$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: qtvaoUaGjxq6CB6wxXjGyG4GHID1sEg0jvPXjePNztc= Subject key identifier: 05:9C:35:E3:AE:00:47:DB:04:2D:98:BF:50:04:16:72:E5:27:E4:D9 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 4B Signing time: Wed 17 Sep 2025 08:05:21 +0000 Manifest this update: Wed 17 Sep 2025 08:05:21 +0000 Manifest next update: Wed 24 Sep 2025 08:05:21 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: ILuQoXB0eO+SLl8kl6xs/+MhJ5E8wUWCEtbm6qRReNc=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Sep 17 08:05:21 2025 GMT Not After : Sep 24 08:05:21 2025 GMT Subject: CN=68ca6bc1-0fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:c9:b9:50:73:0c:69:25:67:2a:7b:ba:28: 44:47:00:e7:ca:2d:19:eb:a7:58:8b:ca:98:08:c9: 22:b6:c8:fe:af:b0:97:0f:8b:91:17:48:6a:15:8b: 50:df:54:be:56:e5:c2:0d:49:bf:b5:2f:80:27:24: 51:7d:4c:69:e8:da:50:6e:56:47:99:e8:7b:67:14: 4d:02:c8:e4:76:4d:3e:e0:f4:c4:0b:51:ba:46:d6: c6:97:15:c8:d5:ec:11:ea:96:51:3e:b0:cc:ff:d0: 4a:0d:12:83:5e:df:23:74:0b:1d:1a:9f:9a:cb:df: 26:61:f7:3c:02:66:66:11:83:9a:ae:7e:86:db:1d: 0d:a7:c8:51:0d:05:1e:4b:5c:78:a4:30:a5:0f:8c: 31:35:64:fb:ec:18:39:7f:63:40:05:19:3a:8e:25: b8:3c:46:cd:db:49:6c:53:87:f2:36:a3:45:18:fc: e1:82:97:4f:40:46:4c:cf:1a:a0:33:e4:4f:1b:1a: 7d:41:eb:59:88:c7:12:ce:78:46:19:b8:54:a9:d9: 17:73:b4:0d:6b:59:fe:eb:1d:22:70:ac:52:57:bd: 2e:45:6d:b1:3b:06:f0:3d:61:7b:6c:af:a4:af:19: c7:cc:45:74:57:66:e8:bd:a8:ca:6d:02:71:b1:1b: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9C:35:E3:AE:00:47:DB:04:2D:98:BF:50:04:16:72:E5:27:E4:D9 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:fc:22:ce:02:5b:db:cc:59:78:c7:15:22:2d:98:aa:c3: ef:fb:c9:6d:9e:ed:9b:c7:05:9f:a7:b1:13:e0:47:e3:90:fe: 28:85:34:0f:4a:e4:53:be:ea:1b:b3:a1:28:03:9b:e1:7d:e8: 4c:2b:8a:c1:8f:1e:c6:1c:7d:54:cc:bf:73:93:1a:e4:16:a3: cf:b7:6c:c7:91:17:7d:10:ad:d6:13:f1:d8:58:bd:bc:a4:75: eb:d7:a1:44:91:2a:93:7d:5f:ce:87:31:7e:a6:65:f5:e1:36: a4:d2:b6:d8:5f:2d:ad:22:12:ad:26:91:1f:0f:4b:36:e2:c2: 60:b7:b9:05:4e:11:e5:ba:81:69:63:b4:f3:f2:31:86:c5:a2: c0:57:7e:f7:2b:3d:20:84:a5:9e:a2:49:e4:4f:da:84:bb:ca: a7:de:e0:51:e7:64:29:ac:dc:55:c4:3e:d0:65:42:b5:49:d9: e0:3a:14:7c:c8:3a:b9:7d:34:cf:1d:bc:d8:2b:64:89:03:2b: 0b:59:1c:d1:02:5f:55:fc:d8:ba:a5:ab:7f:1f:37:94:45:43: 91:4c:46:12:44:9d:73:ab:2e:3d:39:e4:25:86:9b:dd:1d:5d: 58:de:25:9a:d7:fb:ca:d0:5e:af:43:b6:13:dd:67:06:8d:a8: dd:23:17:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA5MTcwODA1MjFaFw0yNTA5MjQwODA1MjFaMBgxFjAUBgNV BAMTDTY4Y2E2YmMxLTBmZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzX8m5UHMMaSVnKnu6KERHAOfKLRnrp1iLypgIySK2yP6vsJcPi5EXSGoVi1Df VL5W5cINSb+1L4AnJFF9TGno2lBuVkeZ6HtnFE0CyOR2TT7g9MQLUbpG1saXFcjV 7BHqllE+sMz/0EoNEoNe3yN0Cx0an5rL3yZh9zwCZmYRg5qufobbHQ2nyFENBR5L XHikMKUPjDE1ZPvsGDl/Y0AFGTqOJbg8Rs3bSWxTh/I2o0UY/OGCl09ARkzPGqAz 5E8bGn1B61mIxxLOeEYZuFSp2RdztA1rWf7rHSJwrFJXvS5FbbE7BvA9YXtsr6Sv GcfMRXRXZui9qMptAnGxG2GDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBZw1464A R9sELZi/UAQWcuUn5NkwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFuR/CLOAlvbzFl4xxUiLZiqw+/7yW2e7ZvHBZ+nsRPgR+OQ/iiFNA9K 5FO+6huzoSgDm+F96EwrisGPHsYcfVTMv3OTGuQWo8+3bMeRF30QrdYT8dhYvbyk devXoUSRKpN9X86HMX6mZfXhNqTStthfLa0iEq0mkR8PSzbiwmC3uQVOEeW6gWlj tPPyMYbFosBXfvcrPSCEpZ6iSeRP2oS7yqfe4FHnZCms3FXEPtBlQrVJ2eA6FHzI Orl9NM8dvNgrZIkDKwtZHNECX1X82Lqlq38fN5RFQ5FMRhJEnXOrLj055CWGm90d XVjeJZrX+8rQXq9DthPdZwaNqN0jFwk= -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:45 2025 by rpki-client