$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: kr8VGaFamx/rqlwQgWTvS8aH6Eu+wsYpICdssycPu58= Subject key identifier: CE:74:BC:6A:00:04:44:10:4F:58:51:2C:0B:04:ED:B5:E1:2A:D2:53 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: E4 Signing time: Fri 19 Sep 2025 06:01:11 +0000 Manifest this update: Fri 19 Sep 2025 06:01:10 +0000 Manifest next update: Fri 26 Sep 2025 06:01:10 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: +kpua3rotDJIRA9bwTPKWEDLPhY4yqJ0O3c6S7RHovg=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Sep 19 06:01:10 2025 GMT Not After : Sep 26 06:01:10 2025 GMT Subject: CN=68ccf1a7-c7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:e1:bc:ce:b4:1c:b7:6c:b9:a1:9b:47:fa: b2:47:23:58:c0:f9:b3:fb:aa:27:0f:23:fd:c1:bc: 17:84:6e:2f:0b:42:31:51:67:d8:b0:8a:d7:d8:26: 12:a0:2d:35:57:fd:49:2d:76:27:df:51:4c:6e:89: 21:9e:76:73:5d:41:73:a7:30:77:59:ed:7c:09:a6: 04:0a:8e:7d:25:cc:44:7d:08:2d:3c:b8:07:d5:a5: 8a:2d:81:bf:46:a7:b1:8e:94:de:f3:3f:ff:da:4d: 31:a9:57:a3:c5:f9:cc:ac:e6:86:00:99:24:f7:8f: 30:1d:ca:9f:2b:9e:d5:58:1a:ff:a9:8b:e8:e0:bf: ae:0f:69:69:7e:1d:ce:2e:71:69:c5:9f:67:0a:7a: 60:16:6d:a3:da:70:79:83:52:c2:15:b3:2b:73:07: 79:87:17:44:95:d4:01:86:6f:02:b1:a6:27:16:25: 5a:f1:e6:b3:6b:d3:40:4f:ce:d3:00:f8:87:33:f0: c2:11:de:ea:10:3c:b6:b1:bf:ec:32:58:bc:f4:1b: 46:b6:b7:65:41:f7:bd:04:ec:f8:57:f5:fe:8f:6d: e6:63:10:cd:3f:97:1c:56:bd:68:89:41:a8:f3:ea: 17:06:ff:a9:fd:86:b6:2a:b6:5f:09:0c:59:8d:f3: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:74:BC:6A:00:04:44:10:4F:58:51:2C:0B:04:ED:B5:E1:2A:D2:53 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:47:92:c3:0d:9e:84:4e:6f:dd:0c:70:6e:95:7b:c9:40:63: 7c:a0:05:2c:f6:ad:37:43:94:14:6c:85:cf:c3:01:dd:14:49: 98:80:7c:86:65:47:37:a3:6d:68:c4:33:14:40:47:83:4b:98: 4a:34:f6:6c:a3:b9:0c:f7:50:b0:14:10:9e:8b:68:82:ea:11: 2f:5f:40:99:48:d5:14:4e:ab:42:c6:d2:88:7c:c6:40:11:4c: d0:14:56:85:43:ac:0c:b6:33:95:0f:0a:a3:16:6c:6c:58:42: d6:77:22:58:d2:c8:44:70:95:65:44:6d:4b:c4:e2:30:1f:ca: f9:3f:6a:1d:ba:08:d9:c4:73:e4:05:16:83:b5:6f:f3:5f:5a: f5:4f:85:99:32:b0:d0:24:e6:82:f6:b2:ad:71:c8:91:ff:6c: 13:df:9b:d0:d8:4c:d0:12:37:d9:28:8b:b4:39:01:62:a6:3c: 02:99:58:19:6d:cf:94:8f:e4:4a:d5:84:22:f2:99:b7:9b:ba: f1:62:c9:ea:b4:75:95:5e:41:44:b0:17:af:a5:6f:b5:d9:2a: 90:5b:02:57:b8:e9:89:6a:04:ae:e6:b7:f3:6e:5f:bd:05:86: 23:2c:a9:51:b6:a6:6e:dc:18:34:9b:17:68:47:eb:41:13:2c: e1:7c:ea:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwOTE5MDYwMTEwWhcNMjUwOTI2MDYwMTEwWjAYMRYwFAYD VQQDEw02OGNjZjFhNy1jN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBLhvM60HLdsuaGbR/qyRyNYwPmz+6onDyP9wbwXhG4vC0IxUWfYsIrX2CYS oC01V/1JLXYn31FMbokhnnZzXUFzpzB3We18CaYECo59JcxEfQgtPLgH1aWKLYG/ RqexjpTe8z//2k0xqVejxfnMrOaGAJkk948wHcqfK57VWBr/qYvo4L+uD2lpfh3O LnFpxZ9nCnpgFm2j2nB5g1LCFbMrcwd5hxdEldQBhm8CsaYnFiVa8eaza9NAT87T APiHM/DCEd7qEDy2sb/sMli89BtGtrdlQfe9BOz4V/X+j23mYxDNP5ccVr1oiUGo 8+oXBv+p/Ya2KrZfCQxZjfM9GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM50vGoA BEQQT1hRLAsE7bXhKtJTMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbR5LDDZ6ETm/dDHBulXvJQGN8oAUs9q03Q5QUbIXPwwHdFEmYgHyG ZUc3o21oxDMUQEeDS5hKNPZso7kM91CwFBCei2iC6hEvX0CZSNUUTqtCxtKIfMZA EUzQFFaFQ6wMtjOVDwqjFmxsWELWdyJY0shEcJVlRG1LxOIwH8r5P2odugjZxHPk BRaDtW/zX1r1T4WZMrDQJOaC9rKtcciR/2wT35vQ2EzQEjfZKIu0OQFipjwCmVgZ bc+Uj+RK1YQi8pm3m7rxYsnqtHWVXkFEsBevpW+12SqQWwJXuOmJagSu5rfzbl+9 BYYjLKlRtqZu3Bg0mxdoR+tBEyzhfOoP -----END CERTIFICATE-----Generated at Sat Sep 20 04:19:20 2025 by rpki-client