$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft File: nb0ycj1x0bhWzIRJBDf78NpVJWo.mft (raw, json) Hash identifier: l0Iu7uofInW4sU2sptELOo7OBE6Ng7RYYsaXgu2d0cc= Subject key identifier: 3F:67:C7:54:46:2D:E1:79:78:CA:75:80:7C:3C:E1:A3:D3:07:EA:94 Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A Certificate issuer: /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Certificate serial: 0F6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft Manifest number: 0F63 Signing time: Sun 24 Aug 2025 17:32:32 +0000 Manifest this update: Sun 24 Aug 2025 17:32:31 +0000 Manifest next update: Sun 31 Aug 2025 17:32:31 +0000 Files and hashes: 1: nb0ycj1x0bhWzIRJBDf78NpVJWo.crl (hash: 5GZ+E3oGKa8asvSo70Xw6bMhPW5g5NHryR9PBY5g6Dw=) 2: B0DA9FC46FDD11E9BC194664C4F9AE02.roa (hash: Hb9hkw/JGVDNL3WRZDBLo8Md0h4gCqoVhQUhIQUyimQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A Validity Not Before: Aug 24 17:32:31 2025 GMT Not After : Aug 31 17:32:31 2025 GMT Subject: CN=68ab4cb0-0135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:87:e3:50:11:d5:27:9a:61:12:6d:1b:d1: c3:cd:bb:81:e0:ea:81:e6:86:c9:3a:6f:6d:68:8f: c6:f4:57:2f:01:26:fb:a8:2a:6b:e9:b9:da:c8:8d: b2:8e:22:c8:75:cf:65:12:2c:5e:63:b7:15:76:42: 8d:e4:3e:be:7b:dc:88:88:21:1d:c1:bc:b2:fb:a2: a1:96:84:8b:5d:47:b9:4a:21:b7:59:8b:bc:dc:56: 44:87:60:1d:de:84:c6:a7:56:70:e5:08:bf:a6:d6: b6:09:2c:8e:eb:22:64:0f:94:a5:69:90:cf:c0:69: 9c:ac:95:7c:4b:b2:d3:7d:e0:fb:f6:7f:12:6f:7f: 21:d3:71:14:f1:48:38:9f:73:7d:d2:38:2d:68:32: 74:ae:e8:21:a9:a3:5d:57:b5:36:e2:f0:0f:55:4f: 4f:58:98:0d:84:de:14:c6:ca:f3:f9:d6:4b:a1:b7: 22:5a:a3:78:46:30:92:70:83:1f:49:dd:8a:60:6d: 83:de:e8:90:ed:50:e7:3c:0a:01:e8:a3:4a:c7:a0: 7d:a0:38:ab:78:15:f3:c7:61:37:c9:43:d9:9e:8e: 78:cf:7b:a8:0d:07:5e:3a:31:6a:3a:4b:c8:dc:f0: cc:91:72:76:af:e3:96:b0:c1:ed:7f:fa:1e:3c:e3: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:67:C7:54:46:2D:E1:79:78:CA:75:80:7C:3C:E1:A3:D3:07:EA:94 X509v3 Authority Key Identifier: keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d4:dc:3c:e2:f4:2a:81:fc:93:48:1c:2c:df:bb:4f:61:ec: 4d:bd:17:36:09:e1:c5:f4:fd:7c:97:5f:f0:81:dc:de:27:b9: 38:36:28:9e:5b:02:16:6e:a6:63:cb:73:07:59:2f:f4:f1:d0: 72:57:0d:ac:b8:2e:47:e7:2a:08:9c:17:a8:67:39:14:e7:57: 65:5e:df:0a:8e:f3:08:cd:77:45:de:d8:e6:f1:b3:e4:cf:33: 7f:1a:40:ea:21:c5:a5:8e:d8:cd:0c:50:5a:a7:d4:58:3e:22: cc:82:10:8e:95:a6:d0:3d:0d:c5:30:bc:30:7a:31:72:f2:db: 2a:17:bd:9a:90:7c:36:db:c3:39:74:4f:12:4d:97:54:a4:65: ee:8b:63:7a:eb:92:66:8a:8c:79:6b:47:70:8a:f0:42:56:b8: 86:05:25:3c:ba:21:07:f1:0c:85:86:d0:40:cd:ec:0d:61:43: 46:44:43:3e:f7:cf:43:cb:aa:90:50:8e:19:57:6a:c1:9a:68: b4:b2:58:48:1c:78:55:5e:71:49:d6:d7:c6:ab:61:1d:fc:b9: 48:fe:0c:04:58:a4:56:6e:8a:cb:af:d9:85:01:36:4a:78:7c: 40:9b:b3:1f:25:c8:91:38:f6:a0:c7:47:92:d7:09:27:05:d3: d5:6a:4e:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCNDExMTAvBgNVBAUTKDlEQkQzMjcyM0Q3MUQxQjg1NkNDODQ0OTA0MzdGQkYw REE1NTI1NkEwHhcNMjUwODI0MTczMjMxWhcNMjUwODMxMTczMjMxWjAYMRYwFAYD VQQDEw02OGFiNGNiMC0wMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3iH41AR1SeaYRJtG9HDzbuB4OqB5obJOm9taI/G9FcvASb7qCpr6bnayI2y jiLIdc9lEixeY7cVdkKN5D6+e9yIiCEdwbyy+6KhloSLXUe5SiG3WYu83FZEh2Ad 3oTGp1Zw5Qi/pta2CSyO6yJkD5SlaZDPwGmcrJV8S7LTfeD79n8Sb38h03EU8Ug4 n3N90jgtaDJ0rughqaNdV7U24vAPVU9PWJgNhN4Uxsrz+dZLobciWqN4RjCScIMf Sd2KYG2D3uiQ7VDnPAoB6KNKx6B9oDireBXzx2E3yUPZno54z3uoDQdeOjFqOkvI 3PDMkXJ2r+OWsMHtf/oePOPTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9nx1RG LeF5eMp1gHw84aPTB+qUMB8GA1UdIwQYMBaAFJ29MnI9cdG4VsyESQQ3+/DaVSVq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUI0MS8zM0QyNTMxNjZG REIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBiaFd6SVJKQkRmNzhOcFZK V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25iMHljajF4MGJoV3pJUkpCRGY3OE5wVkpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUI0MS8zM0QyNTMxNjZGREIxMUU5QTZFNkJENURDNEY5QUUwMi9uYjB5Y2oxeDBi aFd6SVJKQkRmNzhOcFZKV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm1Nw84vQqgfyTSBws37tPYexNvRc2CeHF9P18l1/wgdzeJ7k4Niie WwIWbqZjy3MHWS/08dByVw2suC5H5yoInBeoZzkU51dlXt8KjvMIzXdF3tjm8bPk zzN/GkDqIcWljtjNDFBap9RYPiLMghCOlabQPQ3FMLwwejFy8tsqF72akHw228M5 dE8STZdUpGXui2N665Jmiox5a0dwivBCVriGBSU8uiEH8QyFhtBAzewNYUNGREM+ 989Dy6qQUI4ZV2rBmmi0slhIHHhVXnFJ1tfGq2Ed/LlI/gwEWKRWborLr9mFATZK eHxAm7MfJciROPagx0eS1wknBdPVak5I -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:44 2025 by rpki-client