$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: GH1mw7Xnjj/G2Hfh1GK8OWPy0MxiIPRdRhxoiPPtSrE= Subject key identifier: CC:8E:AA:0E:02:17:17:15:F4:B8:72:79:0D:C5:4C:D0:6D:5C:95:CE Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: AA Signing time: Wed 17 Sep 2025 06:54:02 +0000 Manifest this update: Wed 17 Sep 2025 06:54:02 +0000 Manifest next update: Wed 24 Sep 2025 06:54:02 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: RMIC6vxMt0HJbCNVPg9q+kZ/wN36uc+VuELI+eXTbqc=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Sep 17 06:54:02 2025 GMT Not After : Sep 24 06:54:02 2025 GMT Subject: CN=68ca5b0a-5c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:a5:2f:03:5f:e1:df:ad:73:25:94:2d:c1: ea:7d:b4:62:53:aa:ca:b5:9e:76:83:f1:e3:4d:22: ad:c2:e6:67:db:2d:1d:ec:65:01:44:a6:43:bb:c9: 98:51:b6:de:f6:0b:09:13:21:ae:64:94:a3:72:bc: 2e:cb:0f:fe:89:16:26:fd:8f:c1:ea:61:c2:38:92: ab:a1:46:e6:25:b0:5b:4b:4c:25:6e:d4:23:b4:33: ce:01:fc:ef:11:ed:5e:20:69:91:e3:d9:86:8e:13: b0:2e:a8:a2:3b:ff:84:e6:50:26:d9:f2:f8:0e:bb: c1:a1:a9:c1:32:4c:ca:25:b4:5b:65:5b:9f:fd:97: a9:9f:61:d2:98:4e:29:f6:ba:71:6a:c0:23:27:27: 0d:69:c4:6d:07:fc:c5:f7:4f:e0:2e:c8:91:9c:dd: a1:76:25:44:1a:c8:3f:d8:ed:0f:ed:8e:d3:7c:ad: c7:bb:50:d9:83:71:8e:3e:84:86:bd:e5:ab:05:17: 3d:33:ba:be:c9:ee:70:74:91:8c:ce:5e:5a:39:db: 3c:7d:a5:43:6f:0f:59:17:09:91:9f:59:83:ae:bc: 2d:cb:6d:64:40:0d:cc:f6:59:e8:ed:28:e0:39:e5: ea:2a:20:ef:78:b7:12:79:df:e5:fa:a6:5b:17:62: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:AA:0E:02:17:17:15:F4:B8:72:79:0D:C5:4C:D0:6D:5C:95:CE X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:a0:24:ba:93:cd:bc:c3:71:c8:56:97:b2:da:e4:3f:e3: 53:47:d6:0a:59:dc:62:c2:38:8c:a4:2e:74:62:c9:f4:a6:79: 42:09:f2:5b:57:14:7b:7b:f5:f3:40:f8:7e:07:37:3b:5d:e1: 03:62:86:98:1e:47:74:0c:0b:8e:d1:72:c9:57:ff:ab:04:a3: d1:26:70:e3:7e:bc:37:78:3e:2c:49:83:fb:86:8b:35:67:01: b5:f5:11:1b:8c:45:07:e8:06:b3:c9:05:ee:40:87:76:71:a3: 48:2d:91:17:06:4b:86:36:57:e1:98:90:a9:0f:bc:e7:50:85: 55:5a:85:7d:c3:49:aa:e9:35:fb:18:3b:89:44:f4:b5:d9:cb: 19:7a:36:c2:1e:08:39:40:41:52:2f:7a:a3:b1:ba:5d:66:17: b1:6f:c5:fe:61:da:22:f0:46:c8:73:87:c6:9a:a8:4d:2c:3b: 47:e6:79:0b:6b:98:41:61:60:1e:d6:23:35:4c:04:14:8b:9b: 82:9e:ba:69:b8:ae:f9:84:b3:a2:fe:a5:9f:76:79:09:59:cd: 1d:f5:4a:46:e7:7f:cb:85:1e:58:c4:4f:ef:43:be:a7:a3:55: 3e:a0:d2:43:7e:f2:42:64:69:10:ba:66:28:e8:fe:e2:60:f9: a7:9c:14:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUwOTE3MDY1NDAyWhcNMjUwOTI0MDY1NDAyWjAYMRYwFAYD VQQDEw02OGNhNWIwYS01YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHilLwNf4d+tcyWULcHqfbRiU6rKtZ52g/HjTSKtwuZn2y0d7GUBRKZDu8mY Ubbe9gsJEyGuZJSjcrwuyw/+iRYm/Y/B6mHCOJKroUbmJbBbS0wlbtQjtDPOAfzv Ee1eIGmR49mGjhOwLqiiO/+E5lAm2fL4DrvBoanBMkzKJbRbZVuf/Zepn2HSmE4p 9rpxasAjJycNacRtB/zF90/gLsiRnN2hdiVEGsg/2O0P7Y7TfK3Hu1DZg3GOPoSG veWrBRc9M7q+ye5wdJGMzl5aOds8faVDbw9ZFwmRn1mDrrwty21kQA3M9lno7Sjg OeXqKiDveLcSed/l+qZbF2K2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyOqg4C FxcV9LhyeQ3FTNBtXJXOMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX06AkupPNvMNxyFaXstrkP+NTR9YKWdxiwjiMpC50Ysn0pnlCCfJb VxR7e/XzQPh+Bzc7XeEDYoaYHkd0DAuO0XLJV/+rBKPRJnDjfrw3eD4sSYP7hos1 ZwG19REbjEUH6AazyQXuQId2caNILZEXBkuGNlfhmJCpD7znUIVVWoV9w0mq6TX7 GDuJRPS12csZejbCHgg5QEFSL3qjsbpdZhexb8X+Ydoi8EbIc4fGmqhNLDtH5nkL a5hBYWAe1iM1TAQUi5uCnrppuK75hLOi/qWfdnkJWc0d9UpG53/LhR5YxE/vQ76n o1U+oNJDfvJCZGkQumYo6P7iYPmnnBS6 -----END CERTIFICATE-----Generated at Thu Sep 18 20:37:44 2025 by rpki-client