$ rpki-client -vvf rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft File: NNe9YUOWrkRRcOBY4K7c661JQF8.mft (raw, json) Hash identifier: PpZlaGvQ+ZU3rf/ihjCL/CFrN/I0Phl63y73iAFFirQ= Subject key identifier: 45:CF:62:DD:23:55:AF:23:45:43:DE:C0:1D:8A:8B:D3:4A:40:3E:D9 Authority key identifier: 34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F Certificate issuer: /CN=A9133F6B/serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft Manifest number: BE Signing time: Wed 17 Sep 2025 06:34:51 +0000 Manifest this update: Wed 17 Sep 2025 06:34:50 +0000 Manifest next update: Wed 24 Sep 2025 06:34:50 +0000 Files and hashes: 1: NNe9YUOWrkRRcOBY4K7c661JQF8.crl (hash: 0Gu0x1JZOdHABtgFsyyagxGZF20Ra+9EaCS7TJ27Rho=) 2: CDB922F074AF11EFA0B26646C4F9AE02.roa (hash: Z9wgm3vGJOLLYnMtYAwUdfFZW4JgmPyeFWsMY0AhztU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133F6B, serialNumber=34D7BD614396AE445170E058E0AEDCEBAD49405F Validity Not Before: Sep 17 06:34:50 2025 GMT Not After : Sep 24 06:34:50 2025 GMT Subject: CN=68ca568b-9d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:68:a2:1c:83:13:c2:b1:53:48:e7:71:9f: 65:33:45:cb:04:a4:db:da:f0:5c:d4:21:fe:c9:34: 07:fa:54:f7:88:70:0d:38:10:05:b4:55:e5:4e:ae: 91:91:d2:55:c8:24:a5:98:90:04:29:95:eb:60:9d: 74:ce:88:24:87:4e:a7:3a:c2:c6:6b:d5:fc:7d:e0: 12:03:44:28:28:3c:c3:b2:3e:14:17:84:ca:13:e0: 5f:4d:83:0f:f9:6a:9d:02:97:f3:76:b7:db:da:15: 51:54:d1:18:e3:81:01:91:03:eb:53:45:13:09:59: f7:af:d7:0e:23:64:75:6a:cf:f7:cb:11:4e:12:a1: be:e6:2c:0a:21:37:3c:69:4a:70:f1:8d:c4:b6:1c: d1:2b:d3:c3:f5:ff:5e:89:d9:dc:7b:a4:82:34:20: 49:bd:1f:35:67:97:02:d6:4d:21:6b:34:a2:e7:f3: 23:38:12:63:ed:5f:95:3d:b5:03:ae:00:db:fb:03: fd:f7:51:f7:6d:4c:c6:fa:9b:94:90:3e:2c:60:e8: 7c:b0:b3:61:0c:db:11:de:6b:0f:40:66:02:61:30: 20:4f:87:ca:93:06:4b:4c:bf:31:99:29:6e:8f:e8: 33:22:de:24:f4:86:67:22:f3:38:c9:a2:e0:5b:f5: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CF:62:DD:23:55:AF:23:45:43:DE:C0:1D:8A:8B:D3:4A:40:3E:D9 X509v3 Authority Key Identifier: keyid:34:D7:BD:61:43:96:AE:44:51:70:E0:58:E0:AE:DC:EB:AD:49:40:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNe9YUOWrkRRcOBY4K7c661JQF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133F6B/9852933E74A611EFAB4B053CC4F9AE02/NNe9YUOWrkRRcOBY4K7c661JQF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:b0:56:18:35:56:23:ef:e8:a2:99:41:ca:5a:dc:bb:ea: 