$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: K27M3mLu6BJtjBOP0AjpDRmcC9vFuwiTcgECvEGSgZs= Subject key identifier: DB:3D:27:A0:05:9D:58:E6:93:75:96:C7:84:34:AC:D6:8C:18:8B:C5 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 048C Signing time: Wed 17 Sep 2025 00:26:16 +0000 Manifest this update: Wed 17 Sep 2025 00:26:16 +0000 Manifest next update: Wed 24 Sep 2025 00:26:16 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: No/F2xVkEEgigu5aqhpItFVSMYtaZI8DgY2xtQhjs+s=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Sep 17 00:26:16 2025 GMT Not After : Sep 24 00:26:16 2025 GMT Subject: CN=68ca0028-a7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:13:04:76:30:26:ce:d3:d8:13:19:bb:d4:90: ba:ac:b3:f2:eb:ec:0c:87:3f:15:23:e6:3b:71:8e: fa:75:e0:37:88:59:02:57:43:12:94:b7:36:01:38: 0f:eb:72:88:de:43:20:a2:54:04:53:01:42:c5:e6: 8c:10:98:2e:25:ce:19:b8:9a:58:cd:df:6f:eb:a4: a0:59:c5:4b:fa:47:03:13:49:20:49:14:17:cb:e7: a3:27:22:77:31:c0:9c:fb:6b:13:e7:90:22:82:f0: 1b:cf:80:73:8d:45:ae:02:82:ea:08:d1:62:77:6b: 1b:cd:9e:e4:c4:7b:99:16:65:23:e5:d1:ce:36:bd: 76:17:32:ab:cb:d1:9c:a7:af:4f:6a:75:32:40:05: 60:27:2d:f5:6b:b7:14:83:46:1d:f9:ac:7f:11:9d: 32:85:0d:1a:1e:f8:6d:76:2b:1e:65:c0:ab:4c:c2: 22:37:8e:bf:e5:63:60:99:92:13:03:f9:50:9c:32: b1:11:78:d7:46:84:be:a2:b4:80:45:fc:26:33:74: 17:51:db:e8:2f:76:08:20:b5:2c:77:75:d1:12:4a: cb:75:3d:d4:37:99:d8:e3:94:29:fd:bc:73:07:fd: a6:ff:92:5d:48:d8:40:46:34:5c:3d:9b:b0:87:6a: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3D:27:A0:05:9D:58:E6:93:75:96:C7:84:34:AC:D6:8C:18:8B:C5 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:86:cf:4a:61:23:ce:8f:44:ea:58:1c:84:76:b4:d2:f6:c9: e8:24:8d:36:45:06:95:02:bf:f6:cd:b6:64:6e:1b:ae:20:a8: e1:ba:e0:3f:15:aa:cc:cc:7b:14:1f:29:9d:91:36:fd:4b:c1: a1:b9:44:23:10:92:fa:3d:3b:b6:5a:c3:ab:fb:57:7a:88:2d: 55:15:e7:82:fb:c8:0e:98:e5:91:9b:7e:80:a4:7a:6a:d7:9d: 3f:a5:c4:42:08:d5:23:d6:1a:88:52:c9:e0:20:b9:b7:d2:b4: 09:11:e8:a6:de:19:16:33:28:08:f1:3f:a5:e8:f8:53:15:29: 71:97:30:d8:9e:26:40:27:a1:6a:01:d5:b4:82:e3:a7:26:97: 2b:41:6e:f9:a7:64:4c:06:ad:cc:54:99:4d:b5:6b:e0:8d:9d: 34:69:09:85:9b:2a:d8:37:56:87:0d:ab:79:1d:76:e2:2d:f0: 49:4e:74:9e:7f:6a:e5:28:57:2c:63:c2:88:ee:44:ae:24:95: e5:f9:f4:ae:99:29:46:eb:50:5e:11:87:7c:c3:7b:74:e0:70: 95:d2:63:8f:c4:16:65:4b:25:85:7d:bd:4a:b3:7b:8e:69:1b: e2:9d:c5:bc:d7:42:9b:01:bc:a8:1c:d8:54:32:73:cc:17:39: 0b:dd:f7:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwOTE3MDAyNjE2WhcNMjUwOTI0MDAyNjE2WjAYMRYwFAYD VQQDEw02OGNhMDAyOC1hN2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9hMEdjAmztPYExm71JC6rLPy6+wMhz8VI+Y7cY76deA3iFkCV0MSlLc2ATgP 63KI3kMgolQEUwFCxeaMEJguJc4ZuJpYzd9v66SgWcVL+kcDE0kgSRQXy+ejJyJ3 McCc+2sT55AigvAbz4BzjUWuAoLqCNFid2sbzZ7kxHuZFmUj5dHONr12FzKry9Gc p69PanUyQAVgJy31a7cUg0Yd+ax/EZ0yhQ0aHvhtdiseZcCrTMIiN46/5WNgmZIT A/lQnDKxEXjXRoS+orSARfwmM3QXUdvoL3YIILUsd3XREkrLdT3UN5nY45Qp/bxz B/2m/5JdSNhARjRcPZuwh2pY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs9J6AF nVjmk3WWx4Q0rNaMGIvFMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhs9KYSPOj0TqWByEdrTS9snoJI02RQaVAr/2zbZkbhuuIKjhuuA/ FarMzHsUHymdkTb9S8GhuUQjEJL6PTu2WsOr+1d6iC1VFeeC+8gOmOWRm36ApHpq 150/pcRCCNUj1hqIUsngILm30rQJEeim3hkWMygI8T+l6PhTFSlxlzDYniZAJ6Fq AdW0guOnJpcrQW75p2RMBq3MVJlNtWvgjZ00aQmFmyrYN1aHDat5HXbiLfBJTnSe f2rlKFcsY8KI7kSuJJXl+fSumSlG61BeEYd8w3t04HCV0mOPxBZlSyWFfb1Ks3uO aRvincW810KbAbyoHNhUMnPMFzkL3feN -----END CERTIFICATE-----Generated at Thu Sep 18 23:11:06 2025 by rpki-client