$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: /ek/x2vueENffGWH/6gByZJEUm/UjzyCkZuutWYcl+0= Subject key identifier: 48:6A:76:F0:76:FF:0D:33:0F:58:60:7F:D4:A2:93:E8:A9:92:F4:82 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 04A6 Signing time: Sun 07 Sep 2025 00:18:09 +0000 Manifest this update: Sun 07 Sep 2025 00:18:08 +0000 Manifest next update: Sun 14 Sep 2025 00:18:08 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: +GaGuob6EOCqeNZ1891eW2hmr8FcpBJjJDmD26B9gnM=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: qE3lLSo7fB7VrFOUOH9TpjKgPsy7cNI6EqgXlJf8kVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A, serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: Sep 7 00:18:08 2025 GMT Not After : Sep 14 00:18:08 2025 GMT Subject: CN=68bccf41-94d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:c3:c7:8d:49:23:e4:97:55:6a:a6:66:f4: 08:c3:24:c4:55:91:94:52:0b:a5:e6:da:a7:27:52: 63:18:f3:d4:05:16:f7:42:e4:65:d9:fa:3e:69:ed: 1f:32:9a:20:3b:79:10:a4:1b:0b:d2:fb:90:5c:e5: 75:b8:be:f7:41:21:9d:19:bb:97:27:fa:26:38:ad: 03:3c:53:f5:3f:59:4c:3c:56:0c:5f:37:e8:99:fc: 62:92:80:a3:56:96:7c:76:21:be:68:36:6c:1c:e8: e6:85:8a:51:32:f9:5e:b2:81:9c:97:11:d9:c3:5a: 78:41:b5:7b:14:f2:61:07:c9:f7:26:e7:84:98:02: 05:a3:91:f5:f5:f9:29:37:42:68:2e:2b:32:03:a2: 1d:57:ee:ea:bd:be:9b:93:58:9f:5d:b1:83:1c:58: c4:0b:45:f5:85:14:48:3d:41:38:08:00:34:68:24: 34:66:b4:cf:d0:d8:8d:6a:0f:66:07:65:63:9b:0a: 91:55:be:20:40:b9:48:6c:c8:0c:14:1f:f3:03:d5: 51:b2:b5:e4:2b:c1:51:86:38:ec:ed:0a:2c:1b:a6: f4:28:01:be:4f:f0:1e:01:44:05:d1:a1:7d:8d:db: 44:9b:38:2c:9f:17:73:cb:b9:3c:26:4d:f6:3e:9a: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6A:76:F0:76:FF:0D:33:0F:58:60:7F:D4:A2:93:E8:A9:92:F4:82 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:6a:5a:b8:1f:ca:1c:ae:1b:ce:61:df:d1:7d:52:da:e9: 21:55:7a:19:56:01:52:15:86:8b:6d:3c:8f:3c:08:3b:1a:b7: f2:cf:a3:be:59:14:fa:d3:bb:37:6d:d8:df:b2:26:2d:d2:86: f8:87:18:15:78:7f:00:99:d4:9b:86:60:44:3d:eb:76:cc:4a: 12:50:ee:ea:c8:55:01:58:be:0a:31:22:42:f1:22:3a:c8:15: d5:d4:c7:60:0a:ba:74:9a:82:54:8e:66:f6:75:99:db:f1:ff: 48:d8:c9:90:82:96:bf:76:93:1e:ff:b3:e8:3c:18:0f:5e:e2: 3e:7a:55:18:5c:7b:02:be:1a:1a:f0:63:5a:69:c7:c4:3f:0c: 29:0c:da:1e:a4:81:76:53:50:ad:28:ae:8c:43:e3:4e:2e:39: 66:cc:9d:96:ce:5e:22:8d:56:be:d8:26:86:52:68:b7:b2:d3: 2d:ea:ee:30:89:58:32:0a:d6:6c:c8:9c:69:14:44:3c:07:0f: 8e:3f:e3:2a:d8:f4:61:da:b4:25:c0:23:da:af:9d:fd:d1:81: bb:8e:23:5f:1a:7d:99:71:20:77:cc:e7:1f:55:18:67:f9:c3: d9:d9:c5:5c:d4:46:7d:a5:10:58:29:f2:ad:b8:74:76:38:da: 28:6d:72:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjUwOTA3MDAxODA4WhcNMjUwOTE0MDAxODA4WjAYMRYwFAYD VQQDEw02OGJjY2Y0MS05NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHfDx41JI+SXVWqmZvQIwyTEVZGUUgul5tqnJ1JjGPPUBRb3QuRl2fo+ae0f MpogO3kQpBsL0vuQXOV1uL73QSGdGbuXJ/omOK0DPFP1P1lMPFYMXzfomfxikoCj VpZ8diG+aDZsHOjmhYpRMvlesoGclxHZw1p4QbV7FPJhB8n3JueEmAIFo5H19fkp N0JoLisyA6IdV+7qvb6bk1ifXbGDHFjEC0X1hRRIPUE4CAA0aCQ0ZrTP0NiNag9m B2VjmwqRVb4gQLlIbMgMFB/zA9VRsrXkK8FRhjjs7QosG6b0KAG+T/AeAUQF0aF9 jdtEmzgsnxdzy7k8Jk32Ppr8YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhqdvB2 /w0zD1hgf9Sik+ipkvSCMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSWpauB/KHK4bzmHf0X1S2ukhVXoZVgFSFYaLbTyPPAg7Grfyz6O+ WRT607s3bdjfsiYt0ob4hxgVeH8AmdSbhmBEPet2zEoSUO7qyFUBWL4KMSJC8SI6 yBXV1MdgCrp0moJUjmb2dZnb8f9I2MmQgpa/dpMe/7PoPBgPXuI+elUYXHsCvhoa 8GNaacfEPwwpDNoepIF2U1CtKK6MQ+NOLjlmzJ2Wzl4ijVa+2CaGUmi3stMt6u4w iVgyCtZsyJxpFEQ8Bw+OP+Mq2PRh2rQlwCPar5390YG7jiNfGn2ZcSB3zOcfVRhn +cPZ2cVc1EZ9pRBYKfKtuHR2ONoobXKl -----END CERTIFICATE-----Generated at Mon Sep 8 00:08:28 2025 by rpki-client