$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft File: Nocz_cVgxeuJ5FJA331AOcsvYQg.mft (raw, json) Hash identifier: X4dTx2NSMhcN2aGf+uupv5w4Ml4+ybeGUsm+UjpzPS8= Subject key identifier: AA:53:EF:81:99:9C:2C:8A:C8:17:05:99:5E:DE:84:36:0E:A2:86:17 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft Manifest number: 0251 Signing time: Sat 19 Jul 2025 02:15:07 +0000 Manifest this update: Sat 19 Jul 2025 02:15:07 +0000 Manifest next update: Sat 26 Jul 2025 02:15:07 +0000 Files and hashes: 1: Nocz_cVgxeuJ5FJA331AOcsvYQg.crl (hash: g6ICOQrJKlAuvB6zCy6XbHfP0I291+BAHbP2zMikQEM=) 2: 020D49E0283211ED9E29FA70C4F9AE02.roa (hash: LQxrSI0KNNYbihu8S9SLx+zDE07D+HfcizadCn96Tg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Jul 19 02:15:07 2025 GMT Not After : Jul 26 02:15:07 2025 GMT Subject: CN=687affab-6fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:13:ce:94:32:d0:f7:60:23:c2:12:9b:99: b5:54:3e:da:32:04:78:3b:18:1b:04:e7:44:32:ed: 1b:45:11:a4:3e:18:d2:77:ca:df:f9:17:60:dd:02: 69:87:5b:bb:e6:d5:9e:ca:4f:ab:da:6a:0b:3b:12: 30:09:f2:a4:03:25:56:c4:c2:7d:ad:3b:28:28:d2: 24:cb:96:05:3b:83:39:e5:09:3e:de:0e:f1:4c:ef: 38:34:70:81:1a:70:6c:5a:91:87:a6:1a:3c:64:d8: 6b:50:2f:b7:03:27:d8:ac:44:ae:de:c7:d3:15:b8: c7:05:1c:83:67:2b:7e:2a:96:9b:87:51:be:a0:75: 61:dd:4b:eb:e0:3f:e1:8f:0a:15:21:a5:9d:9d:cb: 0c:f5:49:76:20:2c:ca:d2:49:ea:30:c3:e2:e3:2f: a4:a2:e6:84:31:61:b9:58:44:01:b8:64:57:1e:4f: c4:74:f2:52:64:c6:05:b8:b7:d1:3e:60:ef:05:94: cb:70:6d:f4:c1:89:48:db:42:ac:76:e4:7b:4e:ef: c8:c9:47:f9:c5:7a:9c:f8:10:73:f8:e5:d5:93:05: 7f:cc:0e:2f:84:19:c3:8c:b5:a0:64:25:0c:8c:00: 85:b6:47:73:65:96:2e:7d:4c:fc:4b:f5:40:6f:c7: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:53:EF:81:99:9C:2C:8A:C8:17:05:99:5E:DE:84:36:0E:A2:86:17 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6e:b2:dd:4b:ec:aa:9c:f2:35:74:d6:43:05:64:16:3b:c5: 11:d9:0c:58:2f:a0:a7:d6:d9:90:42:08:3c:6f:97:71:78:0b: ce:4c:84:80:41:d3:76:a4:87:03:02:cf:d6:06:6f:92:cd:69: 45:fc:cb:92:9a:b2:8b:5e:4c:b2:4c:98:b5:64:24:01:f8:6a: bf:d0:b0:e3:82:ca:40:8d:26:f9:5c:d2:f4:75:87:25:c2:56: 3f:92:e2:75:8d:30:57:38:0c:ef:1d:a1:d0:77:a3:72:79:96: b1:dc:65:26:8c:6d:5c:df:b2:95:de:27:cc:42:cd:bc:ee:76: c0:40:2e:1b:60:2d:0d:1f:a8:17:e9:dd:0d:8e:07:bc:ff:15: aa:b3:03:38:38:32:96:a0:03:69:f3:25:66:61:03:71:4e:5f: 17:8a:12:de:cd:39:47:08:52:32:a8:04:48:27:c5:54:40:a2: 29:54:69:4a:7d:b1:b5:05:c3:7d:86:8f:be:23:f3:96:1c:3b: 00:d5:53:9a:2e:d3:18:c8:78:81:88:cd:85:6f:fd:49:1a:cf: 14:9d:80:b4:0a:0c:7c:27:01:aa:3f:38:e6:d6:cd:50:e1:78: 0e:c9:bd:e1:79:5c:a8:71:00:7e:6e:0c:10:2c:df:92:e6:bf: c2:35:8a:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUwNzE5MDIxNTA3WhcNMjUwNzI2MDIxNTA3WjAYMRYwFAYD VQQDEw02ODdhZmZhYi02ZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWgTzpQy0PdgI8ISm5m1VD7aMgR4OxgbBOdEMu0bRRGkPhjSd8rf+Rdg3QJp h1u75tWeyk+r2moLOxIwCfKkAyVWxMJ9rTsoKNIky5YFO4M55Qk+3g7xTO84NHCB GnBsWpGHpho8ZNhrUC+3AyfYrESu3sfTFbjHBRyDZyt+Kpabh1G+oHVh3Uvr4D/h jwoVIaWdncsM9Ul2ICzK0knqMMPi4y+kouaEMWG5WEQBuGRXHk/EdPJSZMYFuLfR PmDvBZTLcG30wYlI20KsduR7Tu/IyUf5xXqc+BBz+OXVkwV/zA4vhBnDjLWgZCUM jACFtkdzZZYufUz8S/VAb8fmvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpT74GZ nCyKyBcFmV7ehDYOooYXMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTdGNS85MTcwQzQyQTI3NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hl dUo1RkpBMzMxQU9jc3ZZUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhbrLdS+yqnPI1dNZDBWQWO8UR2QxYL6Cn1tmQQgg8b5dxeAvOTISA QdN2pIcDAs/WBm+SzWlF/MuSmrKLXkyyTJi1ZCQB+Gq/0LDjgspAjSb5XNL0dYcl wlY/kuJ1jTBXOAzvHaHQd6NyeZax3GUmjG1c37KV3ifMQs287nbAQC4bYC0NH6gX 6d0Njge8/xWqswM4ODKWoANp8yVmYQNxTl8XihLezTlHCFIyqARIJ8VUQKIpVGlK fbG1BcN9ho++I/OWHDsA1VOaLtMYyHiBiM2Fb/1JGs8UnYC0Cgx8JwGqPzjm1s1Q 4XgOyb3heVyocQB+bgwQLN+S5r/CNYpi -----END CERTIFICATE-----Generated at Sun Jul 20 03:37:25 2025 by rpki-client