$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft File: ng7u9_yIBOBDfomd7TGYizxgLQI.mft (raw, json) Hash identifier: zBuccd/y6oJYoAeFf348O70OQTev6ZOaUvv1xkfsoWE= Subject key identifier: 51:B3:B3:DC:0D:E1:73:15:FC:28:A2:6E:76:C3:C7:ED:5A:41:D2:A4 Authority key identifier: 9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 Certificate issuer: /CN=A914FA25/serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft Manifest number: 0E1A Signing time: Fri 18 Jul 2025 19:02:19 +0000 Manifest this update: Fri 18 Jul 2025 19:02:18 +0000 Manifest next update: Fri 25 Jul 2025 19:02:18 +0000 Files and hashes: 1: ng7u9_yIBOBDfomd7TGYizxgLQI.crl (hash: LeBwhzrGwQ0m6XVOtS2Hsu8OPqyy4b7eaMPBq2RJRI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=9E0EEEF7FC8804E0437E899DED31988B3C602D02 Validity Not Before: Jul 18 19:02:18 2025 GMT Not After : Jul 25 19:02:18 2025 GMT Subject: CN=687a9a3b-d514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:ec:48:c5:37:da:ca:db:61:22:1d:be:1a: 3e:69:a5:ba:99:4e:1d:88:af:09:e8:13:26:da:55: 81:aa:0b:18:ee:de:af:42:2c:57:70:aa:21:9a:e1: 79:ef:d3:59:ff:65:a4:d5:56:27:9f:7a:95:b6:73: 0a:bc:e8:3f:03:7f:48:56:85:ef:fc:7e:42:aa:68: 2c:69:d7:61:bd:50:1d:e6:6f:b8:a0:1c:b1:08:eb: e5:3a:c2:75:a7:d0:0e:89:87:ad:36:01:4b:f8:24: fe:89:68:67:a3:cc:8b:82:5b:8a:0b:09:82:e5:2c: 06:e8:63:04:ac:3e:8b:9c:27:0d:02:95:8b:e8:6e: cb:83:d3:2e:41:6a:35:1c:48:99:14:4d:1b:46:b1: 88:01:86:8d:3d:11:81:db:6a:e4:f9:11:0a:e8:6f: 0f:4f:42:97:13:8f:f2:48:6e:b8:72:31:99:cd:93: 49:48:8d:fc:64:5f:13:f8:5f:6e:2d:55:97:dd:5a: 84:57:67:96:31:17:b3:b8:4c:ce:f8:12:96:50:4c: d1:b5:c1:c5:a9:dc:49:9c:aa:da:f8:8e:b3:d8:f6: b8:30:8c:7d:e0:37:50:96:24:aa:83:80:42:2d:81: ca:28:8d:0d:de:82:37:98:b0:94:5e:bc:e0:96:01: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:B3:DC:0D:E1:73:15:FC:28:A2:6E:76:C3:C7:ED:5A:41:D2:A4 X509v3 Authority Key Identifier: keyid:9E:0E:EE:F7:FC:88:04:E0:43:7E:89:9D:ED:31:98:8B:3C:60:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ng7u9_yIBOBDfomd7TGYizxgLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/ng7u9_yIBOBDfomd7TGYizxgLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8c:fa:90:58:7d:54:3c:3f:9f:43:22:ba:f4:87:53:54:2f: 60:fe:a5:25:ef:4c:b8:7a:58:f6:d4:99:6b:92:ca:e9:51:39: 9a:30:a0:7c:67:b4:e2:03:1c:2c:a3:79:7b:c4:9a:a8:03:28: da:d1:52:f2:8a:ff:8e:56:a2:0e:ae:c0:e0:f3:67:6e:2b:46: 0a:f2:8e:d5:ad:4a:c4:97:83:76:f4:b8:bd:cc:d2:4d:4c:dc: 10:1d:3e:ac:bd:bc:8b:67:59:db:79:a8:23:79:a5:7c:ab:48: f4:37:bb:7e:5f:86:1f:fc:0c:a5:1c:2a:51:fd:a7:29:79:1f: 57:48:1c:90:b0:e7:33:e9:09:a2:2e:2e:06:72:d3:34:61:65: 3b:5a:6a:fb:af:08:22:1a:8e:aa:28:6b:91:9f:d3:87:ca:f0: 9e:85:37:03:1c:65:01:71:8f:b1:a3:f2:d4:fe:d6:bd:df:58: 2a:5a:01:5d:9c:67:d0:97:63:f9:63:2e:0f:b8:c2:da:86:3d: b2:25:c4:a5:b9:72:c0:96:ec:57:81:60:2a:86:b7:bc:1f:89: 42:a3:21:c7:71:4e:58:59:0a:0e:24:66:f1:10:a0:9e:6d:15: f5:19:29:ff:68:eb:82:f9:d6:a4:38:82:ca:d2:9c:c5:82:89: 73:c3:17:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKDlFMEVFRUY3RkM4ODA0RTA0MzdFODk5REVEMzE5ODhC M0M2MDJEMDIwHhcNMjUwNzE4MTkwMjE4WhcNMjUwNzI1MTkwMjE4WjAYMRYwFAYD VQQDEw02ODdhOWEzYi1kNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2vsSMU32srbYSIdvho+aaW6mU4diK8J6BMm2lWBqgsY7t6vQixXcKohmuF5 79NZ/2Wk1VYnn3qVtnMKvOg/A39IVoXv/H5CqmgsaddhvVAd5m+4oByxCOvlOsJ1 p9AOiYetNgFL+CT+iWhno8yLgluKCwmC5SwG6GMErD6LnCcNApWL6G7Lg9MuQWo1 HEiZFE0bRrGIAYaNPRGB22rk+REK6G8PT0KXE4/ySG64cjGZzZNJSI38ZF8T+F9u LVWX3VqEV2eWMRezuEzO+BKWUEzRtcHFqdxJnKra+I6z2Pa4MIx94DdQliSqg4BC LYHKKI0N3oI3mLCUXrzglgHS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGzs9wN 4XMV/CiibnbDx+1aQdKkMB8GA1UdIwQYMBaAFJ4O7vf8iATgQ36Jne0xmIs8YC0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJPQkRmb21kN1RHWWl6eGdM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nN3U5X3lJQk9CRGZvbWQ3VEdZaXp4Z0xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9uZzd1OV95SUJP QkRmb21kN1RHWWl6eGdMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+jPqQWH1UPD+fQyK69IdTVC9g/qUl70y4elj21JlrksrpUTmaMKB8 Z7TiAxwso3l7xJqoAyja0VLyiv+OVqIOrsDg82duK0YK8o7VrUrEl4N29Li9zNJN TNwQHT6svbyLZ1nbeagjeaV8q0j0N7t+X4Yf/AylHCpR/acpeR9XSByQsOcz6Qmi Li4GctM0YWU7Wmr7rwgiGo6qKGuRn9OHyvCehTcDHGUBcY+xo/LU/ta931gqWgFd nGfQl2P5Yy4PuMLahj2yJcSluXLAluxXgWAqhre8H4lCoyHHcU5YWQoOJGbxEKCe bRX1GSn/aOuC+dakOILK0pzFgolzwxdv -----END CERTIFICATE-----Generated at Sun Jul 20 06:26:02 2025 by rpki-client