$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json) Hash identifier: IPaKPMOJAbe5K97msTj9h33IrIHSTrMwVF8SV1RI9bI= Subject key identifier: BE:E4:51:C9:6C:78:F4:AD:B0:A5:A7:2E:D2:33:3D:8F:82:24:68:82 Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft Manifest number: 0299 Signing time: Sun 07 Sep 2025 02:01:46 +0000 Manifest this update: Sun 07 Sep 2025 02:01:45 +0000 Manifest next update: Sun 14 Sep 2025 02:01:45 +0000 Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: BQNbJbsdi0WOEA72+MiBHRe2MliVD901j9e+6afb1zQ=) 2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: YZYraaTW4N+SBvMTqXTfavIL9Ycht4bd0iE5EB0Igv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Validity Not Before: Sep 7 02:01:45 2025 GMT Not After : Sep 14 02:01:45 2025 GMT Subject: CN=68bce78a-c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:9a:2f:be:7b:86:34:eb:f6:64:d6:30:f6: 8e:38:11:a3:59:fc:d3:89:b1:59:17:d6:c4:b0:c6: cc:79:64:cd:65:3f:98:b2:8c:02:91:05:80:cb:e8: 42:aa:9b:8d:bc:58:be:b8:ec:71:09:c0:7c:a3:fb: 39:79:73:e8:64:ae:c5:a4:22:a4:60:98:d7:31:4c: 46:c5:e5:88:43:e9:74:32:2d:99:41:b8:1c:16:19: 65:01:38:62:b1:21:15:06:c4:5b:4a:50:01:ad:f5: 7c:1c:d1:b6:51:62:6b:a8:93:aa:4e:33:b6:2d:6e: 9d:b5:be:8e:49:6f:2c:dc:21:5d:2d:60:b6:fa:b8: 46:57:5f:5e:ee:a7:04:7f:72:20:41:91:65:08:80: db:c7:b2:04:d3:11:cd:af:9f:3f:b5:90:f7:df:69: 1e:ec:67:3f:51:8f:01:ab:17:bd:60:13:65:0a:32: 3d:c2:5c:a8:2e:b2:bd:8a:f8:bf:f6:14:32:30:94: 1a:b9:90:cf:6f:cd:89:f3:8b:0c:c6:ad:8b:f2:41: 22:dd:10:7c:b4:77:34:c7:58:96:d5:46:8e:f7:b6: 7f:12:b1:26:52:bd:fd:dc:02:4f:af:20:f5:c1:da: 53:fb:61:67:10:2b:ee:3d:84:62:e1:d5:34:d6:31: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:51:C9:6C:78:F4:AD:B0:A5:A7:2E:D2:33:3D:8F:82:24:68:82 X509v3 Authority Key Identifier: keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2a:94:2e:44:63:fb:78:c7:fa:eb:b6:13:12:68:6f:ea:91: 89:d9:f9:7b:3a:29:e8:0f:25:b1:b1:da:16:54:a9:20:f9:78: ef:99:9b:03:a2:1b:b7:82:b0:9a:96:be:19:6e:35:10:3d:89: 3e:d3:2f:7d:97:64:4d:ff:3d:98:78:c0:26:96:6b:e8:9e:32: ee:1b:6e:6f:d9:8e:8f:aa:88:38:50:5c:a1:50:b6:43:f9:83: 47:99:1b:ff:54:52:df:de:e1:ee:b7:7a:a9:f3:60:19:41:15: 39:93:35:8a:6d:13:1b:5a:c2:73:c1:af:54:aa:09:cc:9c:fc: 84:0e:f2:20:3a:88:3c:8c:22:68:af:7f:b6:fa:1a:04:9c:67: be:7b:fe:49:e4:ea:a1:79:02:39:73:9c:22:77:99:fe:96:6e: df:3d:b2:da:ec:ed:58:7b:0e:df:d5:4d:68:69:30:1c:7a:c1: 4d:45:d2:60:6d:9a:c1:40:95:6e:8e:de:9d:77:47:33:80:30: 96:ee:51:43:03:92:5a:9f:e8:1a:49:67:ad:05:07:00:22:04: 4d:38:bf:fc:a4:c0:83:fa:b2:9f:20:31:d5:e6:68:da:f6:e7: 35:7b:2d:be:4c:e0:1a:6c:a2:e8:83:d9:31:d5:2f:3c:6a:53: 8a:81:b3:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZGNkYxMTAvBgNVBAUTKEZCMTFBMkQ4MzY4QzE1MDIxQTVCRjMxMkY1MUQ0NENF NThGRDQ0NTEwHhcNMjUwOTA3MDIwMTQ1WhcNMjUwOTE0MDIwMTQ1WjAYMRYwFAYD VQQDEw02OGJjZTc4YS1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pSaL757hjTr9mTWMPaOOBGjWfzTibFZF9bEsMbMeWTNZT+YsowCkQWAy+hC qpuNvFi+uOxxCcB8o/s5eXPoZK7FpCKkYJjXMUxGxeWIQ+l0Mi2ZQbgcFhllAThi sSEVBsRbSlABrfV8HNG2UWJrqJOqTjO2LW6dtb6OSW8s3CFdLWC2+rhGV19e7qcE f3IgQZFlCIDbx7IE0xHNr58/tZD332ke7Gc/UY8Bqxe9YBNlCjI9wlyoLrK9ivi/ 9hQyMJQauZDPb82J84sMxq2L8kEi3RB8tHc0x1iW1UaO97Z/ErEmUr393AJPryD1 wdpT+2FnECvuPYRi4dU01jEL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7kUcls ePStsKWnLtIzPY+CJGiCMB8GA1UdIwQYMBaAFPsRotg2jBUCGlvzEvUdRM5Y/URR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkY2Ri8xMkUyNTE3QzE0 NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZRSWFXX01TOVIxRXpsajlS RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14R2kyRGFNRlFJYVdfTVM5UjFFemxqOVJGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkY2Ri8xMkUyNTE3QzE0NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZR SWFXX01TOVIxRXpsajlSRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKpQuRGP7eMf667YTEmhv6pGJ2fl7OinoDyWxsdoWVKkg+XjvmZsD ohu3grCalr4ZbjUQPYk+0y99l2RN/z2YeMAmlmvonjLuG25v2Y6Pqog4UFyhULZD +YNHmRv/VFLf3uHut3qp82AZQRU5kzWKbRMbWsJzwa9UqgnMnPyEDvIgOog8jCJo r3+2+hoEnGe+e/5J5OqheQI5c5wid5n+lm7fPbLa7O1Yew7f1U1oaTAcesFNRdJg bZrBQJVujt6dd0czgDCW7lFDA5Jan+gaSWetBQcAIgRNOL/8pMCD+rKfIDHV5mja 9uc1ey2+TOAabKLog9kx1S88alOKgbN/ -----END CERTIFICATE-----Generated at Mon Sep 8 19:11:41 2025 by rpki-client