3MTkwNzEwNTFaFw0yNTA3MjYwNzEwNTFaMBgxFjAUBgNV BAMTDTY4N2I0NGZiLWE5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBHigDHlo2HKQ5CUwj8cwn3RqcIs5MHKhCDRe9OR23CCs0k11zemLyFeTvhs0n kD25LXK7BQOkR77Wxsm1bMw0KjVfW5IRdstoFwMvLiGnct3Qtj3qnGMdrwj1lpvi vd6T9WPIlsViCpM2FEUzaPBEqA2RYmEbyyJd3IKDREzggeQaeSHeIjQ2LNtWvWrl 18WzLStGXIpZuBCWfDu0ThJq6aJXlvgMFJCGK4NIwKDelv72DGTb+K0NaRNbivUl MeZatNeWPVTUTKW5IQNQp+cQoY3Vhso+aeEKZrBCGipZrbEdXbGMA8RgA0xNB+oM tlH4ECCFmUfp9qIjmObm4SdbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI6ubTWk7 hpR7GdcWoFjbpHrs2H4wHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYQVxGrZhsVkTOKl3bFyPXDm6ZAOvLuY4qvfDF4UUTrs93F4FrUxJYw n1Aqew9pbvgRyXnb1DdEnYEQ1tM5NvyBKtmn6MDMVBTf7JZp8qyg5ymW6EF4S61D iFvpMbqUgRtGN/rZcqN0+F4uBIdbHh/zWngJCenhXxIp09q3YmSR2kob/Ta2Je9e 9bu0ciqVrSxNNAimZOvR5rcOV/fL7X+QRiQJG9R+/1ECkf80X80ZuXoMQFDviIge yIyig+WRqO9XQuUbQHMfYHdTbmpJUfwwNz86BwIK9JRwX0Lh/JMke7Y1rZJfkjQI nPd0ZGb8hBbhFZXIhYk8i7aZwv1Kzjk= -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:29 2025 by rpki-client