$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: b9/JH0vlH6qks/nmpL1sMKnEDitc5DVKU4e+13eKUyU= Subject key identifier: 99:A2:78:C5:5E:F1:36:7B:83:B7:E7:20:56:58:67:5E:0E:46:0F:53 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: F1 Signing time: Wed 17 Sep 2025 05:53:01 +0000 Manifest this update: Wed 17 Sep 2025 05:53:01 +0000 Manifest next update: Wed 24 Sep 2025 05:53:01 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: gjaV504p+qZ3XSWKwRt9NOUWYDJPBHZgNMRzWmjLob0=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Sep 17 05:53:01 2025 GMT Not After : Sep 24 05:53:01 2025 GMT Subject: CN=68ca4cbd-6a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:7d:3a:ae:02:62:25:71:73:07:87:fb:c9: 72:7f:a3:f5:35:92:d0:62:0a:8b:d0:fe:fa:8b:45: 11:e6:3b:1f:3c:2e:6d:2a:df:99:ea:3a:f9:30:c6: 07:0e:d1:dd:2b:78:b0:59:79:c9:55:3b:ab:2f:f6: de:b8:87:17:b9:3f:ec:37:21:16:5c:3d:42:71:8a: b7:9f:93:6f:32:4f:3c:44:20:53:88:dc:fb:fd:59: 39:c9:d7:92:cc:75:4b:f8:9b:e7:63:f2:db:d2:c4: a2:36:14:f7:8b:43:88:72:9f:46:df:d8:47:7d:53: 30:22:b2:1b:34:a0:7c:ef:f0:25:9e:b1:e7:cd:78: 3e:f4:d5:25:14:6d:f2:b5:ff:4a:88:21:fd:b4:c4: 28:b7:6e:89:4c:75:2e:60:ce:02:b8:aa:de:36:11: 9e:1e:73:be:b2:43:bc:01:1d:b1:88:14:ac:15:6a: fd:47:2c:eb:a3:25:bf:39:46:5f:9a:1b:e9:bb:c4: 0c:d0:a7:c5:33:d6:f8:43:11:66:2c:cd:16:4a:35: d6:7f:fb:06:39:5a:d7:36:50:7b:80:d6:f0:57:c2: 33:97:cd:e8:26:a4:26:d8:ea:b1:19:8e:c9:7b:cc: c1:43:26:1e:f6:42:1a:d9:c2:f1:0c:dd:9c:60:bc: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:78:C5:5E:F1:36:7B:83:B7:E7:20:56:58:67:5E:0E:46:0F:53 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:2d:44:9a:2b:d0:d1:ec:cd:c9:da:59:38:d8:bd:ca:b8:11: 9f:91:c5:d9:e6:be:3c:85:65:9a:ad:9c:bb:1a:75:91:0f:0f: c3:47:07:18:e0:ba:bb:f0:0f:95:a5:0b:f0:6a:fd:7d:4b:05: 2d:e5:dd:0c:48:85:68:44:34:b0:b6:1e:a6:7a:97:dc:4f:dd: 24:ce:8a:66:cd:c2:5b:a8:f0:0a:7f:d5:10:54:8f:61:e8:7a: d3:b6:b4:d5:bd:28:d5:43:06:b7:f4:99:53:fe:91:32:94:d8: 91:54:36:64:4a:fb:6a:ec:9f:6b:dd:01:d0:31:ec:b3:f4:38: 65:a6:1b:06:6a:87:b4:05:e6:e8:0f:fa:6f:76:8f:7e:5f:55: 9d:3b:b0:ac:ba:c6:34:6b:4f:99:76:6b:d1:86:32:46:4e:4d: 87:20:a8:75:ff:84:69:ea:47:2f:40:51:df:1d:7c:fc:8c:29: ee:b2:66:cd:94:ef:4d:de:34:e3:bb:5d:59:7b:d9:56:a2:ff: 78:cc:e8:7a:ae:69:79:06:52:75:cf:92:ea:c3:31:d2:ff:c4: 41:ab:74:bf:84:cf:b3:e9:c8:66:c3:fd:ea:b0:c3:75:64:71: 2f:c2:2c:d5:0a:c5:6a:b0:6b:a1:a6:60:f4:87:c6:04:c6:4a: be:31:b0:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUwOTE3MDU1MzAxWhcNMjUwOTI0MDU1MzAxWjAYMRYwFAYD VQQDEw02OGNhNGNiZC02YTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eh9Oq4CYiVxcweH+8lyf6P1NZLQYgqL0P76i0UR5jsfPC5tKt+Z6jr5MMYH DtHdK3iwWXnJVTurL/beuIcXuT/sNyEWXD1CcYq3n5NvMk88RCBTiNz7/Vk5ydeS zHVL+JvnY/Lb0sSiNhT3i0OIcp9G39hHfVMwIrIbNKB87/AlnrHnzXg+9NUlFG3y tf9KiCH9tMQot26JTHUuYM4CuKreNhGeHnO+skO8AR2xiBSsFWr9RyzroyW/OUZf mhvpu8QM0KfFM9b4QxFmLM0WSjXWf/sGOVrXNlB7gNbwV8Izl83oJqQm2OqxGY7J e8zBQyYe9kIa2cLxDN2cYLyIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmieMVe 8TZ7g7fnIFZYZ14ORg9TMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmLUSaK9DR7M3J2lk42L3KuBGfkcXZ5r48hWWarZy7GnWRDw/DRwcY 4Lq78A+VpQvwav19SwUt5d0MSIVoRDSwth6mepfcT90kzopmzcJbqPAKf9UQVI9h 6HrTtrTVvSjVQwa39JlT/pEylNiRVDZkSvtq7J9r3QHQMeyz9DhlphsGaoe0Bebo D/pvdo9+X1WdO7CsusY0a0+ZdmvRhjJGTk2HIKh1/4Rp6kcvQFHfHXz8jCnusmbN lO9N3jTju11Ze9lWov94zOh6rml5BlJ1z5LqwzHS/8RBq3S/hM+z6chmw/3qsMN1 ZHEvwizVCsVqsGuhpmD0h8YExkq+MbBy -----END CERTIFICATE-----Generated at Fri Sep 19 03:31:23 2025 by rpki-client