$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: 3ytQzgv0rYqcUo3JcWV0EgdXbaBu83lKNAZLsPAOIE4= Subject key identifier: DC:B6:5F:10:11:F3:8D:DF:CA:06:3E:F6:5A:37:67:1E:92:04:BB:22 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 010A Signing time: Sun 07 Sep 2025 05:28:31 +0000 Manifest this update: Sun 07 Sep 2025 05:28:30 +0000 Manifest next update: Sun 14 Sep 2025 05:28:30 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: IcU8yOHkeXRyk0E1k7HWrYTBbeypXV3clLtd130XaM8=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Sep 7 05:28:30 2025 GMT Not After : Sep 14 05:28:30 2025 GMT Subject: CN=68bd17fe-4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:ba:ad:56:13:73:5e:2d:3e:5f:dc:02:34: 26:3f:49:1f:07:f9:5a:d6:05:6d:10:bd:a1:ea:6b: 8b:c9:34:55:b6:35:52:8e:36:74:c0:a3:04:45:78: 5c:b0:60:cd:0d:59:ad:ec:24:cc:99:3c:42:50:f5: 56:4a:38:4c:60:2b:93:39:05:32:10:ec:b6:d0:28: 36:29:8d:99:fe:98:1c:fd:bb:9e:a5:a1:66:b7:d2: 91:7d:8c:f4:fd:ac:fa:d5:b1:98:9a:65:24:47:f2: 93:99:3c:3d:fc:00:fd:d0:90:1b:e0:31:34:a6:af: 69:9d:16:97:5b:da:be:0f:73:02:f2:bf:39:f1:0b: fa:2c:25:31:51:28:9a:10:d8:43:d3:9c:17:7b:5b: 8e:db:60:2d:03:42:81:ef:7b:ec:65:53:2e:44:c3: e2:4b:11:f5:ec:f0:1b:4b:c7:77:06:14:35:ab:e6: c9:a0:c3:ca:d3:83:42:31:37:02:20:16:a5:bd:af: 94:e2:ac:5a:63:d9:50:58:ff:41:9d:8b:c1:78:9d: f1:7e:8e:0d:f2:b1:ac:18:dd:7a:eb:c1:24:59:49: 55:ef:84:4d:fd:e0:fd:82:69:ee:d7:89:fb:82:d9: d6:56:4d:01:a8:6c:56:b1:5f:26:b6:74:26:b9:de: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B6:5F:10:11:F3:8D:DF:CA:06:3E:F6:5A:37:67:1E:92:04:BB:22 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:f8:a1:8a:eb:8e:02:37:5c:b6:81:80:9b:c7:8d:6e:eb: a2:bc:0b:00:fc:99:de:01:40:a4:f5:dd:d8:e0:60:10:2f:cf: 74:93:a6:de:18:38:a7:01:f5:d4:be:54:31:13:7c:8f:16:e8: 64:06:01:ef:3a:be:3b:fd:86:df:6c:34:c7:76:22:d4:d1:ea: f2:3e:a0:03:80:c0:c1:9a:86:02:21:40:df:0c:46:d7:59:7f: ef:54:53:f4:3f:52:4f:a5:6c:95:fd:44:d3:28:30:b1:c0:b4: 39:ce:2b:ef:2e:0c:70:58:73:a4:e5:af:7f:cb:53:9d:bb:f9: 31:e2:02:5b:55:ba:9f:1e:f9:72:15:54:83:b4:70:be:6f:6c: aa:72:ca:3c:52:aa:52:d4:a2:30:f7:98:ed:8f:56:df:9a:57: 06:ea:c0:16:55:fd:4a:1a:75:3c:16:38:8c:73:50:e0:f4:2d: 87:a6:ae:b3:91:e4:6a:bb:61:4d:90:cc:4e:e2:74:18:75:ea: ce:79:34:ee:d3:0e:b9:62:36:fb:e6:ed:14:6f:80:18:6d:c0: cb:df:21:de:59:09:38:0a:88:50:8d:91:31:02:5a:a4:25:17: 0a:ee:69:7c:30:1d:e4:ac:86:00:a2:ca:c4:9f:ea:bb:01:36: 8b:23:c0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwOTA3MDUyODMwWhcNMjUwOTE0MDUyODMwWjAYMRYwFAYD VQQDEw02OGJkMTdmZS00ZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWG6rVYTc14tPl/cAjQmP0kfB/la1gVtEL2h6muLyTRVtjVSjjZ0wKMERXhc sGDNDVmt7CTMmTxCUPVWSjhMYCuTOQUyEOy20Cg2KY2Z/pgc/buepaFmt9KRfYz0 /az61bGYmmUkR/KTmTw9/AD90JAb4DE0pq9pnRaXW9q+D3MC8r858Qv6LCUxUSia ENhD05wXe1uO22AtA0KB73vsZVMuRMPiSxH17PAbS8d3BhQ1q+bJoMPK04NCMTcC IBalva+U4qxaY9lQWP9BnYvBeJ3xfo4N8rGsGN1668EkWUlV74RN/eD9gmnu14n7 gtnWVk0BqGxWsV8mtnQmud7aSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy2XxAR 843fygY+9lo3Zx6SBLsiMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlOPihiuuOAjdctoGAm8eNbuuivAsA/JneAUCk9d3Y4GAQL890k6be GDinAfXUvlQxE3yPFuhkBgHvOr47/YbfbDTHdiLU0eryPqADgMDBmoYCIUDfDEbX WX/vVFP0P1JPpWyV/UTTKDCxwLQ5zivvLgxwWHOk5a9/y1Odu/kx4gJbVbqfHvly FVSDtHC+b2yqcso8UqpS1KIw95jtj1bfmlcG6sAWVf1KGnU8FjiMc1Dg9C2Hpq6z keRqu2FNkMxO4nQYderOeTTu0w65Yjb75u0Ub4AYbcDL3yHeWQk4CohQjZExAlqk JRcK7ml8MB3krIYAosrEn+q7ATaLI8C3 -----END CERTIFICATE-----Generated at Mon Sep 8 08:41:43 2025 by rpki-client