$ rpki-client -vvf rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft File: NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft (raw, json) Hash identifier: 1bhu1EGqg5FiS3Mf6HAsCvbwqePcH4DodOIOavs/5vI= Subject key identifier: 3D:3E:C8:CE:B3:0D:77:E6:86:23:51:60:80:B2:2A:78:6D:C9:82:C8 Authority key identifier: 34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 Certificate issuer: /CN=A915A268/serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft Manifest number: 011A Signing time: Sat 19 Jul 2025 04:59:35 +0000 Manifest this update: Sat 19 Jul 2025 04:59:35 +0000 Manifest next update: Sat 26 Jul 2025 04:59:35 +0000 Files and hashes: 1: NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl (hash: 8vs9gxIArGLq4PT1ANjyqBbDQOfXtcUNXAus6MLPhQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A268, serialNumber=34EFD7C4D66CFA34B84566B26239D90A8C91ECB7 Validity Not Before: Jul 19 04:59:35 2025 GMT Not After : Jul 26 04:59:35 2025 GMT Subject: CN=687b2637-a209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:dc:73:06:c7:d5:e8:e7:38:62:ed:0f:31:4e: 85:45:e7:ce:df:95:df:17:48:23:8e:02:44:7c:94: c5:65:c8:83:3a:45:1c:c1:54:db:7f:17:28:60:a5: 21:81:93:a3:cb:19:b6:09:47:20:26:a6:c8:1e:ff: 0b:2e:38:9c:eb:b6:60:b5:ae:76:7f:79:09:66:4e: 55:ed:2f:69:c8:74:fc:64:64:c0:c8:e4:d7:28:de: e8:6f:fd:f6:4c:86:24:51:74:76:bd:c9:3e:1e:41: d4:0e:1e:bd:da:b9:bb:c5:fb:97:74:27:e2:93:0a: fd:ac:ef:7c:6e:b4:1f:ae:63:4e:aa:6f:16:b6:7a: 4a:08:9f:bf:48:35:7e:64:ba:77:53:0b:73:1d:4e: 32:a3:6b:ce:1e:3c:03:d1:a9:c7:f6:4f:de:71:f0: 2f:9a:16:26:55:b7:a2:55:f0:c8:44:b7:b1:74:db: ea:ba:69:3b:ba:83:3f:73:86:7f:14:ff:bd:97:c7: 3b:32:49:c6:6b:ef:1f:09:bf:fc:21:27:4d:1e:29: 96:37:9c:bf:df:c9:00:57:2c:1e:50:f2:61:91:4f: 9c:e8:79:3c:18:c9:14:ba:8b:b1:cb:d0:20:49:67: 92:4c:bb:31:8c:aa:30:f9:e3:94:ec:05:5e:6d:54: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3E:C8:CE:B3:0D:77:E6:86:23:51:60:80:B2:2A:78:6D:C9:82:C8 X509v3 Authority Key Identifier: keyid:34:EF:D7:C4:D6:6C:FA:34:B8:45:66:B2:62:39:D9:0A:8C:91:EC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NO_XxNZs-jS4RWayYjnZCoyR7Lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A268/541F3888B35011EE925D771AC4F9AE02/NO_XxNZs-jS4RWayYjnZCoyR7Lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fd:b0:33:7a:95:94:6a:8f:31:f9:26:5d:9e:9b:49:17:60: 0e:ec:8d:2b:fe:c8:56:39:5e:53:f7:2b:09:76:20:80:95:14: ce:b1:ef:0f:42:e5:db:15:db:7d:c8:df:a2:56:11:f4:a8:34: 4f:c6:c6:0c:1e:c3:94:10:77:83:af:eb:f7:96:3d:ea:8b:2b: f7:33:66:7e:b3:07:ce:80:21:55:6f:00:40:12:23:c3:d6:84: 50:a6:f0:ab:d5:76:a2:93:07:e6:09:92:1f:d3:aa:8b:18:70: b5:d3:4e:7e:12:e4:6f:4d:b5:95:2c:03:ce:6f:ef:7c:f3:eb: 96:c5:6b:88:14:50:9f:1b:bc:56:6a:18:06:a6:3b:e1:d4:14: e8:50:66:4d:09:03:70:a5:6a:cb:6b:24:f0:2a:43:24:d1:b7: 13:58:77:32:10:dc:11:62:2f:6c:67:4e:ff:e9:85:e5:08:3f: ad:e2:36:f1:4f:b7:11:d9:ad:e1:3e:8a:3c:9d:ee:2a:1e:c3: 50:c8:38:fd:0a:35:c9:c4:64:01:47:c5:6b:ff:e2:fb:ff:4b: b3:2c:4b:bd:52:40:d7:ab:68:81:91:e0:ef:c9:fa:10:9c:14: cb:36:ec:30:32:ea:1b:4b:7f:16:86:c9:08:16:7d:08:49:9d: 9d:18:79:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNjgxMTAvBgNVBAUTKDM0RUZEN0M0RDY2Q0ZBMzRCODQ1NjZCMjYyMzlEOTBB OEM5MUVDQjcwHhcNMjUwNzE5MDQ1OTM1WhcNMjUwNzI2MDQ1OTM1WjAYMRYwFAYD VQQDEw02ODdiMjYzNy1hMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69xzBsfV6Oc4Yu0PMU6FRefO35XfF0gjjgJEfJTFZciDOkUcwVTbfxcoYKUh gZOjyxm2CUcgJqbIHv8LLjic67Zgta52f3kJZk5V7S9pyHT8ZGTAyOTXKN7ob/32 TIYkUXR2vck+HkHUDh692rm7xfuXdCfikwr9rO98brQfrmNOqm8WtnpKCJ+/SDV+ ZLp3UwtzHU4yo2vOHjwD0anH9k/ecfAvmhYmVbeiVfDIRLexdNvqumk7uoM/c4Z/ FP+9l8c7MknGa+8fCb/8ISdNHimWN5y/38kAVyweUPJhkU+c6Hk8GMkUuouxy9Ag SWeSTLsxjKow+eOU7AVebVRWuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0+yM6z DXfmhiNRYICyKnhtyYLIMB8GA1UdIwQYMBaAFDTv18TWbPo0uEVmsmI52QqMkey3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI2OC81NDFGMzg4OEIz NTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1qUzRSV2F5WWpuWkNveVI3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PX1h4TlpzLWpTNFJXYXlZam5aQ295UjdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI2OC81NDFGMzg4OEIzNTAxMUVFOTI1RDc3MUFDNEY5QUUwMi9OT19YeE5acy1q UzRSV2F5WWpuWkNveVI3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL/bAzepWUao8x+SZdnptJF2AO7I0r/shWOV5T9ysJdiCAlRTOse8P QuXbFdt9yN+iVhH0qDRPxsYMHsOUEHeDr+v3lj3qiyv3M2Z+swfOgCFVbwBAEiPD 1oRQpvCr1XaikwfmCZIf06qLGHC1005+EuRvTbWVLAPOb+988+uWxWuIFFCfG7xW ahgGpjvh1BToUGZNCQNwpWrLayTwKkMk0bcTWHcyENwRYi9sZ07/6YXlCD+t4jbx T7cR2a3hPoo8ne4qHsNQyDj9CjXJxGQBR8Vr/+L7/0uzLEu9UkDXq2iBkeDvyfoQ nBTLNuwwMuobS38WhskIFn0ISZ2dGHlo -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:17 2025 by rpki-client