$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: 3a1+6/dBVMip5mILvhtt4eh+TTyE03FFGleqPlpN+Q8= Subject key identifier: 12:87:B0:8F:A1:73:71:D8:82:EA:07:09:F9:A6:F3:F8:CA:22:78:50 Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 0673 Signing time: Tue 22 Jul 2025 22:43:57 +0000 Manifest this update: Tue 22 Jul 2025 22:43:57 +0000 Manifest next update: Tue 29 Jul 2025 22:43:57 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: 8jcOb/u1LY7OXDuY5nUN8hjoplcNpepPhhQBZ91NTjg=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Jul 22 22:43:57 2025 GMT Not After : Jul 29 22:43:57 2025 GMT Subject: CN=6880142d-4bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:ea:99:0c:65:f3:94:69:76:9e:a6:84:ab: fa:ef:5a:40:bd:c9:51:4d:78:f2:29:ca:fa:e1:fd: b5:7f:6c:3d:9e:73:63:f9:8d:eb:49:bb:ef:5a:73: ef:ff:aa:25:5e:d2:fa:b1:1b:1e:0e:a0:77:67:00: 21:cb:8b:7f:79:35:b3:57:64:9c:62:42:35:20:c9: 91:ed:ee:78:72:1d:7e:0c:df:dc:12:4b:6b:31:ba: d7:c9:86:24:9e:b8:b9:29:19:39:90:eb:f9:2f:b7: 81:74:05:b9:85:1c:aa:e6:d0:4b:5b:52:fe:37:63: b5:04:3b:6e:d9:29:9b:18:b3:b0:cc:7c:11:c0:82: 5f:9a:df:ee:fe:db:10:d8:b1:82:7d:69:66:07:9b: 7a:2b:29:f8:2e:3d:7a:5b:c5:cd:8f:fa:5d:a0:f9: 0c:82:42:8a:be:c1:ee:96:ef:e0:01:b8:2b:0f:21: 7d:1d:80:8c:d9:a9:d0:85:da:d6:9b:65:4c:db:5b: 03:cb:5b:5d:17:79:27:96:86:ae:16:fd:2f:3b:2a: d3:c8:d9:f6:ab:a2:cd:3a:94:2c:01:18:83:7c:cc: 3a:1a:ab:eb:84:00:2b:85:31:d1:d0:c7:e9:37:70: 22:1a:88:59:40:84:05:3d:0f:3b:dd:77:67:9b:4e: b2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:87:B0:8F:A1:73:71:D8:82:EA:07:09:F9:A6:F3:F8:CA:22:78:50 X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e3:55:09:04:26:8f:bd:2f:ae:ab:fb:7e:88:b0:fb:17:47: 86:60:c3:53:77:8f:96:7b:55:03:12:23:d2:47:51:42:0b:48: 69:3c:cd:49:d4:cb:6b:3c:77:c5:dd:0d:32:7a:28:80:ff:59: 74:95:3c:4b:df:02:8f:19:da:c5:04:03:0b:35:a8:39:48:33: 61:8d:c7:c9:da:db:2a:b9:8a:3e:1e:19:ba:cd:d4:7b:9b:0a: ed:4a:3f:73:a7:06:31:c6:2e:37:12:6f:d2:8c:40:3c:65:df: d9:87:45:8f:f6:5f:5e:e3:2a:04:af:9a:1e:ee:8a:60:07:4b: ba:91:e0:d5:cc:16:4e:1d:16:d1:23:c6:7d:32:4f:19:02:0a: 1c:6a:4d:74:e2:13:63:5f:5a:da:14:2f:56:fe:4f:1e:1e:c5: 4e:7f:81:45:03:1d:fb:27:7c:a6:09:11:43:75:14:45:55:22: d9:cf:e6:fa:d2:9c:e2:d3:dc:50:00:d8:d0:fa:a2:67:b9:e9: bd:ad:dc:5a:22:1b:66:51:8c:83:bd:01:fd:90:53:6e:8c:5e: ed:dd:85:34:0a:d3:51:fc:7c:2e:69:9f:f8:5c:c4:c9:48:37: 0e:93:18:aa:49:01:33:4a:b9:bd:ea:b4:f8:e5:ff:51:cc:a7: e1:74:9e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUwNzIyMjI0MzU3WhcNMjUwNzI5MjI0MzU3WjAYMRYwFAYD VQQDEw02ODgwMTQyZC00YmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMrqmQxl85Rpdp6mhKv671pAvclRTXjyKcr64f21f2w9nnNj+Y3rSbvvWnPv /6olXtL6sRseDqB3ZwAhy4t/eTWzV2ScYkI1IMmR7e54ch1+DN/cEktrMbrXyYYk nri5KRk5kOv5L7eBdAW5hRyq5tBLW1L+N2O1BDtu2SmbGLOwzHwRwIJfmt/u/tsQ 2LGCfWlmB5t6Kyn4Lj16W8XNj/pdoPkMgkKKvsHulu/gAbgrDyF9HYCM2anQhdrW m2VM21sDy1tdF3knloauFv0vOyrTyNn2q6LNOpQsARiDfMw6GqvrhAArhTHR0Mfp N3AiGohZQIQFPQ873Xdnm06yqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKHsI+h c3HYguoHCfmm8/jKInhQMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA541UJBCaPvS+uq/t+iLD7F0eGYMNTd4+We1UDEiPSR1FCC0hpPM1J 1MtrPHfF3Q0yeiiA/1l0lTxL3wKPGdrFBAMLNag5SDNhjcfJ2tsquYo+Hhm6zdR7 mwrtSj9zpwYxxi43Em/SjEA8Zd/Zh0WP9l9e4yoEr5oe7opgB0u6keDVzBZOHRbR I8Z9Mk8ZAgocak104hNjX1raFC9W/k8eHsVOf4FFAx37J3ymCRFDdRRFVSLZz+b6 0pzi09xQANjQ+qJnuem9rdxaIhtmUYyDvQH9kFNujF7t3YU0CtNR/HwuaZ/4XMTJ SDcOkxiqSQEzSrm96rT45f9RzKfhdJ5P -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:36 2025 by rpki-client