$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json) Hash identifier: NDQmKDCl4s2lwO8IU4JCH7Uwf1uIxzf0t9UAtlqKF0k= Subject key identifier: 3C:4E:9E:17:B4:8A:08:78:F3:63:20:8F:69:D6:A3:B2:31:1B:BD:82 Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Certificate serial: 1011 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft Manifest number: 1002 Signing time: Thu 18 Sep 2025 17:37:56 +0000 Manifest this update: Thu 18 Sep 2025 17:37:55 +0000 Manifest next update: Thu 25 Sep 2025 17:37:55 +0000 Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: eAaM/14NfUoRnPJlFvQ7PagGAMnQ5NWtbCG1XtA0D9Q=) 2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: thEUPRHmxogbvRJ6Y3FkP32LyqLTW2o8NNUuKxB2tbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4113 (0x1011) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Validity Not Before: Sep 18 17:37:55 2025 GMT Not After : Sep 25 17:37:55 2025 GMT Subject: CN=68cc4374-af4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:b5:52:f3:0f:21:b0:64:3a:e0:e7:8e:3b: 82:f9:27:9d:a4:93:ed:17:bc:73:0f:c1:ee:a4:f9: 50:24:f1:98:3b:5e:0f:5e:38:23:eb:48:66:2e:05: 02:fc:05:93:51:09:62:1f:4d:5d:7e:65:16:a1:3d: 4b:86:17:aa:31:e8:a6:b7:61:64:66:48:a1:16:d3: 22:df:9a:f9:3f:9d:11:87:ab:c3:3e:c2:b0:e8:e2: 1a:d4:56:ca:54:a3:89:97:fc:1e:b9:45:d6:6a:b6: ac:6e:d9:6e:af:8a:ad:34:aa:61:2c:f1:f3:1c:ac: 55:f1:f6:7f:65:aa:b0:4a:27:95:7d:ea:3a:49:49: c6:c6:6a:77:19:d2:c9:3e:75:73:2d:a5:f9:32:b4: f7:f0:db:b1:66:fd:8e:27:96:a3:51:28:87:1f:49: 5d:f4:b4:b8:ed:da:c2:5c:62:0a:b8:8e:8a:a0:eb: e2:3c:7c:40:6c:7f:5f:2f:fb:7d:d7:dc:79:cc:09: ca:d8:ac:f4:bf:43:69:57:1a:fa:93:98:43:e2:84: ba:0d:68:89:02:d5:17:c6:77:fc:f4:50:a4:22:f9: 17:93:d0:fa:9f:7d:56:41:aa:9f:c0:fc:91:b7:5b: 79:97:e1:2a:c8:b7:93:85:2b:04:cc:17:98:ac:5e: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4E:9E:17:B4:8A:08:78:F3:63:20:8F:69:D6:A3:B2:31:1B:BD:82 X509v3 Authority Key Identifier: keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:51:46:a2:33:6a:8c:a6:8d:04:2b:9d:11:f4:74:07:63:52: 2a:f7:f5:fe:a3:3d:8f:99:30:f6:b8:f6:64:f9:d7:77:2a:d8: 96:19:a0:34:85:b5:dc:08:0f:b1:91:26:bb:03:ad:9d:39:65: ac:3b:12:43:1a:6d:62:62:bd:8d:26:a1:70:84:a1:e5:17:19: 4f:56:c7:dd:7e:8b:a3:88:3e:0e:18:5d:79:08:03:72:e1:89: fd:15:50:6c:f8:ce:e9:c1:7a:1e:aa:14:3f:e6:b1:b6:07:52: 01:e4:59:c0:f5:22:b4:bb:dd:6b:9b:1b:6c:12:51:17:ef:86: 95:2c:18:af:c0:f8:d8:b2:d6:4a:06:63:e5:33:6d:b1:72:b4: bc:cc:e6:16:35:b0:4f:b0:db:84:42:e0:33:d5:3f:9c:e7:a3: f4:d3:ea:19:ee:3f:33:bf:91:7d:87:aa:9d:a9:0b:f9:a4:39: 7b:b1:c0:a5:fb:14:44:1c:69:39:41:bf:de:44:20:5b:8d:06: 21:68:4c:5f:01:d1:9e:14:77:5d:e8:3d:7e:c1:82:9d:f7:49: 4a:95:6c:46:37:35:a9:bf:f3:ea:f6:bc:be:ca:b3:2f:73:42: 8d:ea:f9:91:d5:c8:5c:75:f5:4b:b0:ba:95:6a:78:40:19:51: 5a:ff:38:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3 MzJEOUREQTYwHhcNMjUwOTE4MTczNzU1WhcNMjUwOTI1MTczNzU1WjAYMRYwFAYD VQQDEw02OGNjNDM3NC1hZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdG1UvMPIbBkOuDnjjuC+SedpJPtF7xzD8HupPlQJPGYO14PXjgj60hmLgUC /AWTUQliH01dfmUWoT1LhheqMeimt2FkZkihFtMi35r5P50Rh6vDPsKw6OIa1FbK VKOJl/weuUXWarasbtlur4qtNKphLPHzHKxV8fZ/ZaqwSieVfeo6SUnGxmp3GdLJ PnVzLaX5MrT38NuxZv2OJ5ajUSiHH0ld9LS47drCXGIKuI6KoOviPHxAbH9fL/t9 19x5zAnK2Kz0v0NpVxr6k5hD4oS6DWiJAtUXxnf89FCkIvkXk9D6n31WQaqfwPyR t1t5l+EqyLeThSsEzBeYrF6koQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxOnhe0 igh482Mgj2nWo7IxG72CMB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1 RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU5Ni9FREE2NUFDNDU1RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlB bXZIc21lbW54LUp6TFozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMUUaiM2qMpo0EK50R9HQHY1Iq9/X+oz2PmTD2uPZk+dd3KtiWGaA0 hbXcCA+xkSa7A62dOWWsOxJDGm1iYr2NJqFwhKHlFxlPVsfdfoujiD4OGF15CANy 4Yn9FVBs+M7pwXoeqhQ/5rG2B1IB5FnA9SK0u91rmxtsElEX74aVLBivwPjYstZK BmPlM22xcrS8zOYWNbBPsNuEQuAz1T+c56P00+oZ7j8zv5F9h6qdqQv5pDl7scCl +xREHGk5Qb/eRCBbjQYhaExfAdGeFHdd6D1+wYKd90lKlWxGNzWpv/Pq9ry+yrMv c0KN6vmR1chcdfVLsLqVanhAGVFa/zjR -----END CERTIFICATE-----Generated at Fri Sep 19 07:10:51 2025 by rpki-client