$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft File: NOt2jjwYUO8RSYszIMrNGyYdWSk.mft (raw, json) Hash identifier: WnpD288wiRbzZBbEwPT7QSvnlZt4yfkteKnqWFMYyVA= Subject key identifier: 0F:A6:CB:DE:3F:BB:CF:64:3D:27:3F:A6:60:C6:A2:5E:A1:33:C1:22 Authority key identifier: 34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 Certificate issuer: /CN=A9163EEB/serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft Manifest number: 34AB Signing time: Wed 20 Aug 2025 15:09:46 +0000 Manifest this update: Wed 20 Aug 2025 15:09:46 +0000 Manifest next update: Wed 27 Aug 2025 15:09:46 +0000 Files and hashes: 1: NOt2jjwYUO8RSYszIMrNGyYdWSk.crl (hash: 3dRyI9jLEC25EdahCShFEekKJvBozQ5tM/mRfPa2Tjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EEB, serialNumber=34EB768E3C1850EF11498B3320CACD1B261D5929 Validity Not Before: Aug 20 15:09:46 2025 GMT Not After : Aug 27 15:09:46 2025 GMT Subject: CN=68a5e53a-77da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:40:bf:01:c9:37:06:09:35:e5:6f:29:ec: 55:7f:e5:6a:d4:21:77:d5:96:ee:03:04:bb:cf:7d: 4d:3c:d3:6f:9c:41:59:08:77:93:43:25:f5:cd:82: b2:d3:65:f1:92:5e:14:a2:8a:cb:2c:45:ed:57:e7: 3c:28:58:47:8c:cd:80:2c:04:99:e1:5a:09:1f:86: 7f:0c:22:d3:2e:83:e3:66:1e:b2:68:94:fc:be:9a: 3e:35:8b:a0:b1:3f:07:b1:24:3a:e6:6b:39:e1:f0: c5:a1:46:9e:ea:18:b0:96:0b:a9:b4:ae:cb:64:e8: ce:45:7f:f1:03:a7:54:79:44:3d:66:21:2c:21:42: 95:21:06:fd:ec:d7:09:8c:65:b7:c4:89:ae:9a:f8: e7:17:f9:ca:7a:2a:b1:73:fc:08:1d:96:a8:ea:3f: 26:95:9e:80:7a:b5:a3:fa:3c:fa:de:5a:bb:45:15: 77:d1:61:87:46:be:98:c8:66:5c:c5:8a:1e:79:b7: aa:29:26:69:28:ad:d5:e7:94:6d:74:dc:59:9a:f5: bc:8f:d4:92:bd:0b:77:b5:4a:66:8c:fd:c8:b1:27: fb:f4:3b:64:2b:31:84:63:a6:a0:88:4e:02:aa:28: 97:c4:cc:f3:77:ab:60:7b:8d:bd:07:d6:8f:d0:4d: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A6:CB:DE:3F:BB:CF:64:3D:27:3F:A6:60:C6:A2:5E:A1:33:C1:22 X509v3 Authority Key Identifier: keyid:34:EB:76:8E:3C:18:50:EF:11:49:8B:33:20:CA:CD:1B:26:1D:59:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOt2jjwYUO8RSYszIMrNGyYdWSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EEB/6DE427681DA411E28081719A08B02CD2/NOt2jjwYUO8RSYszIMrNGyYdWSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:47:db:fe:bd:dc:f6:69:15:0a:37:0f:51:16:9e:91:9d:f9: 45:2a:2f:ba:be:75:c6:72:ed:1a:27:7e:ee:92:17:2b:e0:33: 21:f0:bf:76:6a:24:2b:16:2d:cc:6b:29:4a:a8:2c:f5:58:e8: 5c:da:74:82:cd:91:91:18:ef:c5:28:fa:59:d5:5f:80:ec:94: ef:22:39:7e:eb:14:d0:88:06:5d:79:e5:c1:b7:82:f9:ca:ca: 69:67:26:44:08:7a:82:f9:b5:5b:aa:3e:08:b4:0a:75:7c:34: 7e:f3:f3:f2:f5:64:dd:d7:82:71:14:d7:4f:bd:fe:17:0e:19: 89:4d:08:37:50:36:47:c3:ba:9c:d9:67:40:fc:76:d5:0a:87: 4f:e7:5b:00:23:c1:ba:5c:6d:65:27:4b:8c:d0:67:d3:cc:8a: d2:ef:e8:93:17:58:f5:e0:8d:69:da:31:ca:65:b7:80:03:f8: d4:14:d7:a1:0d:18:e6:d2:52:73:73:a4:ef:f7:d2:d6:f1:5c: 7e:8b:f2:d5:e1:c6:57:a0:dc:1d:dd:1e:37:75:2f:39:0d:b0: af:7e:af:92:5c:3b:ca:c1:97:40:94:10:80:77:d1:bb:2c:0c: 8a:5e:95:46:b4:a2:8d:2e:c7:74:08:e7:9d:0c:61:b4:42:49: 20:b7:00:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFRUIxMTAvBgNVBAUTKDM0RUI3NjhFM0MxODUwRUYxMTQ5OEIzMzIwQ0FDRDFC MjYxRDU5MjkwHhcNMjUwODIwMTUwOTQ2WhcNMjUwODI3MTUwOTQ2WjAYMRYwFAYD VQQDEw02OGE1ZTUzYS03N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQdAvwHJNwYJNeVvKexVf+Vq1CF31ZbuAwS7z31NPNNvnEFZCHeTQyX1zYKy 02Xxkl4UoorLLEXtV+c8KFhHjM2ALASZ4VoJH4Z/DCLTLoPjZh6yaJT8vpo+NYug sT8HsSQ65ms54fDFoUae6hiwlguptK7LZOjORX/xA6dUeUQ9ZiEsIUKVIQb97NcJ jGW3xImumvjnF/nKeiqxc/wIHZao6j8mlZ6AerWj+jz63lq7RRV30WGHRr6YyGZc xYoeebeqKSZpKK3V55RtdNxZmvW8j9SSvQt3tUpmjP3IsSf79DtkKzGEY6agiE4C qiiXxMzzd6tge429B9aP0E33VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+my94/ u89kPSc/pmDGol6hM8EiMB8GA1UdIwQYMBaAFDTrdo48GFDvEUmLMyDKzRsmHVkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VFQi82REU0Mjc2ODFE QTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVPOFJTWXN6SU1yTkd5WWRX U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PdDJqandZVU84UlNZc3pJTXJOR3lZZFdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VFQi82REU0Mjc2ODFEQTQxMUUyODA4MTcxOUEwOEIwMkNEMi9OT3Qyamp3WVVP OFJTWXN6SU1yTkd5WWRXU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiR9v+vdz2aRUKNw9RFp6RnflFKi+6vnXGcu0aJ37ukhcr4DMh8L92 aiQrFi3MaylKqCz1WOhc2nSCzZGRGO/FKPpZ1V+A7JTvIjl+6xTQiAZdeeXBt4L5 ysppZyZECHqC+bVbqj4ItAp1fDR+8/Py9WTd14JxFNdPvf4XDhmJTQg3UDZHw7qc 2WdA/HbVCodP51sAI8G6XG1lJ0uM0GfTzIrS7+iTF1j14I1p2jHKZbeAA/jUFNeh DRjm0lJzc6Tv99LW8Vx+i/LV4cZXoNwd3R43dS85DbCvfq+SXDvKwZdAlBCAd9G7 LAyKXpVGtKKNLsd0COedDGG0QkkgtwCV -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:22 2025 by rpki-client