05:d9:8c:fc:f3:68:ca:9f:c3:a3:0e:01:1e:bd:1b:d3:b8:a8: 65:b0:51:be:3a:e6:92:b5:b5:3f:98:6d:96:fd:d1:aa:53:cd: 4e:8d:c0:68:45:8e:1d:86:ff:50:2c:25:51:07:b2:31:0f:93: d8:52:0d:79:6d:99:87:02:e9:c2:19:fc:50:c3:fe:55:39:75: f1:b1:50:14:8e:5a:c5:3e:35:a0:33:12:cb:d2:f5:ce:1e:96: dc:db:90:1f:88:44:b8:51:9b:67:ab:d8:a6:d1:ed:80:df:e3: 67:b8:1a:65:fd:4c:92:30:28:40:1a:6e:f4:6c:27:54:74:c2: 70:1d:d1:16:90:0e:1b:1f:82:06:98:02:14:9d:3f:a5:e4:31: 48:ae:f9:cc:14:bb:79:7a:5e:fa:ce:d9:81:52:a9:e0:e7:f3: bc:eb:dc:56:55:64:1b:e6:cb:a9:87:3f:76:d5:e7:6e:46:4f: b9:06:69:91:6a:61:43:eb:46:f4:65:01:fd:58:8a:7b:07:2c: b2:16:5c:fb:f8:97:0a:bd:03:d1:42:b1:2a:d7:b1:3d:c4:12: f2:26:3d:5c:b8:f3:83:8d:56:98:10:7e:0a:8c:77:fd:e9:be: 34:96:a6:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNGNkIxMTAvBgNVBAUTKDM0RDdCRDYxNDM5NkFFNDQ1MTcwRTA1OEUwQUVEQ0VC QUQ0OTQwNUYwHhcNMjUwOTE3MDYzNDUwWhcNMjUwOTI0MDYzNDUwWjAYMRYwFAYD VQQDEw02OGNhNTY4Yi05ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCdoohyDE8KxU0jncZ9lM0XLBKTb2vBc1CH+yTQH+lT3iHANOBAFtFXlTq6R kdJVyCSlmJAEKZXrYJ10zogkh06nOsLGa9X8feASA0QoKDzDsj4UF4TKE+BfTYMP +WqdApfzdrfb2hVRVNEY44EBkQPrU0UTCVn3r9cOI2R1as/3yxFOEqG+5iwKITc8 aUpw8Y3EthzRK9PD9f9eidnce6SCNCBJvR81Z5cC1k0hazSi5/MjOBJj7V+VPbUD rgDb+wP991H3bUzG+puUkD4sYOh8sLNhDNsR3msPQGYCYTAgT4fKkwZLTL8xmSlu j+gzIt4k9IZnIvM4yaLgW/WqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXPYt0j Va8jRUPewB2Ki9NKQD7ZMB8GA1UdIwQYMBaAFDTXvWFDlq5EUXDgWOCu3OutSUBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0Y2Qi85ODUyOTMzRTc0 QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3JrUlJjT0JZNEs3YzY2MUpR RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZTlZVU9XcmtSUmNPQlk0SzdjNjYxSlFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0Y2Qi85ODUyOTMzRTc0QTYxMUVGQUI0QjA1M0NDNEY5QUUwMi9OTmU5WVVPV3Jr UlJjT0JZNEs3YzY2MUpRRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACt7BWGDVWI+/ooplBylrcu+oF2Yz882jKn8OjDgEevRvTuKhlsFG+ OuaStbU/mG2W/dGqU81OjcBoRY4dhv9QLCVRB7IxD5PYUg15bZmHAunCGfxQw/5V OXXxsVAUjlrFPjWgMxLL0vXOHpbc25AfiES4UZtnq9im0e2A3+NnuBpl/UySMChA Gm70bCdUdMJwHdEWkA4bH4IGmAIUnT+l5DFIrvnMFLt5el76ztmBUqng5/O869xW VWQb5suphz921eduRk+5BmmRamFD60b0ZQH9WIp7ByyyFlz7+JcKvQPRQrEq17E9 xBLyJj1cuPODjVaYEH4KjHf96b40lqaX -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:27 2025 by rpki-client