$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: TD2kjXwKFVk8CCXtN6H+f+s4zYrqayUbJHeCarXEkVI= Subject key identifier: 22:4D:AD:B3:49:70:D4:D9:BD:FC:01:96:57:8B:09:78:92:8B:05:CB Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CC3 Signing time: Wed 10 Sep 2025 18:21:24 +0000 Manifest this update: Wed 10 Sep 2025 18:21:23 +0000 Manifest next update: Wed 17 Sep 2025 18:21:23 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: 20VW6mUmsLcUrRHrgt4My8mFRzYII9sm8K6Ss+vucB8=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: kkKkasO600i7l8SPa9lAdAB/Gj/5tXgHGwIFLqEqACQ=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Sep 10 18:21:23 2025 GMT Not After : Sep 17 18:21:23 2025 GMT Subject: CN=68c1c1a4-7424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:04:12:5c:b7:4a:37:4e:b1:31:df:37:be: 99:fe:7c:c0:91:b5:17:5e:dc:80:f2:83:c5:c6:d9: a2:5b:e2:cf:5c:85:de:fc:cc:a2:8b:5f:5d:ef:ed: 2a:b5:33:56:0e:2e:52:9b:64:5c:48:d8:c4:55:a3: cd:ed:a4:0a:29:ab:90:8c:1a:41:e3:4c:5b:88:2a: 5d:df:77:8a:de:71:4a:8f:d8:c8:2b:a9:be:1f:42: 01:f9:fb:65:fe:d0:83:db:b7:ac:1e:02:8e:3c:76: db:05:0c:02:20:41:3d:a4:90:42:78:d9:7d:61:c4: c4:d1:ff:60:24:2f:dc:ca:c8:b7:0b:20:24:63:19: e4:bd:12:9a:f7:35:5d:6e:30:01:f6:0c:24:3c:3e: 31:4b:73:34:f8:e3:11:11:23:a2:2a:eb:36:39:4c: 75:24:b4:08:a1:97:d6:63:ce:a2:1b:dc:2c:19:56: 81:04:33:5f:5c:86:30:c7:bf:e0:46:ab:a9:53:ad: bf:49:02:31:41:79:05:90:62:62:0e:09:86:e6:d4: 55:00:91:a4:48:76:96:54:78:ae:c0:52:95:ee:fd: 05:71:95:d8:31:b1:49:b0:6e:bb:af:46:3a:ed:a9: 6c:76:21:87:6f:ea:88:57:56:18:8a:c2:6a:23:33: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:AD:B3:49:70:D4:D9:BD:FC:01:96:57:8B:09:78:92:8B:05:CB X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:eb:d9:ef:11:d6:6c:a9:9d:46:8c:35:cb:fa:03:62:28:d5: ba:46:30:d7:36:e5:4d:38:04:75:dd:fc:28:08:66:6a:a7:e3: 88:fd:9c:30:bd:ca:f8:dd:6f:15:9f:cb:ea:31:f9:f4:ff:88: e9:d0:db:84:54:10:e1:3b:5f:13:d4:07:5d:d3:00:9e:b3:8c: 6a:74:d7:a8:22:b2:ca:ec:4a:49:12:e6:0c:5c:6f:27:55:90: ee:b6:4d:b5:c4:ca:e3:56:b7:8f:31:72:80:fc:5e:af:08:4a: b3:6f:fc:93:24:27:54:ec:9a:d2:99:64:e8:89:aa:09:45:8e: 1a:ae:61:c4:ab:2f:9f:f1:d2:ef:cb:85:e0:3f:45:6a:ab:d2: f0:04:3e:63:7e:68:29:09:37:ae:ef:95:49:96:64:fc:c1:36: 0d:ef:6f:3a:ef:43:57:58:9f:b9:0d:58:41:d7:6b:c5:85:9d: 0e:36:65:37:2e:34:d9:dd:55:d0:df:b8:0a:e0:18:38:a7:b7: 40:bb:30:9a:58:02:62:b3:77:ba:1b:6c:8f:bb:a1:9f:6b:8e: 82:ab:c6:bc:10:f3:29:50:05:13:2f:6e:b6:f0:a5:58:5d:91: a1:ec:c7:88:8c:16:3f:a6:92:aa:d6:f0:af:bf:8f:34:89:d7: 82:b3:fc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwOTEwMTgyMTIzWhcNMjUwOTE3MTgyMTIzWjAYMRYwFAYD VQQDEw02OGMxYzFhNC03NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRAEEly3SjdOsTHfN76Z/nzAkbUXXtyA8oPFxtmiW+LPXIXe/Myii19d7+0q tTNWDi5Sm2RcSNjEVaPN7aQKKauQjBpB40xbiCpd33eK3nFKj9jIK6m+H0IB+ftl /tCD27esHgKOPHbbBQwCIEE9pJBCeNl9YcTE0f9gJC/cysi3CyAkYxnkvRKa9zVd bjAB9gwkPD4xS3M0+OMRESOiKus2OUx1JLQIoZfWY86iG9wsGVaBBDNfXIYwx7/g RqupU62/SQIxQXkFkGJiDgmG5tRVAJGkSHaWVHiuwFKV7v0FcZXYMbFJsG67r0Y6 7alsdiGHb+qIV1YYisJqIzMc+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJNrbNJ cNTZvfwBlleLCXiSiwXLMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi69nvEdZsqZ1GjDXL+gNiKNW6RjDXNuVNOAR13fwoCGZqp+OI/Zww vcr43W8Vn8vqMfn0/4jp0NuEVBDhO18T1Add0wCes4xqdNeoIrLK7EpJEuYMXG8n VZDutk21xMrjVrePMXKA/F6vCEqzb/yTJCdU7JrSmWToiaoJRY4armHEqy+f8dLv y4XgP0Vqq9LwBD5jfmgpCTeu75VJlmT8wTYN728670NXWJ+5DVhB12vFhZ0ONmU3 LjTZ3VXQ37gK4Bg4p7dAuzCaWAJis3e6G2yPu6Gfa46Cq8a8EPMpUAUTL2628KVY XZGh7MeIjBY/ppKq1vCvv480ideCs/wG -----END CERTIFICATE-----Generated at Thu Sep 11 19:52:32 2025 by rpki-client