$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft File: Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json) Hash identifier: sQX0hN6UApnuOj8HIxuWdRnBAEgA537EH42O9rboL6w= Subject key identifier: DD:B5:6C:E0:14:51:A6:1D:F5:9A:E3:23:08:9E:91:C1:3D:AA:D2:BF Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C Certificate issuer: /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft Manifest number: D9 Signing time: Wed 17 Sep 2025 06:12:43 +0000 Manifest this update: Wed 17 Sep 2025 06:12:42 +0000 Manifest next update: Wed 24 Sep 2025 06:12:42 +0000 Files and hashes: 1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: mjMh8/8R00eKjnISKOC5xGuSgslsaDsl+Ya/nLVgifs=) 2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C Validity Not Before: Sep 17 06:12:42 2025 GMT Not After : Sep 24 06:12:42 2025 GMT Subject: CN=68ca515b-b84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:8d:18:63:f7:ee:6c:66:cd:24:23:4c:99: 16:07:8a:ee:4e:a3:96:d1:99:b1:60:a6:c4:71:8d: e6:30:80:83:48:76:09:62:53:d0:ac:64:f6:8f:07: f9:cc:a7:2e:ec:a1:89:16:8f:55:1d:ba:7b:41:b0: c9:9b:ee:94:57:fb:41:1e:b9:58:86:c8:30:a1:b7: a3:0d:a4:14:8a:61:d1:1f:1e:31:8e:23:b8:e1:8a: 63:1b:a7:e7:ae:ea:3b:26:5a:e8:0a:65:47:77:b3: 53:ca:2f:e4:a8:22:bf:f1:ff:8b:0c:f0:69:21:40: 70:cf:e3:53:26:6d:6e:d6:58:49:28:b1:71:fe:d6: 04:b4:48:fa:17:21:fd:ee:c6:c3:d9:67:75:82:8f: 7d:fc:ba:d1:70:f0:d8:eb:c0:77:05:2a:c8:20:20: 18:6d:e7:39:0a:24:59:ba:2f:b3:a7:47:e6:9a:be: 2d:be:3e:84:6c:f1:37:47:c6:f7:2f:6c:12:6a:52: 83:b2:50:14:c1:0f:7e:e9:a5:fc:7b:c2:67:2e:2e: 9c:94:31:35:f2:c2:20:0c:1a:fa:f1:f3:92:7f:02: ec:9d:4a:2e:fd:a0:36:27:da:bd:c5:8c:71:78:9e: b8:22:4a:05:90:ff:e1:4a:0d:d3:86:53:df:2c:7d: 9f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B5:6C:E0:14:51:A6:1D:F5:9A:E3:23:08:9E:91:C1:3D:AA:D2:BF X509v3 Authority Key Identifier: keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c6:b1:74:f1:89:2c:ba:07:e1:59:af:4a:20:d9:61:a7:ac: 65:16:30:35:d2:4f:28:ff:da:f7:c9:11:42:68:40:1d:75:91: 3d:69:92:cf:d6:4a:d7:b5:a1:96:68:52:91:70:ac:c2:78:9e: fc:64:f9:0d:27:5e:5a:71:e9:e9:dd:7d:ae:95:5a:40:2e:99: 54:fb:30:55:80:80:59:38:95:49:3d:e4:c4:fa:e1:18:a1:7a: 3f:cb:44:67:51:65:b8:d1:b8:a8:dc:cd:e4:df:15:ea:e3:99: 3f:c0:29:29:74:fd:9b:d6:35:dd:c0:71:2e:22:8f:be:48:4d: b0:b1:4e:bc:73:07:0c:0f:17:f3:80:a9:9f:9f:48:8a:bc:94: 5b:db:61:31:9d:f2:22:ce:77:f8:87:59:cf:fc:d4:29:ea:da: fa:c6:50:6e:43:e0:a3:e8:53:1b:f9:d0:4f:6e:e4:93:30:ff: 04:83:08:76:21:ab:96:b4:b5:73:de:71:ab:3d:a8:ff:44:a7: 43:5a:77:40:e2:2e:ac:1c:34:5d:83:bd:40:35:7a:69:8b:f9: 19:e7:fe:f5:e7:c8:51:f0:b1:43:4d:66:26:37:1f:28:ea:aa: 9f:fd:5d:0d:2c:6b:73:81:1e:21:6c:86:33:44:e9:64:9c:86: b1:12:ab:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC Qjk0NzlFMkMwHhcNMjUwOTE3MDYxMjQyWhcNMjUwOTI0MDYxMjQyWjAYMRYwFAYD VQQDEw02OGNhNTE1Yi1iODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYSNGGP37mxmzSQjTJkWB4ruTqOW0ZmxYKbEcY3mMICDSHYJYlPQrGT2jwf5 zKcu7KGJFo9VHbp7QbDJm+6UV/tBHrlYhsgwobejDaQUimHRHx4xjiO44YpjG6fn ruo7JlroCmVHd7NTyi/kqCK/8f+LDPBpIUBwz+NTJm1u1lhJKLFx/tYEtEj6FyH9 7sbD2Wd1go99/LrRcPDY68B3BSrIICAYbec5CiRZui+zp0fmmr4tvj6EbPE3R8b3 L2wSalKDslAUwQ9+6aX8e8JnLi6clDE18sIgDBr68fOSfwLsnUou/aA2J9q9xYxx eJ64IkoFkP/hSg3ThlPfLH2fzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN21bOAU UaYd9ZrjIwiekcE9qtK/MB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNxrF08YksugfhWa9KINlhp6xlFjA10k8o/9r3yRFCaEAddZE9aZLP 1krXtaGWaFKRcKzCeJ78ZPkNJ15acenp3X2ulVpALplU+zBVgIBZOJVJPeTE+uEY oXo/y0RnUWW40bio3M3k3xXq45k/wCkpdP2b1jXdwHEuIo++SE2wsU68cwcMDxfz gKmfn0iKvJRb22ExnfIiznf4h1nP/NQp6tr6xlBuQ+Cj6FMb+dBPbuSTMP8Egwh2 IauWtLVz3nGrPaj/RKdDWndA4i6sHDRdg71ANXppi/kZ5/7158hR8LFDTWYmNx8o 6qqf/V0NLGtzgR4hbIYzROlknIaxEqtw -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:45 2025 by rpki-client