$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft File: A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json) Hash identifier: /PP2AXgjS9hdiu2r4eMemeOs4LUnix2rKcG3qU6oblE= Subject key identifier: ED:69:89:72:F8:5C:FB:49:A0:33:35:15:19:DF:16:74:44:F3:60:94 Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE Certificate issuer: /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft Manifest number: 0682 Signing time: Tue 16 Sep 2025 22:45:39 +0000 Manifest this update: Tue 16 Sep 2025 22:45:39 +0000 Manifest next update: Tue 23 Sep 2025 22:45:39 +0000 Files and hashes: 1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: 9uiCxa5+FD0QGl8abI9I0waJdTCNm2rCbL+wQi6/p5o=) 2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: NEghmZK6SR0tR3ZI4129y+/95/Ec7cMoQlur8P+TYRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE Validity Not Before: Sep 16 22:45:39 2025 GMT Not After : Sep 23 22:45:39 2025 GMT Subject: CN=68c9e893-284d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:12:08:6e:1e:f7:61:22:d2:ed:05:88:4e: ac:0a:8d:73:c1:c5:5d:c5:b5:13:d5:73:ff:3a:29: 40:4a:80:dc:4a:ae:6d:b0:ce:4c:35:05:a5:43:37: 47:16:2f:da:e3:7e:de:65:85:5e:d1:37:08:90:34: c7:24:c6:71:9e:a3:75:d8:86:3c:73:0f:c1:81:b3: 2a:bf:5d:16:6b:51:51:d2:32:c0:30:4f:c5:2e:8f: c6:bb:97:48:9b:a1:a5:47:14:41:00:33:50:75:ea: 2f:75:6f:62:bf:0f:27:4b:0f:fd:4a:3e:9e:e7:27: 2c:11:42:37:7d:b6:de:9f:24:73:ce:23:e4:b0:60: f9:9a:78:d4:2c:ea:03:42:67:e1:64:ab:d9:8e:46: be:97:8a:2c:a4:53:a5:16:a4:d7:08:0c:ef:19:3c: c3:2a:ad:fb:9c:91:48:55:63:ff:7e:84:d8:3f:ab: 78:e4:08:99:2a:ca:ba:ea:6e:f8:0f:13:7f:27:93: 40:78:b3:ee:17:5f:2b:35:5c:30:aa:71:2e:72:8b: e0:52:0f:f1:36:30:f6:16:65:5b:7f:d0:e7:37:17: 03:9b:9e:5b:1c:ad:da:7d:69:67:74:c3:d7:fd:2b: aa:49:b7:58:8d:54:34:0c:b2:d7:d2:ec:a0:89:62: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:69:89:72:F8:5C:FB:49:A0:33:35:15:19:DF:16:74:44:F3:60:94 X509v3 Authority Key Identifier: keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e7:34:ed:9e:77:52:23:86:2f:44:38:d3:57:9e:1d:23:bc: c4:a1:89:88:56:05:40:8f:0d:33:de:2b:21:62:e9:35:cd:6e: 89:40:7b:4c:1f:bd:d4:5f:66:93:93:40:6c:66:79:fa:81:51: 53:c8:94:12:82:0d:ab:13:7e:95:03:3e:5e:a8:e2:27:84:de: f4:83:b1:ff:0d:30:8f:4c:43:6e:c2:42:f6:0b:74:36:91:27: e0:9c:96:06:ac:99:ce:15:29:d1:87:1b:20:88:ea:0e:d7:6e: 43:80:55:60:84:19:d3:92:8d:b3:f4:07:de:4d:7f:4b:00:19: bd:98:02:66:df:18:50:44:c4:da:a3:e1:87:13:48:8a:7a:c3: 3f:45:8a:c0:6a:9c:86:36:b1:a4:66:ee:41:02:73:eb:46:43: c0:8a:83:0b:fd:43:6d:f2:1a:82:37:7a:14:44:5c:4a:a1:16: 83:a9:dd:b1:38:13:3c:cc:a3:e2:5f:38:15:22:d2:70:08:f8: 55:2a:1d:2a:d9:e2:64:6a:65:97:e0:02:1f:a2:d4:89:35:70: 69:15:59:24:38:12:43:68:72:6e:7e:37:18:71:be:3d:78:10: 62:e8:0e:06:88:e5:f2:1f:23:fd:e4:fc:d1:83:d2:41:1d:2b: ea:a1:c9:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4NEUxMTAvBgNVBAUTKDAzOERFMDk1RTgzRjZDQTZFNjNBNUYyMzZFN0IyMkYy RkY5OTFCQkUwHhcNMjUwOTE2MjI0NTM5WhcNMjUwOTIzMjI0NTM5WjAYMRYwFAYD VQQDEw02OGM5ZTg5My0yODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd0SCG4e92Ei0u0FiE6sCo1zwcVdxbUT1XP/OilASoDcSq5tsM5MNQWlQzdH Fi/a437eZYVe0TcIkDTHJMZxnqN12IY8cw/BgbMqv10Wa1FR0jLAME/FLo/Gu5dI m6GlRxRBADNQdeovdW9ivw8nSw/9Sj6e5ycsEUI3fbbenyRzziPksGD5mnjULOoD QmfhZKvZjka+l4ospFOlFqTXCAzvGTzDKq37nJFIVWP/foTYP6t45AiZKsq66m74 DxN/J5NAeLPuF18rNVwwqnEucovgUg/xNjD2FmVbf9DnNxcDm55bHK3afWlndMPX /SuqSbdYjVQ0DLLX0uygiWINIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1piXL4 XPtJoDM1FRnfFnRE82CUMB8GA1UdIwQYMBaAFAON4JXoP2ym5jpfI257IvL/mRu+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg0RS9CMzU4MTM2NDhF REQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JLYm1PbDhqYm5zaTh2LVpH NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0M2dsZWdfYktibU9sOGpibnNpOHYtWkc3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzg0RS9CMzU4MTM2NDhFREQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JL Ym1PbDhqYm5zaTh2LVpHNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc5zTtnndSI4YvRDjTV54dI7zEoYmIVgVAjw0z3ishYuk1zW6JQHtM H73UX2aTk0BsZnn6gVFTyJQSgg2rE36VAz5eqOInhN70g7H/DTCPTENuwkL2C3Q2 kSfgnJYGrJnOFSnRhxsgiOoO125DgFVghBnTko2z9AfeTX9LABm9mAJm3xhQRMTa o+GHE0iKesM/RYrAapyGNrGkZu5BAnPrRkPAioML/UNt8hqCN3oURFxKoRaDqd2x OBM8zKPiXzgVItJwCPhVKh0q2eJkamWX4AIfotSJNXBpFVkkOBJDaHJufjcYcb49 eBBi6A4GiOXyHyP95PzRg9JBHSvqocms -----END CERTIFICATE-----Generated at Thu Sep 18 20:26:52 2025 by rpki-client