$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: V6+BJHhwuYmGOgdiVvxSsl5u7CtqgCGFdgZucv+xniU= Subject key identifier: EA:BB:FD:F3:CD:B4:33:D1:FB:E4:EF:58:88:DA:8A:5D:6F:2A:29:FD Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 8A Signing time: Wed 17 Sep 2025 07:16:14 +0000 Manifest this update: Wed 17 Sep 2025 07:16:14 +0000 Manifest next update: Wed 24 Sep 2025 07:16:14 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: jv7Ky0lJCQL39fox2LwfBDF+MmMeyTi0b/Cx8JTGj+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Sep 17 07:16:14 2025 GMT Not After : Sep 24 07:16:14 2025 GMT Subject: CN=68ca603e-4f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:ae:4f:0e:d5:32:74:cf:8e:7f:4c:30:83: d7:12:4c:e2:95:94:93:24:d1:b8:b2:33:69:ef:ae: 64:ce:9d:d2:1e:7a:0a:b0:12:56:23:58:77:a5:3d: bc:9b:df:3b:48:0d:e0:b9:e1:6b:4b:be:95:15:90: 0a:2b:d2:c7:df:cc:ec:38:0c:51:fa:ea:d8:b7:fb: 40:41:c0:1f:3d:e9:bd:8c:53:14:c1:d8:71:3e:b4: 02:22:d1:d3:99:f4:dd:56:f8:14:60:18:01:00:aa: b9:77:44:97:05:59:85:14:ec:1f:ae:50:cf:4e:f3: 42:c6:89:58:fd:4b:4f:1c:f0:fa:0a:2c:09:c1:59: aa:d9:56:3b:78:5a:5f:40:eb:07:9b:3c:e1:28:db: 46:5f:e7:34:57:fd:ae:5e:6c:ee:b2:5d:ac:8b:f7: 5b:5a:ad:37:21:54:79:bd:cc:20:95:77:e0:aa:52: e7:b9:e5:d3:eb:4d:90:8b:e8:63:42:5b:2d:2f:29: bb:aa:4a:a2:72:6a:50:f8:40:00:f9:e2:a3:3e:9f: bd:03:76:f5:1b:f3:d4:ed:92:66:d4:28:4e:c1:f8: 61:ea:6b:c4:8e:39:a0:40:48:5b:9e:02:f1:ad:2a: 55:ec:cc:00:f6:0b:86:b1:cb:60:ed:54:53:02:e2: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:FD:F3:CD:B4:33:D1:FB:E4:EF:58:88:DA:8A:5D:6F:2A:29:FD X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4f:ff:56:8d:c9:ab:3d:cd:80:4d:fc:c8:83:3b:fc:db:c8: db:df:e6:2c:ab:2f:2a:fc:81:88:a0:12:e4:67:64:a0:8a:a1: ae:1e:25:af:23:68:42:60:02:a1:38:be:aa:9c:8c:12:a5:e5: 25:88:b1:40:1a:48:76:31:56:52:95:bd:1c:0c:2a:4c:6d:f2: e4:7e:c5:55:c1:57:2e:64:c8:91:74:aa:dc:23:e0:95:aa:15: ab:96:6e:03:f6:e4:04:4d:bd:44:d2:08:3f:d1:a1:22:19:3a: ec:2d:3e:8a:62:7c:05:56:38:59:6a:db:17:3d:85:bb:f1:4d: cf:34:e9:15:70:84:48:44:d5:1a:01:9b:6d:7b:96:3e:f4:65: 81:86:a4:33:11:f3:2a:95:7a:ba:88:2c:62:65:b0:a5:01:c8: 10:12:ae:5f:58:8f:47:79:67:2c:2f:fa:ee:f7:20:1a:06:92: 0d:d9:93:04:cf:5f:e8:21:42:1a:bd:73:41:56:a5:39:a9:f5: 72:66:b8:36:f8:18:d4:bd:4e:59:82:a5:fb:9f:4c:d0:38:70: 2c:ea:65:49:cd:02:1c:57:22:8d:97:2e:e7:d9:6a:b6:e0:81: 73:a3:40:8b:d4:98:2b:3c:68:67:c4:f2:ed:36:c0:4f:38:18: e7:4d:b7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1 QUVGQTRDQUEwHhcNMjUwOTE3MDcxNjE0WhcNMjUwOTI0MDcxNjE0WjAYMRYwFAYD VQQDEw02OGNhNjAzZS00ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OOuTw7VMnTPjn9MMIPXEkzilZSTJNG4sjNp765kzp3SHnoKsBJWI1h3pT28 m987SA3gueFrS76VFZAKK9LH38zsOAxR+urYt/tAQcAfPem9jFMUwdhxPrQCItHT mfTdVvgUYBgBAKq5d0SXBVmFFOwfrlDPTvNCxolY/UtPHPD6CiwJwVmq2VY7eFpf QOsHmzzhKNtGX+c0V/2uXmzusl2si/dbWq03IVR5vcwglXfgqlLnueXT602Qi+hj QlstLym7qkqicmpQ+EAA+eKjPp+9A3b1G/PU7ZJm1ChOwfhh6mvEjjmgQEhbngLx rSpV7MwA9guGsctg7VRTAuJWBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq7/fPN tDPR++TvWIjail1vKin9MB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS R0M2NkZMZU1oSXBhNzZUS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIT/9WjcmrPc2ATfzIgzv828jb3+Ysqy8q/IGIoBLkZ2SgiqGuHiWv I2hCYAKhOL6qnIwSpeUliLFAGkh2MVZSlb0cDCpMbfLkfsVVwVcuZMiRdKrcI+CV qhWrlm4D9uQETb1E0gg/0aEiGTrsLT6KYnwFVjhZatsXPYW78U3PNOkVcIRIRNUa AZtte5Y+9GWBhqQzEfMqlXq6iCxiZbClAcgQEq5fWI9HeWcsL/ru9yAaBpIN2ZME z1/oIUIavXNBVqU5qfVyZrg2+BjUvU5ZgqX7n0zQOHAs6mVJzQIcVyKNly7n2Wq2 4IFzo0CL1JgrPGhnxPLtNsBPOBjnTbfQ -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:01 2025 by rpki-client