$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: G5hGSvy2jP6rcCNP41PakrIdU1R7i34eiFLonrRDHiY= Subject key identifier: 2D:9A:D4:C8:D5:E5:25:02:94:F7:F5:15:10:CC:AE:CC:A7:FA:2B:2A Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 95 Signing time: Tue 09 Sep 2025 06:33:55 +0000 Manifest this update: Tue 09 Sep 2025 06:33:54 +0000 Manifest next update: Tue 16 Sep 2025 06:33:54 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: OBjTaR/JswEFMnfIjdlmUhnxTBTNcy8OdcfUpg1MkJE=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE, serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Sep 9 06:33:54 2025 GMT Not After : Sep 16 06:33:54 2025 GMT Subject: CN=68bfca52-578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:d7:a6:fd:cc:e4:2e:83:23:dd:cc:df:ec: 8f:54:cc:bc:72:0a:9d:7f:a4:eb:ee:e5:e8:6b:28: 1c:39:d9:9e:a9:d0:5d:f5:05:70:bc:be:1f:ef:bd: 56:a9:9c:b8:3b:03:c5:7c:38:cc:6f:1a:fc:f0:fe: 80:b2:e0:47:cf:b4:f8:9f:cf:08:68:57:c6:0c:94: 8c:07:61:ee:73:f2:68:85:b1:36:26:ad:96:cb:a4: ad:6d:2b:eb:a7:4b:13:5b:06:7b:21:56:87:a4:e3: b0:36:3c:4d:88:14:0c:d8:8c:e2:75:22:bd:b4:35: 11:82:ce:b4:ac:fc:61:80:ed:0f:20:01:0c:1f:62: 38:ea:f3:d6:e4:80:f7:b3:67:30:60:2e:d8:bb:12: 5c:ed:34:78:af:1d:4e:ce:d3:83:22:66:91:a6:aa: 05:82:26:f1:e1:32:d3:cf:44:51:43:be:99:76:d0: bb:23:53:c6:40:ec:9b:b0:47:81:6d:f6:17:6c:e4: 6e:c1:88:c9:34:10:20:99:13:18:34:30:63:7e:13: e4:7d:8e:b1:19:f7:1c:fd:9f:e5:7b:88:47:ca:05: 85:06:58:5a:97:6c:a6:64:34:6a:07:e0:f8:14:7d: e4:9e:7b:2f:67:10:f6:26:0e:66:8f:51:84:a6:46: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9A:D4:C8:D5:E5:25:02:94:F7:F5:15:10:CC:AE:CC:A7:FA:2B:2A X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:67:de:87:11:e5:d8:99:60:c1:f5:92:e8:bb:8a:0b:77:bc: 0d:4e:51:7e:ea:03:c4:44:65:8f:db:7b:cf:d2:32:8f:e0:06: 15:f4:ae:fa:ee:7d:d3:66:da:13:75:70:76:21:61:ba:6d:18: 26:91:7c:04:45:91:06:da:04:4b:a9:66:14:12:05:04:04:85: 62:a3:a6:50:82:5a:b3:22:41:df:89:f8:16:48:64:3c:a0:e1: 6f:7a:92:a1:fa:97:41:6f:19:58:b5:db:64:22:aa:ae:4b:69: cb:1c:38:92:28:c1:f1:e7:7b:9f:f1:dc:80:1a:c5:49:fa:b5: 20:c2:52:27:58:dc:69:5e:9e:d3:49:64:6c:d8:5b:61:35:05: 6c:4f:5f:f9:00:4c:4b:21:01:ca:b8:f5:ac:ab:76:60:8c:2a: 50:8a:d8:c3:7f:6c:ae:63:33:ee:06:b5:ea:d1:a2:37:e0:94: 10:7a:19:c5:41:fe:10:36:62:60:61:de:43:86:fa:26:56:1c: b2:9f:68:b7:50:fd:9c:d3:a7:2b:da:44:ef:b3:e8:b7:d9:2e: 31:90:53:af:99:96:ff:72:e2:44:4f:e4:e8:6a:f1:91:8c:6e: 83:87:2f:3f:61:be:87:47:10:7d:d1:cd:9b:0c:c6:f9:82:e4: 70:07:82:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwRkUxMTAvBgNVBAUTKEIwMjc5NUQyRTA5RTNBQUEzRTM2RDJCNTkyRDJFMEU5 RkJCN0VGQkQwHhcNMjUwOTA5MDYzMzU0WhcNMjUwOTE2MDYzMzU0WjAYMRYwFAYD VQQDEw02OGJmY2E1Mi01NzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTnXpv3M5C6DI93M3+yPVMy8cgqdf6Tr7uXoaygcOdmeqdBd9QVwvL4f771W qZy4OwPFfDjMbxr88P6AsuBHz7T4n88IaFfGDJSMB2Huc/JohbE2Jq2Wy6StbSvr p0sTWwZ7IVaHpOOwNjxNiBQM2IzidSK9tDURgs60rPxhgO0PIAEMH2I46vPW5ID3 s2cwYC7YuxJc7TR4rx1OztODImaRpqoFgibx4TLTz0RRQ76ZdtC7I1PGQOybsEeB bfYXbORuwYjJNBAgmRMYNDBjfhPkfY6xGfcc/Z/le4hHygWFBlhal2ymZDRqB+D4 FH3knnsvZxD2Jg5mj1GEpkbkVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2a1MjV 5SUClPf1FRDMrsyn+isqMB8GA1UdIwQYMBaAFLAnldLgnjqqPjbStZLS4On7t++9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8zNzMzNEJFMkFC Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9xby1OdEsxa3RMZzZmdTM3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBGRS8zNzMzNEJFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9zQ2VWMHVDZU9x by1OdEsxa3RMZzZmdTM3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpZ96HEeXYmWDB9ZLou4oLd7wNTlF+6gPERGWP23vP0jKP4AYV9K76 7n3TZtoTdXB2IWG6bRgmkXwERZEG2gRLqWYUEgUEBIVio6ZQglqzIkHfifgWSGQ8 oOFvepKh+pdBbxlYtdtkIqquS2nLHDiSKMHx53uf8dyAGsVJ+rUgwlInWNxpXp7T SWRs2FthNQVsT1/5AExLIQHKuPWsq3ZgjCpQitjDf2yuYzPuBrXq0aI34JQQehnF Qf4QNmJgYd5DhvomVhyyn2i3UP2c06cr2kTvs+i32S4xkFOvmZb/cuJET+ToavGR jG6Dhy8/Yb6HRxB90c2bDMb5guRwB4Io -----END CERTIFICATE-----Generated at Tue Sep 9 14:35:39 2025 by rpki-client