$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft File: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft (raw, json) Hash identifier: +fTPlmdMMXvCqhiY1WRxkCx8chmsrMWDswJElYf78uw= Subject key identifier: DF:BD:64:CC:F6:9C:5C:60:5D:80:BE:99:1D:EF:F8:EC:D4:21:2D:16 Authority key identifier: 34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE Certificate issuer: /CN=A9150EAB/serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Certificate serial: 0B27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft Manifest number: 1224 Signing time: Sun 24 Aug 2025 19:15:38 +0000 Manifest this update: Sun 24 Aug 2025 19:15:38 +0000 Manifest next update: Sun 31 Aug 2025 19:15:38 +0000 Files and hashes: 1: NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl (hash: rrjJ6gOLi692uYN5NsjIZLaO6E6u7DyxEhk7Fax8xs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EAB, serialNumber=341D09021CBF9FD3BB4CB88E3D0ED1C764DED0FE Validity Not Before: Aug 24 19:15:38 2025 GMT Not After : Aug 31 19:15:38 2025 GMT Subject: CN=68ab64da-0deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fa:f4:8d:22:32:5b:ce:fa:9b:fa:2f:ad:a0: 69:30:c5:51:61:6d:44:d7:33:c3:c4:37:bb:00:9d: 62:70:d2:92:ec:fe:9d:05:ff:4f:2f:9a:2d:cc:b3: 17:1c:3a:89:af:ab:de:94:62:33:e8:7a:22:4f:4a: 42:3d:b0:32:1b:de:0a:40:ae:17:1a:55:13:44:8d: b5:b4:36:a8:6f:5c:3e:e9:12:00:76:ab:dc:fb:0f: d0:80:84:aa:de:bb:fb:94:44:96:60:2a:d2:f5:00: ba:73:0a:c0:28:21:68:60:33:88:9e:0b:ff:55:53: 41:9d:bd:98:ef:7c:be:2a:4e:f3:e1:94:f7:da:fb: 75:4c:7b:9c:51:51:79:88:e6:63:67:7e:09:42:73: 52:81:0d:b3:54:b8:1a:f6:f0:70:ce:dd:26:93:92: 6a:f3:8e:0c:fb:7e:41:ee:d2:b7:dd:a3:1b:1a:69: f6:69:3d:96:f8:c9:a4:8f:ff:a4:33:35:fe:ea:55: 22:3f:85:4e:3e:17:ac:15:49:5f:bb:a1:95:2b:42: dd:22:c2:1c:67:72:91:b5:63:66:bf:75:5d:28:6e: c1:33:30:2f:78:97:6e:ea:ff:d5:81:1f:f3:43:f0: 0d:1b:34:83:1a:77:cd:48:f2:0f:a0:14:a1:dc:13: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:64:CC:F6:9C:5C:60:5D:80:BE:99:1D:EF:F8:EC:D4:21:2D:16 X509v3 Authority Key Identifier: keyid:34:1D:09:02:1C:BF:9F:D3:BB:4C:B8:8E:3D:0E:D1:C7:64:DE:D0:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EAB/1B2E7050446B11EA9DE59A57C4F9AE02/NB0JAhy_n9O7TLiOPQ7Rx2Te0P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:51:b3:53:d7:df:fd:c8:81:b6:57:09:27:de:fe:f6:1d: 9a:f0:e9:b8:e1:38:2d:16:c2:3a:37:57:0e:0c:36:3a:88:de: 39:bd:17:d0:bd:c1:7b:ad:57:7d:03:6f:50:a5:8c:2d:3f:70: 4c:80:6d:84:d7:43:30:0e:16:d6:dd:da:89:90:d8:c6:7c:1b: 9d:c2:ca:75:c6:a1:96:e3:78:7f:e8:a4:d6:69:70:0e:67:e7: 03:44:65:31:1c:12:e3:79:d5:bf:25:e8:7b:d7:ab:96:1f:31: 4b:cc:85:9a:a1:9e:72:70:1a:39:c9:96:2f:0b:ec:0f:39:c0: 70:c8:70:b8:b3:2e:e7:04:4a:58:35:f0:00:aa:dd:58:10:fa: 6c:bf:3d:49:a9:31:bd:44:49:c7:33:82:e7:b3:4e:e1:71:6b: 1d:d5:3f:0d:54:a6:b4:ed:f0:4b:bf:dd:4f:39:f1:be:ab:b3: 4b:a3:05:0d:8e:a2:ee:37:2c:86:cf:90:3b:fd:e6:1d:1c:95: 7f:5d:cf:df:6b:74:97:da:65:9d:e1:c3:15:5c:0f:b6:83:7e: 9e:17:27:ba:5d:42:b2:ec:51:85:18:3b:2c:d8:9f:88:a6:83: 88:5b:2e:49:18:5f:49:1d:a8:18:30:79:2c:02:52:9c:87:e9: 64:79:12:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFQUIxMTAvBgNVBAUTKDM0MUQwOTAyMUNCRjlGRDNCQjRDQjg4RTNEMEVEMUM3 NjRERUQwRkUwHhcNMjUwODI0MTkxNTM4WhcNMjUwODMxMTkxNTM4WjAYMRYwFAYD VQQDEw02OGFiNjRkYS0wZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vr0jSIyW876m/ovraBpMMVRYW1E1zPDxDe7AJ1icNKS7P6dBf9PL5otzLMX HDqJr6velGIz6HoiT0pCPbAyG94KQK4XGlUTRI21tDaob1w+6RIAdqvc+w/QgISq 3rv7lESWYCrS9QC6cwrAKCFoYDOIngv/VVNBnb2Y73y+Kk7z4ZT32vt1THucUVF5 iOZjZ34JQnNSgQ2zVLga9vBwzt0mk5Jq844M+35B7tK33aMbGmn2aT2W+Mmkj/+k MzX+6lUiP4VOPhesFUlfu6GVK0LdIsIcZ3KRtWNmv3VdKG7BMzAveJdu6v/VgR/z Q/ANGzSDGnfNSPIPoBSh3BPwNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+9ZMz2 nFxgXYC+mR3v+OzUIS0WMB8GA1UdIwQYMBaAFDQdCQIcv5/Tu0y4jj0O0cdk3tD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVBQi8xQjJFNzA1MDQ0 NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245TzdUTGlPUFE3UngyVGUw UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05CMEpBaHlfbjlPN1RMaU9QUTdSeDJUZTBQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVBQi8xQjJFNzA1MDQ0NkIxMUVBOURFNTlBNTdDNEY5QUUwMi9OQjBKQWh5X245 TzdUTGlPUFE3UngyVGUwUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPRlGzU9ff/ciBtlcJJ97+9h2a8Om44TgtFsI6N1cODDY6iN45vRfQ vcF7rVd9A29QpYwtP3BMgG2E10MwDhbW3dqJkNjGfBudwsp1xqGW43h/6KTWaXAO Z+cDRGUxHBLjedW/Jeh716uWHzFLzIWaoZ5ycBo5yZYvC+wPOcBwyHC4sy7nBEpY NfAAqt1YEPpsvz1JqTG9REnHM4Lns07hcWsd1T8NVKa07fBLv91POfG+q7NLowUN jqLuNyyGz5A7/eYdHJV/Xc/fa3SX2mWd4cMVXA+2g36eFye6XUKy7FGFGDss2J+I poOIWy5JGF9JHagYMHksAlKch+lkeRIS -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:21 2025 by rpki-client