$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: SeXqjH6Q9lbZUkJyBsRGOpsso08x+JdfFv1Bs6QaFhI= Subject key identifier: 31:96:06:C6:16:09:98:18:AC:6E:15:A9:E1:0F:CE:CD:FF:99:A9:B7 Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: 019D Signing time: Sat 06 Sep 2025 15:13:19 +0000 Manifest this update: Sat 06 Sep 2025 15:13:18 +0000 Manifest next update: Sat 13 Sep 2025 15:13:18 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: sGRqNXU6stYaz2lDj/tgC3HiJnXVj9x/PLu5SuXzS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: Sep 6 15:13:18 2025 GMT Not After : Sep 13 15:13:18 2025 GMT Subject: CN=68bc4f8e-7966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:13:55:5f:54:76:d3:bf:01:c2:0d:b2:6a: 11:ad:0b:b1:39:19:72:6f:f4:a6:be:68:14:66:fd: 72:83:46:0b:5b:1d:9b:12:49:48:b2:51:06:35:47: f6:2b:d2:47:20:fe:90:71:ac:1c:48:5b:d6:c6:9d: 79:ff:04:27:93:a9:f8:cb:c4:ee:64:86:14:b2:dd: 7e:bf:bb:09:51:a1:d1:2d:22:a9:3e:35:5b:b7:a4: f2:99:41:b9:ce:1f:70:8a:8d:83:3b:ce:a6:fa:2d: f4:0f:8c:41:0c:73:2c:17:83:24:1c:3b:59:58:a4: 44:b9:d7:85:f2:9b:9e:64:a7:2a:5c:7a:48:2a:e5: 0a:37:3e:3c:8e:1e:da:29:7e:d7:c2:0c:96:48:6f: 01:63:88:cf:65:7a:f7:67:e8:2f:a7:41:f6:11:81: b8:45:e7:81:9b:f6:63:b0:2c:c7:56:73:e5:c8:6c: 40:e8:9d:14:c6:6c:17:ed:86:a3:bb:a6:a7:cf:12: 7e:91:6a:2d:02:5f:f1:53:5c:a6:e9:f0:ef:88:04: ea:10:ac:03:44:46:73:f3:2a:a3:c1:2b:ea:1d:bd: 2c:a5:59:cf:08:40:8f:94:d9:87:fc:a6:2f:19:85: 35:35:6a:c6:27:77:6b:b9:4b:4e:a7:79:1f:df:a1: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:06:C6:16:09:98:18:AC:6E:15:A9:E1:0F:CE:CD:FF:99:A9:B7 X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6f:a0:e9:f7:97:7f:c2:5e:90:25:d6:3e:9c:92:e0:bf:a3: 9e:37:fe:d4:41:be:dd:31:07:7a:d3:cd:32:f1:70:0e:5a:36: 2c:43:51:6e:78:23:5a:4d:64:9a:0d:21:74:bd:9b:2a:c1:dc: 3a:a6:b4:91:c4:c4:1f:a8:f0:d4:67:89:11:a1:8d:36:a7:04: 11:9e:00:fd:11:5b:37:78:5f:2d:be:e2:f8:4d:5a:a5:a0:0e: 83:90:c5:d1:e3:95:34:19:5b:51:e8:60:3b:0e:63:e3:00:12: 00:48:63:b5:6e:02:77:6c:b3:3c:d6:12:eb:9d:d6:ce:3a:1b: 23:c0:29:44:e8:d7:db:1a:39:65:17:47:71:a2:08:52:6c:e5: e4:97:7b:72:3f:28:f0:71:e1:47:56:ed:5b:d3:a1:23:f6:99: 53:ea:5a:50:26:e1:8d:a6:01:ab:fc:47:2c:20:30:bf:3e:69: 6f:18:53:e7:df:84:c8:fd:d2:e5:b9:65:84:f6:8f:12:14:35: ba:dd:5c:bd:f6:cf:56:97:20:36:ae:23:c2:5f:d9:48:a2:de: 61:24:95:e3:d8:22:19:8a:35:a6:57:84:94:0b:cb:0e:17:4a: c4:90:b3:10:28:66:44:ab:8b:f9:9f:f1:a1:e2:e3:28:83:32: da:2e:a1:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjUwOTA2MTUxMzE4WhcNMjUwOTEzMTUxMzE4WjAYMRYwFAYD VQQDEw02OGJjNGY4ZS03OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5cTVV9UdtO/AcINsmoRrQuxORlyb/SmvmgUZv1yg0YLWx2bEklIslEGNUf2 K9JHIP6QcawcSFvWxp15/wQnk6n4y8TuZIYUst1+v7sJUaHRLSKpPjVbt6TymUG5 zh9wio2DO86m+i30D4xBDHMsF4MkHDtZWKREudeF8pueZKcqXHpIKuUKNz48jh7a KX7XwgyWSG8BY4jPZXr3Z+gvp0H2EYG4ReeBm/ZjsCzHVnPlyGxA6J0UxmwX7Yaj u6anzxJ+kWotAl/xU1ym6fDviATqEKwDREZz8yqjwSvqHb0spVnPCECPlNmH/KYv GYU1NWrGJ3druUtOp3kf36G7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGWBsYW CZgYrG4VqeEPzs3/mam3MB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAob6Dp95d/wl6QJdY+nJLgv6OeN/7UQb7dMQd6080y8XAOWjYsQ1Fu eCNaTWSaDSF0vZsqwdw6prSRxMQfqPDUZ4kRoY02pwQRngD9EVs3eF8tvuL4TVql oA6DkMXR45U0GVtR6GA7DmPjABIASGO1bgJ3bLM81hLrndbOOhsjwClE6NfbGjll F0dxoghSbOXkl3tyPyjwceFHVu1b06Ej9plT6lpQJuGNpgGr/EcsIDC/PmlvGFPn 34TI/dLluWWE9o8SFDW63Vy99s9WlyA2riPCX9lIot5hJJXj2CIZijWmV4SUC8sO F0rEkLMQKGZEq4v5n/Gh4uMogzLaLqGg -----END CERTIFICATE-----Generated at Sat Sep 6 21:29:22 2025 by rpki-client