$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft File: DAsd1farZExXB4GkKeRIBQIY6es.mft (raw, json) Hash identifier: 0YOejwIanOa8+6ABbPWqQhXaXAMakO1xdsAbw+dsjpQ= Subject key identifier: 76:F0:A6:AB:78:2C:0F:28:54:EB:5C:07:3A:3E:41:AF:FD:1B:BD:2C Authority key identifier: 0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB Certificate issuer: /CN=A9134C3E/serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft Manifest number: 0579 Signing time: Thu 18 Sep 2025 23:35:45 +0000 Manifest this update: Thu 18 Sep 2025 23:35:44 +0000 Manifest next update: Thu 25 Sep 2025 23:35:44 +0000 Files and hashes: 1: DAsd1farZExXB4GkKeRIBQIY6es.crl (hash: lli7Mk4XGvgyWvddGlWWzvGDQrEZS+glqt0IE6EufpA=) 2: 9222BEB4F42811EB93675638C4F9AE02.roa (hash: B73jK8rs3UShIkXEqnOr+hGZIISFb8px20z32h4py5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C3E, serialNumber=0C0B1DD5F6AB644C570781A429E448050218E9EB Validity Not Before: Sep 18 23:35:44 2025 GMT Not After : Sep 25 23:35:44 2025 GMT Subject: CN=68cc9751-5245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:ec:21:2d:35:74:4c:70:e1:41:b2:62:3f: 6f:95:00:8a:d0:59:1f:18:32:43:94:f8:51:3c:77: af:fd:6e:e5:e5:dd:85:e9:54:2d:11:9a:0c:4f:d0: 96:f3:25:41:4f:c1:75:ae:9f:f5:c2:32:9c:bc:8f: e1:94:3c:f9:c8:e4:85:2d:62:7c:61:30:81:2a:22: 26:c0:d3:62:88:f1:6a:a1:85:06:0e:7d:0f:11:85: fe:3d:36:11:a6:cf:1e:53:81:6b:6b:9c:b4:cf:2a: db:95:45:2d:c3:9b:09:7f:34:f1:bc:34:8a:d6:b7: 15:7a:96:4c:4e:78:74:18:98:df:35:ab:6c:de:4e: 54:c2:6b:ad:3f:62:80:50:66:d7:b4:b4:3a:c1:51: 79:78:c8:ce:cc:0a:67:a3:5c:6a:c0:b1:fe:5e:df: 62:6c:7c:14:5e:cb:68:f3:15:be:4c:2e:84:ee:69: 09:bc:5d:dc:15:ac:b1:a0:99:07:04:8e:06:e4:5d: f4:d6:5a:88:b8:8a:38:90:90:43:50:2d:02:25:f3: b1:92:c5:93:cf:b0:38:37:78:eb:00:28:3c:35:6e: c3:2a:bf:6f:d2:4e:a1:f0:40:26:db:13:13:0b:99: c8:40:04:11:07:f2:3d:f2:60:a3:cb:3f:7d:2e:4e: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F0:A6:AB:78:2C:0F:28:54:EB:5C:07:3A:3E:41:AF:FD:1B:BD:2C X509v3 Authority Key Identifier: keyid:0C:0B:1D:D5:F6:AB:64:4C:57:07:81:A4:29:E4:48:05:02:18:E9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAsd1farZExXB4GkKeRIBQIY6es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C3E/A807C1C8F42511EBBDE87E34C4F9AE02/DAsd1farZExXB4GkKeRIBQIY6es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:68:24:d7:6f:6b:91:53:a5:75:83:81:b0:45:5a:11:04:0b: