$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: 1giDzF6M4hu3jImsIf3K3iJMgoEnHhyVg/Igj3mTUv4= Subject key identifier: C6:E6:58:32:48:A2:7D:48:57:F1:40:37:FE:03:8F:A3:63:A9:0F:65 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A6E Signing time: Thu 18 Sep 2025 19:52:00 +0000 Manifest this update: Thu 18 Sep 2025 19:51:59 +0000 Manifest next update: Thu 25 Sep 2025 19:51:59 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: 1+xIJCpv4SkWg7npdmRkcIF8alWBC5fd6yI63CsZb/8=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Sep 18 19:51:59 2025 GMT Not After : Sep 25 19:51:59 2025 GMT Subject: CN=68cc62e0-9269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:25:bf:82:35:12:57:33:f6:a0:15:a3:53: 6d:31:ad:60:1d:43:06:55:16:fe:94:f6:ba:7b:5c: 9b:16:de:78:fb:f2:3c:f4:c9:3c:80:b8:b4:05:9d: d5:9b:a6:2c:d1:41:ef:3d:0e:7e:33:d4:ab:59:dc: 3a:c4:42:c0:b6:32:cb:34:07:86:0f:ac:34:17:a8: 4a:bc:18:24:f3:2e:c5:84:d4:22:c8:6e:6c:b8:24: d9:4c:21:83:d8:f1:e2:c1:69:23:68:d6:a3:eb:6a: cb:85:88:89:66:d7:92:31:e2:cd:28:17:40:ae:aa: 49:85:0b:ca:cc:24:c5:7f:35:43:21:03:4a:b9:ce: a4:8a:d9:ae:78:ad:65:4a:1e:48:af:bc:c8:04:c9: c1:50:8e:c4:6c:6e:db:f6:c0:1a:e9:f0:30:de:39: 19:b2:00:9c:5c:da:5b:79:7b:77:8a:8d:86:e3:0f: 91:ee:c1:30:d8:a8:cd:21:ec:6e:60:a1:b6:fc:6d: b9:52:7d:67:2c:a2:41:e0:dc:16:39:b8:8c:43:75: d4:23:67:7f:0d:c4:ad:4a:40:53:9d:dc:05:ea:25: 25:59:3c:88:66:89:e7:ea:1f:87:68:45:d5:a5:a4: 8c:f5:7c:b3:10:d0:33:61:30:9f:07:82:4c:63:4e: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E6:58:32:48:A2:7D:48:57:F1:40:37:FE:03:8F:A3:63:A9:0F:65 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:5f:e8:3c:ae:4d:91:c3:f9:b3:36:85:7d:d3:d5:0c:8e:f6: 72:9f:09:66:1b:98:4f:28:15:48:e9:50:ca:e3:e1:9b:b0:cb: 09:03:a5:1a:f0:36:76:a8:7e:de:f1:3f:ee:63:38:ca:4b:82: 22:08:7f:ba:fc:cc:96:1a:ad:2b:e5:43:60:2c:12:4b:f0:04: d9:99:ad:e1:a2:2f:e6:1b:7b:d3:5c:dd:49:00:f8:77:cd:84: ba:67:96:89:d4:4b:6e:6f:e8:c1:e7:35:f6:11:27:ba:a6:4d: 0f:44:25:f1:b6:5b:21:f7:ca:50:cf:24:9d:23:61:08:b2:f5: fb:20:0d:0a:76:10:a2:58:4f:23:07:81:6b:f3:46:6d:ae:52: f6:64:52:bb:8c:78:1c:7d:ad:6c:42:e1:6a:8d:6c:08:0b:2e: 3c:69:e9:b2:22:00:3d:51:9b:ab:53:27:bc:87:84:f4:28:6f: 0e:2e:c1:1a:9e:98:01:d6:9b:43:69:1e:00:e0:77:79:dc:17: ec:e4:e8:2a:7a:28:1a:62:cf:f6:09:50:c4:8a:c7:3f:af:58: 51:12:7f:32:35:7b:e6:32:dc:76:11:5f:aa:84:eb:b5:14:9e: 8a:b1:f7:41:4e:31:5f:81:9d:d1:a2:eb:e6:eb:33:93:8d:62: 96:10:0e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwOTE4MTk1MTU5WhcNMjUwOTI1MTk1MTU5WjAYMRYwFAYD VQQDEw02OGNjNjJlMC05MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk0lv4I1Elcz9qAVo1NtMa1gHUMGVRb+lPa6e1ybFt54+/I89Mk8gLi0BZ3V m6Ys0UHvPQ5+M9SrWdw6xELAtjLLNAeGD6w0F6hKvBgk8y7FhNQiyG5suCTZTCGD 2PHiwWkjaNaj62rLhYiJZteSMeLNKBdArqpJhQvKzCTFfzVDIQNKuc6kitmueK1l Sh5Ir7zIBMnBUI7EbG7b9sAa6fAw3jkZsgCcXNpbeXt3io2G4w+R7sEw2KjNIexu YKG2/G25Un1nLKJB4NwWObiMQ3XUI2d/DcStSkBTndwF6iUlWTyIZonn6h+HaEXV paSM9XyzENAzYTCfB4JMY06dswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbmWDJI on1IV/FAN/4Dj6NjqQ9lMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwX+g8rk2Rw/mzNoV909UMjvZynwlmG5hPKBVI6VDK4+GbsMsJA6Ua 8DZ2qH7e8T/uYzjKS4IiCH+6/MyWGq0r5UNgLBJL8ATZma3hoi/mG3vTXN1JAPh3 zYS6Z5aJ1Etub+jB5zX2ESe6pk0PRCXxtlsh98pQzySdI2EIsvX7IA0KdhCiWE8j B4Fr80ZtrlL2ZFK7jHgcfa1sQuFqjWwICy48aemyIgA9UZurUye8h4T0KG8OLsEa npgB1ptDaR4A4Hd53Bfs5OgqeigaYs/2CVDEisc/r1hREn8yNXvmMtx2EV+qhOu1 FJ6KsfdBTjFfgZ3Rouvm6zOTjWKWEA5b -----END CERTIFICATE-----Generated at Fri Sep 19 03:25:48 2025 by rpki-client