$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: Pt2bdxbM6801UcTQLwpdMv58ctx16Ojk3mm6ALqeIdE= Subject key identifier: 1F:F9:D8:C6:FC:B1:FF:32:7E:C6:C1:D3:2C:5C:2B:AF:14:5C:A7:E9 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 3491 Signing time: Mon 30 Jun 2025 15:11:54 +0000 Manifest this update: Mon 30 Jun 2025 15:11:53 +0000 Manifest next update: Mon 07 Jul 2025 15:11:53 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: Z/CMii99pGJmxrKjKpXZGzrFNTj37RB4audbKneJuqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Jun 30 15:11:53 2025 GMT Not After : Jul 7 15:11:53 2025 GMT Subject: CN=6862a93a-5712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:64:87:ad:f6:91:0a:b2:3f:04:e5:fc:4e: 51:8d:ec:19:3c:06:5a:29:e0:64:59:48:3f:80:05: 04:ba:a2:d1:a5:49:54:6b:be:72:26:7e:ab:f4:3f: ea:74:fa:2e:9d:b3:49:c9:5c:fc:5b:75:84:c5:3b: 5f:65:64:d8:71:67:b0:0b:e7:e6:bb:2e:4b:a5:99: ab:97:67:bd:60:ba:8d:26:3f:8b:67:86:67:57:c9: 38:e7:22:ba:b4:b7:76:98:65:ec:eb:0f:b6:b1:e7: e8:80:f6:67:06:56:99:0d:fc:78:3d:a0:24:cc:e3: 41:a0:97:90:f2:18:8a:d9:56:b3:0d:76:c5:58:4c: 0c:a7:f9:64:ea:cd:33:9b:ee:1a:37:35:b8:17:f3: 69:47:7b:43:99:0a:78:19:00:1b:f2:c2:46:12:66: 09:ea:dd:7a:e0:c3:dc:ce:bb:1b:cd:a6:39:84:72: b7:2d:64:34:f4:dd:3b:d9:5f:ed:5b:68:59:42:ce: ab:ff:fe:c2:bb:94:18:6f:cf:bc:57:ac:d0:f5:2b: a8:d8:5a:73:5c:26:62:33:ae:11:18:12:e2:74:b0: 3a:64:e4:1c:f0:e3:7c:a2:91:e0:3a:31:e4:98:ce: 65:ba:59:33:c5:09:76:0a:e1:db:79:d8:40:b8:a2: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F9:D8:C6:FC:B1:FF:32:7E:C6:C1:D3:2C:5C:2B:AF:14:5C:A7:E9 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:09:7a:ae:45:f4:c7:ff:65:c6:9f:63:45:aa:50:88:00:11: 0a:b0:fc:55:f4:b2:f5:65:9a:5b:f9:fd:6e:8e:50:8a:e3:b4: 2b:7d:64:2d:b7:81:99:f0:dd:fa:4f:d7:ec:ad:2c:8d:68:cf: 3c:6e:21:b5:6f:1f:c4:a5:5a:68:46:e6:6c:bd:82:cd:d4:91: 3f:33:35:8f:ce:6d:be:f4:45:41:54:b0:2d:1f:be:60:2c:a5: 52:b1:84:82:07:a3:a0:60:76:2d:44:ef:1c:1f:1c:b9:8f:cb: 2b:b1:4b:79:14:df:ed:bd:1d:64:0e:b1:e3:01:12:af:9b:7d: aa:cb:9c:a8:69:98:13:41:78:cb:36:68:83:79:87:fe:a9:a6: 17:f0:25:1f:b6:a7:27:ed:55:d5:00:2e:fc:7a:0c:01:7a:76: bf:73:6c:fa:f1:57:69:f3:b4:70:f6:76:85:bc:66:e2:28:4c: 89:ac:51:02:3c:d9:8c:4d:24:95:f7:8e:e2:42:4d:54:0a:5b: 6d:45:16:cc:f6:c4:ca:7f:65:93:5f:44:56:84:26:44:9e:7f: df:c7:7a:e5:64:5c:34:9e:63:aa:c2:5e:16:9a:9b:f0:17:ef: 86:39:74:92:27:48:65:76:f0:ba:f3:52:4d:23:07:75:6f:3f: a8:c1:15:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwNjMwMTUxMTUzWhcNMjUwNzA3MTUxMTUzWjAYMRYwFAYD VQQDEw02ODYyYTkzYS01NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv1kh632kQqyPwTl/E5RjewZPAZaKeBkWUg/gAUEuqLRpUlUa75yJn6r9D/q dPounbNJyVz8W3WExTtfZWTYcWewC+fmuy5LpZmrl2e9YLqNJj+LZ4ZnV8k45yK6 tLd2mGXs6w+2sefogPZnBlaZDfx4PaAkzONBoJeQ8hiK2VazDXbFWEwMp/lk6s0z m+4aNzW4F/NpR3tDmQp4GQAb8sJGEmYJ6t164MPczrsbzaY5hHK3LWQ09N072V/t W2hZQs6r//7Cu5QYb8+8V6zQ9Suo2FpzXCZiM64RGBLidLA6ZOQc8ON8opHgOjHk mM5lulkzxQl2CuHbedhAuKJfBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/52Mb8 sf8yfsbB0yxcK68UXKfpMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcCXquRfTH/2XGn2NFqlCIABEKsPxV9LL1ZZpb+f1ujlCK47QrfWQt t4GZ8N36T9fsrSyNaM88biG1bx/EpVpoRuZsvYLN1JE/MzWPzm2+9EVBVLAtH75g LKVSsYSCB6OgYHYtRO8cHxy5j8srsUt5FN/tvR1kDrHjARKvm32qy5yoaZgTQXjL NmiDeYf+qaYX8CUftqcn7VXVAC78egwBena/c2z68Vdp87Rw9naFvGbiKEyJrFEC PNmMTSSV947iQk1UClttRRbM9sTKf2WTX0RWhCZEnn/fx3rlZFw0nmOqwl4Wmpvw F++GOXSSJ0hldvC681JNIwd1bz+owRWU -----END CERTIFICATE-----Generated at Tue Jul 1 19:55:01 2025 by rpki-client