$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: Mby34BVMBzj2OJSmU6Npiyal2GcCs+lk9QY3fWBgj7U= Subject key identifier: 5C:E5:3D:02:EA:AC:ED:A7:20:B4:D4:8C:77:0F:64:24:71:D3:79:B2 Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 073C Signing time: Thu 18 Sep 2025 22:01:06 +0000 Manifest this update: Thu 18 Sep 2025 22:01:05 +0000 Manifest next update: Thu 25 Sep 2025 22:01:05 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: 8tVPV+FrDmqtrxrguCmoMn0VUtek+bNkkH10X40RZCw=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Sep 18 22:01:05 2025 GMT Not After : Sep 25 22:01:05 2025 GMT Subject: CN=68cc8122-1278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:72:fd:d8:84:cd:81:58:84:e0:3d:50:5f: a5:34:f3:b5:25:d8:0f:f2:bc:46:e7:52:4c:ee:c8: 53:bb:f7:98:d3:d6:50:7a:64:59:89:ce:59:75:3b: 23:ff:5c:fa:72:41:44:87:ab:0b:65:e8:60:d9:fd: d5:6d:ec:7e:24:b2:17:84:4d:4f:0f:7e:bf:2c:0c: 75:4c:c5:1b:f3:ff:17:7e:3a:2f:26:0f:f1:ce:d3: a7:cf:45:90:e7:8e:59:a9:09:96:a5:e3:5f:b1:96: a8:5f:c8:e5:be:5c:98:b3:1c:b0:5d:52:6c:ee:43: 9d:3d:42:a0:8f:20:cb:0f:c2:14:30:92:6c:c4:60: a1:b5:ae:75:bc:1f:fb:0b:61:51:10:f1:dc:64:2b: 40:00:f1:bc:96:d1:e7:fb:45:79:d4:88:70:5c:b0: 03:d1:97:dc:cb:79:31:ec:a2:e5:63:98:aa:db:09: 83:63:f0:50:88:46:07:97:28:90:a2:53:c2:f4:5a: 8a:3c:66:7c:df:1e:08:90:80:0e:ca:d8:a9:61:1e: 52:1d:01:1c:ac:f0:ba:21:6e:b6:ea:6b:4d:ad:95: 1a:b9:a0:7b:2c:c5:35:5a:00:40:cb:3b:13:b8:05: 57:6d:57:f0:dd:87:33:0e:97:f2:a5:04:e8:31:77: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:3D:02:EA:AC:ED:A7:20:B4:D4:8C:77:0F:64:24:71:D3:79:B2 X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:84:20:07:9c:5f:6e:65:2d:ac:3b:9b:76:51:69:cc:d8:57: 18:89:b1:43:95:d5:c9:7b:ce:b4:14:81:ab:03:25:10:7b:73: 15:57:eb:54:62:2c:9a:b8:3a:a3:82:c1:76:2f:a2:75:59:82: ed:5a:70:59:56:b0:65:89:8f:cb:7e:a3:5a:f8:c0:5a:8c:91: 53:8f:e4:e5:53:a8:58:e1:56:16:65:2d:8d:55:ae:69:74:78: 29:4b:f4:98:02:f0:e6:3a:27:2d:0c:1d:4f:0c:30:9c:8a:e3: 2f:3d:63:7b:40:17:ef:ce:00:7e:a0:09:68:86:59:db:8a:f8: 1e:3e:a7:b9:a6:dd:a5:43:62:26:43:81:10:4e:54:90:c5:2f: 81:b4:63:67:12:98:c2:1a:a0:bd:99:16:01:33:0a:ca:8c:01: 02:87:66:df:20:a7:42:41:dc:88:eb:2d:a3:b9:af:db:74:ba: 4e:31:4a:47:a9:6d:8b:95:74:7c:82:13:c6:86:8a:d0:b1:fd: 3e:10:f5:cf:c8:f8:47:c8:dd:3f:48:86:0f:af:2b:fa:18:ad: 90:05:3c:7c:b8:47:a9:47:a9:d3:3b:4e:3c:63:5c:16:b5:f4: 1f:78:19:6b:9d:88:95:c1:24:32:a0:51:73:50:fb:38:86:32: e2:d3:12:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjUwOTE4MjIwMTA1WhcNMjUwOTI1MjIwMTA1WjAYMRYwFAYD VQQDEw02OGNjODEyMi0xMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Ny/diEzYFYhOA9UF+lNPO1JdgP8rxG51JM7shTu/eY09ZQemRZic5ZdTsj /1z6ckFEh6sLZehg2f3Vbex+JLIXhE1PD36/LAx1TMUb8/8XfjovJg/xztOnz0WQ 545ZqQmWpeNfsZaoX8jlvlyYsxywXVJs7kOdPUKgjyDLD8IUMJJsxGChta51vB/7 C2FREPHcZCtAAPG8ltHn+0V51IhwXLAD0Zfcy3kx7KLlY5iq2wmDY/BQiEYHlyiQ olPC9FqKPGZ83x4IkIAOytipYR5SHQEcrPC6IW626mtNrZUauaB7LMU1WgBAyzsT uAVXbVfw3YczDpfypQToMXdS1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzlPQLq rO2nILTUjHcPZCRx03myMB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhhCAHnF9uZS2sO5t2UWnM2FcYibFDldXJe860FIGrAyUQe3MVV+tU YiyauDqjgsF2L6J1WYLtWnBZVrBliY/LfqNa+MBajJFTj+TlU6hY4VYWZS2NVa5p dHgpS/SYAvDmOictDB1PDDCciuMvPWN7QBfvzgB+oAlohlnbivgePqe5pt2lQ2Im Q4EQTlSQxS+BtGNnEpjCGqC9mRYBMwrKjAECh2bfIKdCQdyI6y2jua/bdLpOMUpH qW2LlXR8ghPGhorQsf0+EPXPyPhHyN0/SIYPryv6GK2QBTx8uEepR6nTO048Y1wW tfQfeBlrnYiVwSQyoFFzUPs4hjLi0xIy -----END CERTIFICATE-----Generated at Fri Sep 19 09:09:40 2025 by rpki-client