$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: GnjeW4BeKYtuXblV0NI5+S8oIS/oUsAQXWIrOJGbUq8= Subject key identifier: 53:1F:58:67:CE:1D:86:10:B9:7F:14:3D:11:87:DE:4C:84:CA:D9:C2 Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 0560 Signing time: Thu 18 Sep 2025 23:43:08 +0000 Manifest this update: Thu 18 Sep 2025 23:43:07 +0000 Manifest next update: Thu 25 Sep 2025 23:43:07 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: wkVbhDYLr5XieZ+mgXLbX/LjCuBpFrUBusS2yAK6mBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5, serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Sep 18 23:43:07 2025 GMT Not After : Sep 25 23:43:07 2025 GMT Subject: CN=68cc990b-56bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:8d:74:90:a6:75:81:55:2e:06:2a:38:4c: 10:4f:ce:cc:ac:a9:64:67:97:de:9f:b5:2c:4f:ab: 81:91:1e:59:6e:a0:ea:46:67:8d:ea:92:f5:33:5f: 61:1d:bf:e4:dd:be:fa:b7:c6:4c:df:ce:69:c5:44: ef:8d:4f:d1:75:55:48:60:8c:23:40:3e:1e:9d:a1: ae:66:26:9b:6c:43:5b:7b:64:12:44:f1:03:c0:c2: 37:af:64:43:83:ad:3f:94:b8:4a:b2:8a:d8:8f:f6: 0f:e2:45:72:1c:47:e9:44:73:ba:07:ac:86:e0:17: b8:5a:10:07:1c:ca:b4:80:3a:e4:bd:d4:b8:92:b8: 27:f6:94:1a:43:d0:94:d0:96:5a:cb:7b:04:43:c8: c8:33:e7:25:87:06:16:d9:5b:17:30:f3:31:6a:4f: e0:c5:b4:c7:8a:56:ac:d8:54:39:4e:bf:bd:fd:7a: 49:00:9a:b6:24:1c:6e:a3:93:85:d8:45:a5:da:d2: 46:b6:db:1e:04:bf:cd:df:90:2d:fa:c7:01:87:18: b7:32:fe:be:49:c8:ae:03:b2:69:57:ab:e9:79:e9: 2b:57:58:24:29:65:b6:65:d6:6c:60:30:9a:fc:d5: fa:1a:72:75:09:65:9b:f8:35:08:3d:bd:24:c6:ec: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1F:58:67:CE:1D:86:10:B9:7F:14:3D:11:87:DE:4C:84:CA:D9:C2 X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f2:93:87:d8:99:49:9f:59:55:a0:0e:22:52:64:2e:ae:98: f6:23:bf:37:21:ae:19:ff:e0:dd:9f:d3:50:a8:12:2c:16:4b: e1:ea:14:c6:b1:21:20:4b:2f:6d:b6:55:45:0b:29:d7:0a:a5: 2b:fc:e9:e4:bc:d2:4d:e1:22:89:04:ae:61:b9:8e:ed:b3:4f: 7e:62:64:93:79:41:e5:a9:70:1a:5d:f8:ab:e5:c3:05:38:bd: 76:ae:03:e0:99:9c:0b:de:c6:22:ad:29:ac:98:42:1d:f1:ff: 71:33:f8:f2:a3:29:71:12:47:69:a9:df:26:a9:8b:2b:0d:4a: 8f:d7:3a:5d:a1:41:70:fc:67:f5:13:c7:3a:86:c4:97:1e:c5: f0:29:9b:41:ae:21:cf:55:fb:11:5c:58:cc:14:04:04:b4:fa: 70:28:25:01:5c:51:ba:bc:02:6c:a5:fc:55:5b:52:41:c5:8a: 26:43:f6:cc:d0:e5:8d:66:2a:da:f6:24:d4:40:82:57:0e:3b: 2a:24:73:fb:24:9c:0e:86:dd:4d:78:6c:46:13:bd:ef:64:65: 3e:c4:49:7d:cf:61:fd:2d:20:e4:e8:e0:8d:54:cf:95:4e:b4: a5:67:83:6c:98:19:47:5f:ea:74:83:9a:8e:a7:00:1d:de:ff: 78:30:0f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjUwOTE4MjM0MzA3WhcNMjUwOTI1MjM0MzA3WjAYMRYwFAYD VQQDEw02OGNjOTkwYi01NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoCNdJCmdYFVLgYqOEwQT87MrKlkZ5fen7UsT6uBkR5ZbqDqRmeN6pL1M19h Hb/k3b76t8ZM385pxUTvjU/RdVVIYIwjQD4enaGuZiabbENbe2QSRPEDwMI3r2RD g60/lLhKsorYj/YP4kVyHEfpRHO6B6yG4Be4WhAHHMq0gDrkvdS4krgn9pQaQ9CU 0JZay3sEQ8jIM+clhwYW2VsXMPMxak/gxbTHilas2FQ5Tr+9/XpJAJq2JBxuo5OF 2EWl2tJGttseBL/N35At+scBhxi3Mv6+SciuA7JpV6vpeekrV1gkKWW2ZdZsYDCa /NX6GnJ1CWWb+DUIPb0kxuyeWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMfWGfO HYYQuX8UPRGH3kyEytnCMB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt8pOH2JlJn1lVoA4iUmQurpj2I783Ia4Z/+Ddn9NQqBIsFkvh6hTG sSEgSy9ttlVFCynXCqUr/OnkvNJN4SKJBK5huY7ts09+YmSTeUHlqXAaXfir5cMF OL12rgPgmZwL3sYirSmsmEId8f9xM/jyoylxEkdpqd8mqYsrDUqP1zpdoUFw/Gf1 E8c6hsSXHsXwKZtBriHPVfsRXFjMFAQEtPpwKCUBXFG6vAJspfxVW1JBxYomQ/bM 0OWNZira9iTUQIJXDjsqJHP7JJwOht1NeGxGE73vZGU+xEl9z2H9LSDk6OCNVM+V TrSlZ4NsmBlHX+p0g5qOpwAd3v94MA+N -----END CERTIFICATE-----Generated at Fri Sep 19 02:24:37 2025 by rpki-client