$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: o0kXGf/OOqVg1XDvaHo0ncQQQXGEvHMtEMC7FaKb5XA= Subject key identifier: 54:27:EB:A2:4A:F5:6A:15:FB:4C:F4:15:E0:F3:EF:7E:15:37:60:FD Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 42 Signing time: Wed 17 Sep 2025 08:10:12 +0000 Manifest this update: Wed 17 Sep 2025 08:10:11 +0000 Manifest next update: Wed 24 Sep 2025 08:10:11 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: bAFhAdO+PUuAtpCzETN79MXfNVWd+2bTsq0eqFOTxX0=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Sep 17 08:10:11 2025 GMT Not After : Sep 24 08:10:11 2025 GMT Subject: CN=68ca6ce3-fecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:4d:93:4d:49:08:69:45:b7:0d:a9:10:0e: ba:01:f7:0a:7d:c0:d6:0f:c8:69:f5:dc:8e:3e:83: 70:02:38:d6:b0:54:ad:b3:91:9c:3e:8e:16:66:52: aa:4f:85:bf:9f:f2:e3:82:74:0b:f0:31:4e:61:a6: fa:35:de:fa:7b:dd:f1:6c:92:f1:f2:3c:a3:80:69: 28:d6:55:08:1c:7c:01:2d:92:b5:93:b5:fe:bb:73: 0e:4d:b7:f5:58:d7:f4:17:42:79:87:61:e1:5c:47: 2a:f8:78:c1:af:97:45:f6:bb:cb:89:e3:24:a1:51: 02:65:23:62:89:b4:d5:52:7d:eb:65:5a:c5:93:da: 29:14:92:ee:61:14:07:47:2a:a6:28:d2:80:fe:a1: 31:e0:a1:fd:2b:a9:87:7d:df:12:54:4f:19:db:65: f8:04:21:37:02:fa:2a:35:5b:53:bf:d5:bf:9c:13: 6c:2e:52:60:dc:0a:e6:0c:be:58:f2:83:c7:dc:a9: a1:77:ac:7a:17:97:2a:d7:6e:19:98:3f:d5:c2:4f: c0:f1:9e:d0:57:55:f1:81:c5:c0:9a:b0:c4:6e:26: 4b:f8:34:87:ed:74:fb:10:21:a9:3a:b0:17:57:46: b9:44:e4:f2:1a:0d:40:6b:54:86:a6:a8:49:73:cc: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:EB:A2:4A:F5:6A:15:FB:4C:F4:15:E0:F3:EF:7E:15:37:60:FD X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d7:e4:ac:7b:c4:e0:95:68:9d:6d:5f:ed:ec:06:7b:81:69: 20:6b:58:3b:fe:22:b8:b4:53:20:44:eb:32:12:ff:96:84:f2: 5e:45:b5:ee:78:fe:3a:04:d4:19:b4:de:0e:17:d9:bf:c7:e4: 5b:0f:26:e4:d0:cd:48:e0:50:ff:e3:94:7b:f0:39:ea:c5:77: 14:29:aa:3f:d5:16:93:e1:41:de:37:c2:97:8f:fa:16:9f:46: 0d:70:05:bb:9c:9e:78:cd:f8:f1:10:4f:b6:81:99:66:74:30: 93:3f:47:2c:fb:18:72:ad:1f:81:9d:12:f1:ef:62:e1:06:e6: da:a7:50:69:25:3c:ba:b4:b1:18:4a:ff:7a:fe:98:8b:f7:bf: ad:7a:c1:6b:33:e5:36:7e:22:75:ce:53:d3:94:94:00:62:64: 41:3b:23:cd:2d:4c:ce:70:fa:2d:b9:29:93:3b:b4:b5:2a:65: 7e:e7:55:37:ec:cc:81:fe:45:eb:3c:7f:f1:17:fc:1f:a0:ea: 7b:7f:12:1e:78:d6:09:6a:e8:db:dc:c2:74:93:2f:83:90:cb: 23:75:1c:44:52:e1:34:5c:0d:70:a8:4a:85:88:88:5b:64:27: ae:07:78:32:a9:23:16:43:d6:ea:ac:9d:32:dc:47:2b:7f:1d: bc:d2:3a:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTA5MTcwODEwMTFaFw0yNTA5MjQwODEwMTFaMBgxFjAUBgNV BAMTDTY4Y2E2Y2UzLWZlY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfBE2TTUkIaUW3DakQDroB9wp9wNYPyGn13I4+g3ACONawVK2zkZw+jhZmUqpP hb+f8uOCdAvwMU5hpvo13vp73fFskvHyPKOAaSjWVQgcfAEtkrWTtf67cw5Nt/VY 1/QXQnmHYeFcRyr4eMGvl0X2u8uJ4yShUQJlI2KJtNVSfetlWsWT2ikUku5hFAdH KqYo0oD+oTHgof0rqYd93xJUTxnbZfgEITcC+io1W1O/1b+cE2wuUmDcCuYMvljy g8fcqaF3rHoXlyrXbhmYP9XCT8DxntBXVfGBxcCasMRuJkv4NIftdPsQIak6sBdX RrlE5PIaDUBrVIamqElzzD65AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVCfrokr1 ahX7TPQV4PPvfhU3YP0wHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAADX5Kx7xOCVaJ1tX+3sBnuBaSBrWDv+Iri0UyBE6zIS/5aE8l5Fte54 /joE1Bm03g4X2b/H5FsPJuTQzUjgUP/jlHvwOerFdxQpqj/VFpPhQd43wpeP+haf Rg1wBbucnnjN+PEQT7aBmWZ0MJM/Ryz7GHKtH4GdEvHvYuEG5tqnUGklPLq0sRhK /3r+mIv3v616wWsz5TZ+InXOU9OUlABiZEE7I80tTM5w+i25KZM7tLUqZX7nVTfs zIH+Res8f/EX/B+g6nt/Eh541glq6NvcwnSTL4OQyyN1HERS4TRcDXCoSoWIiFtk J64HeDKpIxZD1uqsnTLcRyt/HbzSOgA= -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:46 2025 by rpki-client