$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: TuewoY40lN0tXaLwlK9+yyTpDfuRYZ5ZRqBye3gjV0g= Subject key identifier: 62:CD:B3:E3:74:60:D1:C3:41:97:31:CA:D1:13:B2:79:EB:94:B6:4C Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 05FC Signing time: Thu 18 Sep 2025 23:12:34 +0000 Manifest this update: Thu 18 Sep 2025 23:12:33 +0000 Manifest next update: Thu 25 Sep 2025 23:12:33 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: nR+qzqoi4f2bPYJ9qyOf36YxRI3Uje1PoZNB0fAp0lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: Sep 18 23:12:33 2025 GMT Not After : Sep 25 23:12:33 2025 GMT Subject: CN=68cc91e1-15e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:84:fb:0f:0c:cd:24:61:71:8c:72:3f:aa: e2:17:3c:04:5c:6a:aa:02:46:a0:55:9e:6c:e7:da: 7b:e3:16:37:83:77:92:06:79:04:ca:84:eb:a2:02: f0:bc:35:53:d2:41:a6:40:42:97:b2:1b:2f:b0:ab: 41:c8:23:39:4c:16:e1:22:e1:d1:65:c7:82:cf:1b: 1b:6c:d5:23:9b:e8:c6:9e:1c:2a:65:79:41:8f:c0: a3:5c:18:8f:fb:d4:3c:8a:d9:1d:99:5f:41:06:c5: 3f:f7:54:17:df:28:d7:8a:50:c1:a2:14:e2:60:52: 9c:ed:ca:78:ad:7f:b0:32:3d:c9:3f:23:41:66:e7: 4a:c3:e0:b2:e5:ae:29:33:24:0f:65:fc:0a:55:e7: cd:e4:5a:0f:b2:15:7c:02:3f:7a:ca:e7:0c:6b:37: 27:2d:f6:6a:82:38:a6:3d:f0:f7:c6:bc:e8:e6:af: 9e:de:fa:46:05:dd:25:f5:1b:36:72:19:95:25:65: 08:5b:e3:4a:2d:b3:00:25:0a:68:f8:e9:83:88:d0: 87:89:c6:c9:67:ab:a4:b5:52:6d:18:27:84:17:40: 1e:c5:8f:cd:57:2a:55:c8:8c:01:8b:6b:40:09:c7: 9f:79:a1:a8:d6:e3:d4:d6:99:c5:2e:21:0b:c6:bd: 37:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CD:B3:E3:74:60:D1:C3:41:97:31:CA:D1:13:B2:79:EB:94:B6:4C X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b7:d7:14:70:5d:5c:dd:62:0f:2f:89:c8:73:c0:fc:b5:60: 2b:81:94:ff:a8:f3:51:e9:a9:64:7f:2d:f5:ff:39:7a:ce:3a: 28:0b:4b:73:22:4c:84:a1:68:0c:b5:55:b8:26:fd:d5:83:ed: 4a:91:fe:11:4e:01:d2:58:cd:52:83:bb:a5:69:f7:6a:eb:e2: dc:ec:34:04:8b:ea:0c:9d:41:09:db:a2:98:c2:3d:39:c6:77: 66:98:23:5e:28:a5:a0:6d:2c:87:e6:30:4c:31:64:38:ed:21: b8:31:37:65:3f:43:33:f3:b9:37:f5:12:21:5d:26:63:e0:43: 23:73:2f:e4:fa:34:f3:36:6f:02:29:07:50:b7:86:10:44:bb: 45:57:01:68:35:2f:65:48:0b:14:f7:67:4a:cb:0e:90:97:41: 4e:a2:57:9a:9e:c7:3d:39:0c:1c:da:51:cc:9e:18:93:d8:e0: e9:6a:9a:c7:32:89:62:6a:b6:b7:b0:03:25:3c:6f:bc:0d:40: 86:a6:da:1b:bc:fa:d6:cc:db:da:1c:cc:01:8c:0c:94:27:21: f5:07:fc:d1:76:68:ea:e9:6e:20:6d:7c:da:f6:60:a2:10:8d: 0d:3f:e2:82:91:7b:b1:3d:ac:4f:e6:e1:55:84:f4:24:af:be: 8f:09:23:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUwOTE4MjMxMjMzWhcNMjUwOTI1MjMxMjMzWjAYMRYwFAYD VQQDEw02OGNjOTFlMS0xNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdmE+w8MzSRhcYxyP6riFzwEXGqqAkagVZ5s59p74xY3g3eSBnkEyoTrogLw vDVT0kGmQEKXshsvsKtByCM5TBbhIuHRZceCzxsbbNUjm+jGnhwqZXlBj8CjXBiP +9Q8itkdmV9BBsU/91QX3yjXilDBohTiYFKc7cp4rX+wMj3JPyNBZudKw+Cy5a4p MyQPZfwKVefN5FoPshV8Aj96yucMazcnLfZqgjimPfD3xrzo5q+e3vpGBd0l9Rs2 chmVJWUIW+NKLbMAJQpo+OmDiNCHicbJZ6uktVJtGCeEF0AexY/NVypVyIwBi2tA CcefeaGo1uPU1pnFLiELxr03eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLNs+N0 YNHDQZcxytETsnnrlLZMMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKt9cUcF1c3WIPL4nIc8D8tWArgZT/qPNR6alkfy31/zl6zjooC0tz IkyEoWgMtVW4Jv3Vg+1Kkf4RTgHSWM1Sg7ulafdq6+Lc7DQEi+oMnUEJ26KYwj05 xndmmCNeKKWgbSyH5jBMMWQ47SG4MTdlP0Mz87k39RIhXSZj4EMjcy/k+jTzNm8C KQdQt4YQRLtFVwFoNS9lSAsU92dKyw6Ql0FOoleansc9OQwc2lHMnhiT2ODpaprH Moliara3sAMlPG+8DUCGptobvPrWzNvaHMwBjAyUJyH1B/zRdmjq6W4gbXza9mCi EI0NP+KCkXuxPaxP5uFVhPQkr76PCSOA -----END CERTIFICATE-----Generated at Fri Sep 19 12:40:39 2025 by rpki-client