a6:0e:19:bc:bf:37:8b:a0:53:be:91:c5:ba:61:91:41:5d:ea: 00:6d:4b:ac:b8:40:29:96:20:71:76:9a:34:7a:d3:36:e8:83: 14:bf:d0:e3:e5:85:f3:8b:68:ca:bb:a7:f5:5c:c6:13:01:d4: d1:61:62:ff:b8:cd:5a:07:0d:29:e5:b4:67:9c:8f:34:fb:dc: da:b9:0e:ad:5b:47:d5:6d:c1:cf:38:59:a2:ca:75:b8:cd:c0: d6:90:a1:37:b0:d5:3d:72:05:3c:e7:30:0d:31:b8:37:dd:ac: 7b:80:45:47:6e:64:43:10:2a:ed:48:34:40:a6:9c:f2:e1:24: 22:09:21:e2:60:92:d7:05:15:c3:8f:21:f5:11:39:1b:0e:59: bf:cf:a8:3f:0b:b2:93:c9:ce:95:f9:26:df:e7:7b:1c:1b:f7: d6:30:6a:ee:23:d8:27:8c:8a:7b:e6:5e:d8:05:12:d2:14:d0: 64:cb:42:30:24:51:a8:46:b6:90:dd:6d:24:bc:c0:7b:e1:cc: 93:23:86:56:9b:39:e0:a9:81:43:f0:de:1a:4a:ed:cc:ba:2c: 1e:40:56:c4:08:7b:71:7d:35:f5:f7:de:6f:fd:8d:4e:56:fe: f6:57:8c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDM0UxMTAvBgNVBAUTKDBDMEIxREQ1RjZBQjY0NEM1NzA3ODFBNDI5RTQ0ODA1 MDIxOEU5RUIwHhcNMjUwOTE4MjMzNTQ0WhcNMjUwOTI1MjMzNTQ0WjAYMRYwFAYD VQQDEw02OGNjOTc1MS01MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb/sIS01dExw4UGyYj9vlQCK0FkfGDJDlPhRPHev/W7l5d2F6VQtEZoMT9CW 8yVBT8F1rp/1wjKcvI/hlDz5yOSFLWJ8YTCBKiImwNNiiPFqoYUGDn0PEYX+PTYR ps8eU4Fra5y0zyrblUUtw5sJfzTxvDSK1rcVepZMTnh0GJjfNats3k5UwmutP2KA UGbXtLQ6wVF5eMjOzApno1xqwLH+Xt9ibHwUXsto8xW+TC6E7mkJvF3cFayxoJkH BI4G5F301lqIuIo4kJBDUC0CJfOxksWTz7A4N3jrACg8NW7DKr9v0k6h8EAm2xMT C5nIQAQRB/I98mCjyz99Lk7qTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbwpqt4 LA8oVOtcBzo+Qa/9G70sMB8GA1UdIwQYMBaAFAwLHdX2q2RMVweBpCnkSAUCGOnr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEMzRS9BODA3QzFDOEY0 MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpFeFhCNEdrS2VSSUJRSVk2 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBc2QxZmFyWkV4WEI0R2tLZVJJQlFJWTZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEMzRS9BODA3QzFDOEY0MjUxMUVCQkRFODdFMzRDNEY5QUUwMi9EQXNkMWZhclpF eFhCNEdrS2VSSUJRSVk2ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQaCTXb2uRU6V1g4GwRVoRBAumDhm8vzeLoFO+kcW6YZFBXeoAbUus uEApliBxdpo0etM26IMUv9Dj5YXzi2jKu6f1XMYTAdTRYWL/uM1aBw0p5bRnnI80 +9zauQ6tW0fVbcHPOFmiynW4zcDWkKE3sNU9cgU85zANMbg33ax7gEVHbmRDECrt SDRAppzy4SQiCSHiYJLXBRXDjyH1ETkbDlm/z6g/C7KTyc6V+Sbf53scG/fWMGru I9gnjIp75l7YBRLSFNBky0IwJFGoRraQ3W0kvMB74cyTI4ZWmzngqYFD8N4aSu3M uiweQFbECHtxfTX1995v/Y1OVv72V4zf -----END CERTIFICATE-----Generated at Fri Sep 19 03:44:55 2025 by rpki-client