$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json) Hash identifier: +VcW5IspfdSNBghDqHQ3Y7iXB17wDk1ogmvPWNa1P44= Subject key identifier: F5:A7:23:D0:C8:88:8F:8E:B3:59:69:8A:87:C4:47:C1:39:3C:85:21 Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft Manifest number: 52 Signing time: Sat 19 Jul 2025 07:28:45 +0000 Manifest this update: Sat 19 Jul 2025 07:28:44 +0000 Manifest next update: Sat 26 Jul 2025 07:28:44 +0000 Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: nGlshDU4Vf16RfxP8uYgFlkR77cUS478/IKIgAd9G+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9 Validity Not Before: Jul 19 07:28:44 2025 GMT Not After : Jul 26 07:28:44 2025 GMT Subject: CN=687b492c-3347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:da:28:ba:e1:95:a6:55:90:77:70:be:6e: 60:c2:b7:36:3b:14:98:7c:33:ee:b4:7d:66:7d:c7: aa:0d:8e:43:61:73:09:30:ac:e2:49:c4:cd:15:7b: c3:a4:46:ec:10:29:ba:27:e4:ea:f9:1b:ac:f5:2b: ed:b8:2c:42:83:3e:89:27:b8:e4:73:8a:2d:a7:99: 95:00:d5:77:5b:d8:6d:86:1f:7b:fb:42:aa:9a:50: 21:f1:e9:48:57:d0:eb:46:af:48:32:8e:f0:76:5c: dc:01:a4:e0:24:59:f8:29:6a:77:24:0e:18:d0:e4: 76:91:71:8d:e3:31:f5:9e:4d:32:85:ed:24:c3:90: 80:e3:bd:2b:af:60:49:11:b8:ba:4e:63:83:1b:f3: 5d:a3:b7:c7:cc:3b:b2:2d:08:a2:d8:f2:8d:33:5e: 53:f3:c1:a1:8c:3b:23:a1:0e:55:e4:e9:22:15:3b: 51:be:ec:fe:2e:e9:f1:ea:d1:02:a4:35:84:43:24: b6:76:cc:8e:2c:93:19:a6:c1:0c:0c:2e:f0:c7:46: 7b:b7:bf:66:31:c4:c3:23:16:49:9b:f5:11:0d:58: 11:12:29:5e:e1:57:ae:34:e7:e4:ca:de:ad:3c:a7: 32:25:d0:4c:28:f3:87:1e:28:98:01:78:dd:d2:49: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A7:23:D0:C8:88:8F:8E:B3:59:69:8A:87:C4:47:C1:39:3C:85:21 X509v3 Authority Key Identifier: keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:99:79:f7:a3:28:2f:d6:ab:e4:95:66:90:e9:b6:54:7b:63: b8:2a:d6:82:d9:dd:2e:71:6a:88:20:30:45:03:1c:e5:10:08: c2:85:56:d0:d4:66:86:81:4c:a1:89:ee:3a:e1:b5:98:1f:d1: 29:9d:82:9f:cc:5c:54:71:08:09:b6:8b:2a:9b:f2:69:b6:39: b1:06:34:ae:24:0a:2e:a1:e3:b7:be:6b:59:f3:d5:ea:63:06: e3:0e:74:ff:bc:83:f0:33:ef:4e:8b:39:41:68:99:30:d3:c0: 33:06:96:85:8b:2f:62:fb:bf:84:9b:84:43:ae:c2:46:77:4b: 27:48:3f:d3:d4:c3:db:37:e0:fe:55:c9:6c:57:2b:32:af:1e: 54:2a:29:17:ed:4f:79:e3:28:10:af:aa:37:85:db:d1:2e:aa: e7:cc:e9:ea:49:07:fc:64:b5:ab:85:2f:81:26:44:32:26:53: f6:ff:d3:90:3f:5a:8d:3b:25:6d:3b:ef:40:b6:6c:16:1d:26: c0:f8:ac:c9:f3:64:71:20:bb:96:43:cb:58:4b:46:f7:1a:a3: c5:87:c4:20:3f:3e:53:34:88:9e:a8:86:0b:33:24:99:8b:3b: 82:e7:0d:15:52:40:d5:88:3f:ec:11:ee:7d:37:df:50:1a:69: 26:25:cf:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoRjY3NzE2QTdEMzdEREIwM0RDNTZEMDNBQjkwMkE3MjAz N0VBMTlEOTAeFw0yNTA3MTkwNzI4NDRaFw0yNTA3MjYwNzI4NDRaMBgxFjAUBgNV BAMTDTY4N2I0OTJjLTMzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ANoouuGVplWQd3C+bmDCtzY7FJh8M+60fWZ9x6oNjkNhcwkwrOJJxM0Ve8Ok RuwQKbon5Or5G6z1K+24LEKDPoknuORzii2nmZUA1Xdb2G2GH3v7QqqaUCHx6UhX 0OtGr0gyjvB2XNwBpOAkWfgpanckDhjQ5HaRcY3jMfWeTTKF7STDkIDjvSuvYEkR uLpOY4Mb812jt8fMO7ItCKLY8o0zXlPzwaGMOyOhDlXk6SIVO1G+7P4u6fHq0QKk NYRDJLZ2zI4skxmmwQwMLvDHRnu3v2YxxMMjFkmb9RENWBESKV7hV6405+TK3q08 pzIl0Ewo84ceKJgBeN3SSbYNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9acj0MiI j46zWWmKh8RHwTk8hSEwHwYDVR0jBBgwFoAU9ncWp9N92wPcVtA6uQKnIDfqGdkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0YzMkNGNEU4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQY1Z0QTZ1UUtuSURmcUdk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOW5jV3A5Tjkyd1BjVnRBNnVRS25JRGZxR2RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0YzMkNGNEU4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyLzluY1dwOU45MndQ Y1Z0QTZ1UUtuSURmcUdkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACKZefejKC/Wq+SVZpDptlR7Y7gq1oLZ3S5xaoggMEUDHOUQCMKFVtDU ZoaBTKGJ7jrhtZgf0Smdgp/MXFRxCAm2iyqb8mm2ObEGNK4kCi6h47e+a1nz1epj BuMOdP+8g/Az706LOUFomTDTwDMGloWLL2L7v4SbhEOuwkZ3SydIP9PUw9s34P5V yWxXKzKvHlQqKRftT3njKBCvqjeF29EuqufM6epJB/xktauFL4EmRDImU/b/05A/ Wo07JW0770C2bBYdJsD4rMnzZHEgu5ZDy1hLRvcao8WHxCA/PlM0iJ6ohgszJJmL O4LnDRVSQNWIP+wR7n0331AaaSYlz14= -----END CERTIFICATE-----Generated at Sun Jul 20 03:10:17 2025 by rpki-client