$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft File: 0DLgYUkj9KWCM463Y2w5aErtUe0.mft (raw, json) Hash identifier: G7DXaWdYOHw16LF+Nl69oQdjhXLA3gC03nw9qbdbWvo= Subject key identifier: 59:35:50:FA:CA:D4:18:CF:5A:52:37:D9:E8:9C:67:80:EA:E0:98:F0 Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 10A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft Manifest number: 109A Signing time: Thu 18 Sep 2025 17:30:14 +0000 Manifest this update: Thu 18 Sep 2025 17:30:13 +0000 Manifest next update: Thu 25 Sep 2025 17:30:13 +0000 Files and hashes: 1: 0DLgYUkj9KWCM463Y2w5aErtUe0.crl (hash: rrqmpwmmosWYDx6Aw99ScOj9lZAjz7j2cb72ZOoaW5w=) 2: DBC08AD4457911E9BA84DA51C4F9AE02.roa (hash: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4262 (0x10a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Sep 18 17:30:13 2025 GMT Not After : Sep 25 17:30:13 2025 GMT Subject: CN=68cc41a5-72c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:7d:09:65:0b:74:cf:ff:d2:5b:d4:f6:04: 00:b1:aa:ca:03:b9:2d:a3:06:d7:ee:73:e1:26:e8: 46:7e:ee:74:f9:c2:89:5a:6b:2f:7a:9f:5b:a2:ff: b2:06:6e:81:47:9c:ba:b1:b7:b6:53:04:5a:59:1c: 76:3a:7b:bc:49:d6:12:da:32:94:a9:97:68:bc:17: 65:28:31:6d:5e:27:6b:f4:58:6c:7a:e0:7b:66:27: 6c:a4:4c:46:09:58:03:50:6b:54:08:58:89:06:d3: ff:84:3b:58:c9:fc:bb:43:49:d9:27:48:62:b8:39: 71:28:2b:fc:ce:98:7b:2e:0d:2d:d9:41:8b:44:37: 4f:c1:0e:04:42:98:b4:b0:6a:17:7f:22:71:ff:cc: 8a:fd:63:39:c2:46:3f:47:75:55:27:13:94:90:ef: 2a:33:4e:2b:bf:84:bc:24:27:c7:fc:9c:63:94:28: 94:ee:f2:93:87:9a:c0:e0:3d:0d:29:55:56:cc:c3: e5:33:2c:9a:d5:4d:83:37:02:bd:da:bc:f7:62:02: 98:81:d3:4b:c6:6c:d7:7e:7f:4e:a8:12:52:79:f5: 52:53:ea:96:4c:3e:bb:db:39:3f:3f:5f:4f:9d:fe: 0e:3a:3e:29:56:4b:52:78:3b:2e:f4:92:79:19:0a: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:35:50:FA:CA:D4:18:CF:5A:52:37:D9:E8:9C:67:80:EA:E0:98:F0 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b0:92:de:7f:88:09:a8:ee:2f:a0:db:91:d2:2d:ac:ba:62: f0:c3:07:cc:02:f6:6b:b4:1c:84:2d:8c:0b:05:15:65:88:18: 38:56:83:74:37:a4:dc:45:45:4f:f4:80:28:c5:e7:36:5b:da: f6:bd:8c:14:f1:2d:48:9f:55:13:74:d0:5c:13:c3:a6:cb:2f: 48:b6:c8:fb:33:17:e5:1c:2a:88:4c:e5:e7:10:f2:7d:ca:eb: 48:02:6f:dc:ee:98:af:2b:24:90:a9:fe:52:e1:89:f8:62:e8: 72:ac:2e:93:e6:27:65:4d:44:b1:39:99:1a:e1:61:1c:cb:a4: a6:a2:52:e1:da:6b:e6:37:cb:43:8f:13:79:e9:0f:38:3d:9b: 45:be:8a:ed:7a:fa:b0:49:fc:53:bb:83:6b:12:ed:c1:ed:92: 56:78:18:f6:0e:fd:bd:da:4f:aa:c9:e7:b8:bb:b1:12:b6:70: 88:2e:ff:23:39:47:8e:31:ea:38:5b:0b:cc:0d:f9:9b:33:03: ab:6e:75:4b:f3:a2:f1:ab:13:93:58:27:62:8b:01:37:45:23: cc:7a:9b:9f:68:d8:bb:1c:bc:ee:c1:7c:9e:fe:25:da:f2:a1: 1a:45:92:7c:94:5d:d0:c4:26:da:40:78:85:63:24:db:53:9b: b1:fe:a4:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwOTE4MTczMDEzWhcNMjUwOTI1MTczMDEzWjAYMRYwFAYD VQQDEw02OGNjNDFhNS03MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh99CWULdM//0lvU9gQAsarKA7ktowbX7nPhJuhGfu50+cKJWmsvep9bov+y Bm6BR5y6sbe2UwRaWRx2Onu8SdYS2jKUqZdovBdlKDFtXidr9FhseuB7ZidspExG CVgDUGtUCFiJBtP/hDtYyfy7Q0nZJ0hiuDlxKCv8zph7Lg0t2UGLRDdPwQ4EQpi0 sGoXfyJx/8yK/WM5wkY/R3VVJxOUkO8qM04rv4S8JCfH/JxjlCiU7vKTh5rA4D0N KVVWzMPlMyya1U2DNwK92rz3YgKYgdNLxmzXfn9OqBJSefVSU+qWTD672zk/P19P nf4OOj4pVktSeDsu9JJ5GQrkewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk1UPrK 1BjPWlI32eicZ4Dq4JjwMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Qi82QzFBMEVGQTM2N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlL V0NNNDYzWTJ3NWFFcnRVZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEsJLef4gJqO4voNuR0i2sumLwwwfMAvZrtByELYwLBRVliBg4VoN0 N6TcRUVP9IAoxec2W9r2vYwU8S1In1UTdNBcE8Omyy9Itsj7MxflHCqITOXnEPJ9 yutIAm/c7pivKySQqf5S4Yn4YuhyrC6T5idlTUSxOZka4WEcy6SmolLh2mvmN8tD jxN56Q84PZtFvortevqwSfxTu4NrEu3B7ZJWeBj2Dv292k+qyee4u7EStnCILv8j OUeOMeo4WwvMDfmbMwOrbnVL86LxqxOTWCdiiwE3RSPMepufaNi7HLzuwXye/iXa 8qEaRZJ8lF3QxCbaQHiFYyTbU5ux/qTa -----END CERTIFICATE-----Generated at Fri Sep 19 00:46:13 2025 by rpki-client