$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: 2N654fgZefuNhSB+pwX2P/OGAMWsQtSz3+aUwJUtcBc= Subject key identifier: 56:E7:15:13:ED:08:A7:63:8C:D6:14:41:1F:02:DA:9D:D6:C9:76:9C Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01FD Signing time: Wed 17 Sep 2025 03:00:15 +0000 Manifest this update: Wed 17 Sep 2025 03:00:14 +0000 Manifest next update: Wed 24 Sep 2025 03:00:14 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: NhcQ8OqMtFpfCgF6rxhvfEYYwAFrpjGi5UG/3j9NFnk=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: w+YVCZlT+ueyv41aCuxnpcHi2Q6S5cfTHp2i5KKlTA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: Sep 17 03:00:14 2025 GMT Not After : Sep 24 03:00:14 2025 GMT Subject: CN=68ca243f-5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:76:51:9c:39:b9:2f:d3:83:46:03:32:5d: 97:53:20:7e:5f:a6:c5:8f:10:1f:ac:f7:c6:eb:ec: a8:eb:75:dc:06:f2:b5:67:24:e7:84:38:67:36:1e: 17:0b:01:66:c0:9c:a7:97:c8:a3:d6:4a:8f:56:6e: 77:7f:7f:b0:03:77:6d:e3:e4:9c:2e:15:1c:fa:0b: 66:8d:c2:b5:60:d4:fc:a8:51:e5:1f:f1:ed:ed:1f: 07:21:00:7e:bf:ef:f6:f4:33:de:1a:08:6f:cb:74: 42:d5:15:ce:ed:82:38:b4:ae:9c:23:f3:ad:e5:0e: eb:05:e8:3e:e5:1f:fb:3f:cb:b8:a7:43:58:18:6a: c0:70:54:f9:0e:f3:6f:64:89:e3:ec:94:41:1a:33: be:d1:ee:fb:f4:dc:db:6f:04:5a:d8:14:28:13:0f: 58:5c:17:a6:64:8c:40:1b:d2:fb:24:cf:aa:0c:7f: 97:80:8f:39:52:52:6b:92:91:25:b2:92:a2:33:ab: 60:df:7b:59:15:d6:6c:c7:e2:50:0a:66:e5:1b:75: 91:3d:ed:f5:47:6b:3a:11:70:77:75:79:43:ca:ea: 66:48:cb:35:c0:e1:55:2e:76:64:56:a6:47:b3:e4: 86:fd:4a:0a:1a:cc:23:1c:e4:f9:2f:95:8f:67:3c: c8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E7:15:13:ED:08:A7:63:8C:D6:14:41:1F:02:DA:9D:D6:C9:76:9C X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:8a:ae:17:7c:c4:fc:cb:14:d9:26:5f:be:0e:60:6a:88:fc: 9e:f1:34:33:31:e1:e2:7d:f5:1e:84:bc:61:c5:1d:73:8e:89: af:26:4e:dc:de:2a:c6:ee:e9:1a:6f:4c:30:ed:1e:6e:a3:3f: 38:fe:f9:4f:53:bf:f9:ca:e6:36:9e:42:d0:7b:65:f1:4c:c6: f5:de:6a:66:4c:5b:6d:05:2e:cc:92:5b:8f:ca:89:85:3c:34: 3b:63:39:40:a0:bc:0f:02:1a:e6:9f:84:53:b2:2f:30:b0:02: 80:d9:3d:45:90:6f:b6:8d:25:70:a0:b5:3e:ab:2a:94:46:aa: 59:0a:20:06:a5:bf:69:bf:73:02:f4:ea:9b:d3:db:31:88:ce: 90:aa:0a:02:60:b8:be:dd:7a:24:b8:07:a4:7f:c3:56:73:cd: 77:3f:e6:21:7e:39:c8:ee:33:00:63:df:e7:1e:f2:52:c2:db: 18:36:b6:c1:57:3b:4a:b8:c3:3d:3f:c9:41:1c:1e:c6:6e:7a: d1:09:b9:a7:18:b4:fc:de:b6:c3:bb:9a:0c:c4:9b:d5:d3:e6: 78:04:f8:10:d6:9b:7f:93:96:16:e0:eb:4c:d9:2f:0f:ce:e5: 1c:fb:dc:56:58:e1:1c:b3:40:da:a4:67:0b:c0:0b:00:de:0d: ab:ff:37:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwOTE3MDMwMDE0WhcNMjUwOTI0MDMwMDE0WjAYMRYwFAYD VQQDEw02OGNhMjQzZi01YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhR2UZw5uS/Tg0YDMl2XUyB+X6bFjxAfrPfG6+yo63XcBvK1ZyTnhDhnNh4X CwFmwJynl8ij1kqPVm53f3+wA3dt4+ScLhUc+gtmjcK1YNT8qFHlH/Ht7R8HIQB+ v+/29DPeGghvy3RC1RXO7YI4tK6cI/Ot5Q7rBeg+5R/7P8u4p0NYGGrAcFT5DvNv ZInj7JRBGjO+0e779NzbbwRa2BQoEw9YXBemZIxAG9L7JM+qDH+XgI85UlJrkpEl spKiM6tg33tZFdZsx+JQCmblG3WRPe31R2s6EXB3dXlDyupmSMs1wOFVLnZkVqZH s+SG/UoKGswjHOT5L5WPZzzILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbnFRPt CKdjjNYUQR8C2p3WyXacMB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQiq4XfMT8yxTZJl++DmBqiPye8TQzMeHiffUehLxhxR1zjomvJk7c 3irG7ukab0ww7R5uoz84/vlPU7/5yuY2nkLQe2XxTMb13mpmTFttBS7MkluPyomF PDQ7YzlAoLwPAhrmn4RTsi8wsAKA2T1FkG+2jSVwoLU+qyqURqpZCiAGpb9pv3MC 9Oqb09sxiM6QqgoCYLi+3XokuAekf8NWc813P+YhfjnI7jMAY9/nHvJSwtsYNrbB VztKuMM9P8lBHB7GbnrRCbmnGLT83rbDu5oMxJvV0+Z4BPgQ1pt/k5YW4OtM2S8P zuUc+9xWWOEcs0DapGcLwAsA3g2r/zf1 -----END CERTIFICATE-----Generated at Thu Sep 18 23:10:53 2025 by rpki-client