$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: B/H2ahmpXrY0KRPsIZz4rl5LCeDfNTjM3p5YxyZqo6A= Subject key identifier: 82:32:60:13:EF:61:AA:9C:92:BA:82:61:D4:B3:A1:31:DA:7A:E4:C4 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: C9 Signing time: Tue 29 Jul 2025 06:11:18 +0000 Manifest this update: Tue 29 Jul 2025 06:11:17 +0000 Manifest next update: Tue 05 Aug 2025 06:11:17 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: JWDjhKfZURqvj8NPjKnQcQsPSSgUeSigAEq/6ZLkFxk=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Jul 29 06:11:17 2025 GMT Not After : Aug 5 06:11:17 2025 GMT Subject: CN=68886605-ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:e4:99:d9:4c:b1:ad:56:2e:83:8c:3d:18: c6:cc:2e:c2:f1:a6:7b:7e:8e:66:11:59:10:d4:08: ce:7b:78:62:dd:cc:b8:cb:b2:ea:29:9c:13:fb:84: d4:99:bf:cd:b0:78:11:1f:3e:28:b5:95:0a:ed:fa: 95:eb:2c:86:24:fc:26:6c:bb:2c:e3:00:11:39:df: 45:dd:42:91:9e:c0:01:0b:83:58:bf:69:ed:fb:c4: 42:54:f2:71:5e:c6:9d:3d:fa:d9:b3:27:4b:2c:90: 05:0a:b0:09:a5:74:d1:fc:ed:d2:5a:5f:11:82:48: bb:1c:de:c1:72:37:06:81:e3:1e:a7:a9:ca:f8:09: 02:2d:57:a8:26:ea:2e:6a:bc:2b:cd:6f:d1:16:c5: ec:26:b6:1b:51:e3:b8:07:d6:32:64:3b:80:c9:ee: 63:45:88:dc:f0:30:b9:6e:97:1a:3e:5c:2f:36:96: 30:b2:63:98:f0:7d:11:45:42:36:c3:c4:9a:8c:35: 55:ed:10:ec:c8:64:50:e0:a0:bf:e3:20:8a:63:58: a8:71:60:10:9a:4f:18:dd:92:6c:77:9a:59:12:dc: 2e:60:3c:7a:b7:51:22:70:2b:ad:c6:0c:22:b5:f8: 54:6c:da:ad:3d:db:fa:dd:ec:ce:5c:86:ef:64:0d: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:60:13:EF:61:AA:9C:92:BA:82:61:D4:B3:A1:31:DA:7A:E4:C4 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:92:bd:42:cc:80:e8:ed:a4:ab:94:38:4d:c3:51:0a:11:89: 17:f9:e0:ba:d0:a2:26:cd:f3:5b:bd:59:9b:0b:bd:84:4f:ae: 31:7b:07:47:24:80:35:56:7b:3d:c3:4b:c7:5e:4c:b7:fb:31: 99:3b:8b:55:b2:f0:41:7c:36:1b:e8:4c:e6:53:c5:72:ad:9b: 5a:53:d6:19:a6:c7:b6:50:3a:95:5c:f5:67:9b:e0:c9:0f:d1: 04:00:14:16:f4:20:78:37:71:f7:7d:85:e2:d4:20:29:8c:d1: 15:47:03:72:77:16:1e:e5:f9:00:44:5b:88:7c:6a:be:b4:2c: 10:9b:d8:74:5a:b0:67:d2:33:be:6b:2f:4e:ed:ff:14:73:86: 3b:52:06:59:5a:a1:87:75:08:f6:c0:ed:b0:9f:32:66:12:8d: 9d:b3:a9:d6:6c:a7:a2:19:18:a5:b4:fd:ac:ee:57:a1:e4:f4: f4:c8:3d:e9:ad:e4:30:35:46:f3:05:84:84:64:7b:ba:59:3f: d5:5b:35:fd:c9:76:fb:5d:f9:1f:dd:4c:af:6c:da:c3:11:7d: 72:27:93:4d:cf:2e:da:3c:fc:f6:8f:e0:15:06:72:af:36:c9: e1:35:10:19:b3:1b:1f:cb:b3:bb:f2:bb:7c:b1:1c:2a:82:11: 36:89:06:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwNzI5MDYxMTE3WhcNMjUwODA1MDYxMTE3WjAYMRYwFAYD VQQDEw02ODg4NjYwNS1jYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRzkmdlMsa1WLoOMPRjGzC7C8aZ7fo5mEVkQ1AjOe3hi3cy4y7LqKZwT+4TU mb/NsHgRHz4otZUK7fqV6yyGJPwmbLss4wAROd9F3UKRnsABC4NYv2nt+8RCVPJx XsadPfrZsydLLJAFCrAJpXTR/O3SWl8Rgki7HN7BcjcGgeMep6nK+AkCLVeoJuou arwrzW/RFsXsJrYbUeO4B9YyZDuAye5jRYjc8DC5bpcaPlwvNpYwsmOY8H0RRUI2 w8SajDVV7RDsyGRQ4KC/4yCKY1iocWAQmk8Y3ZJsd5pZEtwuYDx6t1EicCutxgwi tfhUbNqtPdv63ezOXIbvZA2hRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIyYBPv YaqckrqCYdSzoTHaeuTEMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEkr1CzIDo7aSrlDhNw1EKEYkX+eC60KImzfNbvVmbC72ET64xewdH JIA1Vns9w0vHXky3+zGZO4tVsvBBfDYb6EzmU8VyrZtaU9YZpse2UDqVXPVnm+DJ D9EEABQW9CB4N3H3fYXi1CApjNEVRwNydxYe5fkARFuIfGq+tCwQm9h0WrBn0jO+ ay9O7f8Uc4Y7UgZZWqGHdQj2wO2wnzJmEo2ds6nWbKeiGRiltP2s7leh5PT0yD3p reQwNUbzBYSEZHu6WT/VWzX9yXb7Xfkf3UyvbNrDEX1yJ5NNzy7aPPz2j+AVBnKv NsnhNRAZsxsfy7O78rt8sRwqghE2iQYe -----END CERTIFICATE-----Generated at Tue Jul 29 07:48:50 2025 by rpki-client