$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft File: nAOc5JtXef24TeO2mPZ26EQjZnk.mft (raw, json) Hash identifier: ATiMpMiX52M6EI++7ekDJMpDi3eJ+TutSwdjsZSwknU= Subject key identifier: AA:12:FD:20:A4:30:80:44:AD:AB:EF:86:47:BF:42:5C:E6:5B:A1:FD Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft Manifest number: 1E25 Signing time: Thu 18 Sep 2025 16:11:20 +0000 Manifest this update: Thu 18 Sep 2025 16:11:20 +0000 Manifest next update: Thu 25 Sep 2025 16:11:20 +0000 Files and hashes: 1: nAOc5JtXef24TeO2mPZ26EQjZnk.crl (hash: Ou6tDHKpZkpysHgsAubVVbAlAaBSFcD67Hy2YEjfgFc=) 2: EF2F0372C9F211E986C3B486C4F9AE02.roa (hash: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7732 (0x1e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Sep 18 16:11:20 2025 GMT Not After : Sep 25 16:11:20 2025 GMT Subject: CN=68cc2f28-951b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:fc:97:6b:61:9d:fa:8b:65:ae:1c:36:a9: 4b:bc:a5:a1:7f:fc:54:61:37:71:4d:2c:e0:b6:af: c7:0b:49:be:71:b5:72:ae:47:f6:42:b0:35:a9:a0: cf:ff:0f:9f:33:67:5c:f1:f2:54:9f:ef:aa:71:fb: e8:28:15:0b:d3:e2:50:9f:2c:02:f4:d5:2a:20:e1: b1:07:24:61:4b:88:e4:88:b7:ea:32:bb:e5:3e:55: 42:f8:ca:c5:41:7a:d7:1d:b9:26:62:c9:1c:5b:fe: 38:b1:67:63:09:1a:da:29:36:e8:28:63:66:a2:ea: 93:9b:da:dc:49:28:6f:ad:1c:b6:d0:7a:b4:4b:68: bc:95:08:df:5d:5d:9d:96:8d:46:9c:af:b4:66:65: 81:81:dd:90:13:2f:71:de:84:6f:40:0c:57:92:ef: 38:29:43:13:dd:0b:68:c1:03:db:a4:65:15:f7:4a: 7f:c5:47:52:56:84:1f:83:26:82:8c:6c:05:fd:dc: de:80:44:e7:f1:46:bb:39:39:d2:55:55:f4:fc:f7: 61:5b:5c:bb:17:ab:eb:61:6a:44:98:50:05:5c:76: 33:44:71:74:7e:d5:46:df:a7:6b:5f:10:f3:2b:26: 81:f1:d9:eb:56:80:b0:41:f8:96:e2:be:97:8f:d3: 3a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:FD:20:A4:30:80:44:AD:AB:EF:86:47:BF:42:5C:E6:5B:A1:FD X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:97:4f:f5:f3:16:d9:61:73:04:78:71:6b:50:d7:19:3b: 70:67:e2:77:80:37:a0:be:69:a8:45:ef:bd:04:89:31:33:e1: 59:d3:e8:2b:5e:11:d4:76:24:cf:22:e2:fb:17:fa:b9:68:07: 4e:10:26:33:4a:13:c7:9d:95:a4:29:34:92:72:10:d3:0c:32: 92:05:06:ce:2f:2f:bc:9f:24:31:25:ac:9f:19:6c:7d:bd:07: 58:22:ec:ed:ac:ef:cf:58:b7:59:e7:01:9e:88:5a:6c:35:e6: b4:81:73:bc:43:77:61:f5:15:d0:86:b3:44:29:75:f2:c4:58: bf:d5:9e:36:47:59:bd:33:32:ae:a9:a7:2e:ca:61:fd:7d:39: a1:24:72:2d:46:ce:f3:89:28:03:c3:0f:fb:24:bf:69:78:ea: 0f:9f:d8:a7:77:ed:c4:6b:7e:f1:72:fb:76:ab:f4:ae:2f:88: 52:8b:2c:47:33:33:e0:fe:32:b3:61:97:60:22:7c:98:e6:b1: b6:ee:4c:ba:7e:bf:e4:52:71:f1:fb:c5:9c:3d:d5:2f:d9:64: 90:f7:35:b7:c1:9a:90:da:73:05:8b:59:0a:d9:c4:73:a6:63: b8:21:69:61:57:3a:5a:7b:39:62:06:10:eb:77:82:11:b7:a8: c4:ec:56:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwOTE4MTYxMTIwWhcNMjUwOTI1MTYxMTIwWjAYMRYwFAYD VQQDEw02OGNjMmYyOC05NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokr8l2thnfqLZa4cNqlLvKWhf/xUYTdxTSzgtq/HC0m+cbVyrkf2QrA1qaDP /w+fM2dc8fJUn++qcfvoKBUL0+JQnywC9NUqIOGxByRhS4jkiLfqMrvlPlVC+MrF QXrXHbkmYskcW/44sWdjCRraKTboKGNmouqTm9rcSShvrRy20Hq0S2i8lQjfXV2d lo1GnK+0ZmWBgd2QEy9x3oRvQAxXku84KUMT3QtowQPbpGUV90p/xUdSVoQfgyaC jGwF/dzegETn8Ua7OTnSVVX0/PdhW1y7F6vrYWpEmFAFXHYzRHF0ftVG36drXxDz KyaB8dnrVoCwQfiW4r6Xj9M6EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoS/SCk MIBEravvhke/QlzmW6H9MB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEFENy9FMzdFQzhFNjhGNEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVm MjRUZU8ybVBaMjZFUWpabmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdS5dP9fMW2WFzBHhxa1DXGTtwZ+J3gDegvmmoRe+9BIkxM+FZ0+gr XhHUdiTPIuL7F/q5aAdOECYzShPHnZWkKTSSchDTDDKSBQbOLy+8nyQxJayfGWx9 vQdYIuztrO/PWLdZ5wGeiFpsNea0gXO8Q3dh9RXQhrNEKXXyxFi/1Z42R1m9MzKu qacuymH9fTmhJHItRs7ziSgDww/7JL9peOoPn9ind+3Ea37xcvt2q/SuL4hSiyxH MzPg/jKzYZdgInyY5rG27ky6fr/kUnHx+8WcPdUv2WSQ9zW3wZqQ2nMFi1kK2cRz pmO4IWlhVzpaezliBhDrd4IRt6jE7FZ6 -----END CERTIFICATE-----Generated at Fri Sep 19 02:48:59 2025 by rpki-client