$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json) Hash identifier: XpEtRIsaxVAl9VWt6cZAdGcCJ7ABRVejE69Szl/yu50= Subject key identifier: 09:45:62:30:A8:13:71:3B:99:0F:31:E5:32:6E:2B:D6:00:98:39:0A Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Certificate serial: 0E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft Manifest number: 0E1C Signing time: Sat 06 Sep 2025 17:57:20 +0000 Manifest this update: Sat 06 Sep 2025 17:57:20 +0000 Manifest next update: Sat 13 Sep 2025 17:57:20 +0000 Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: cGUhA1pMDtM6rljpH56DPCmukK/tmQ/Y6zCpnthE5Y8=) 2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: TISln3OWwFMxrFHBXjhzJmsuAj7ldgpqpKcI/7qFxoU=) 3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: cRBzFvwtKhO498akQMxVv4jrQ/Ofn1ctENdiE3NLHgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Validity Not Before: Sep 6 17:57:20 2025 GMT Not After : Sep 13 17:57:20 2025 GMT Subject: CN=68bc7600-d97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8f:3d:68:8d:27:e8:80:34:77:7b:8a:b8:26: be:97:8d:29:61:e5:7c:76:1e:1e:ec:c2:9c:65:bb: 20:cc:a9:2e:2a:0a:79:4c:c4:ba:44:bb:93:f5:7f: 7c:d3:f7:44:cb:1a:5a:18:7c:ee:4f:82:ab:17:26: fd:fe:98:e0:92:ab:47:20:d2:31:ce:6c:d6:4f:51: b1:1d:42:d4:80:54:75:f0:f3:58:f8:14:ce:df:39: 82:02:d3:7d:a0:8a:3f:a6:e2:41:5b:35:38:08:f8: 34:ca:2e:e0:93:d2:22:3a:cb:41:db:98:ab:fa:e6: 12:99:c6:8f:f0:c5:8e:f7:4c:4e:73:bc:96:6d:7c: da:91:af:c5:49:8a:62:78:44:db:cc:f5:38:59:f8: c2:e3:bd:73:b8:f4:98:8a:7f:40:9e:f1:da:c7:3b: 1f:b5:f9:1b:ad:3c:f1:9e:ce:14:09:be:cf:7b:0d: c0:d6:86:cd:82:ea:d6:2d:ef:0c:2f:3c:94:0e:81: 7e:6d:e1:20:5c:a9:a7:da:7e:13:44:80:f3:d1:6a: 6c:67:4f:74:5a:0d:92:62:ec:8a:c8:61:43:d0:5a: 3f:08:cd:cc:2b:22:48:5a:3a:98:8a:ff:71:59:3d: 4a:cc:a7:b1:f9:f2:28:7a:96:3d:c0:3b:00:68:9e: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:45:62:30:A8:13:71:3B:99:0F:31:E5:32:6E:2B:D6:00:98:39:0A X509v3 Authority Key Identifier: keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:73:64:fa:a6:b7:d1:72:8f:81:b3:e6:1c:c0:05:6a:96:ca: bc:96:b8:62:a4:6e:4e:77:0d:82:21:de:7c:e2:d2:67:63:17: db:13:13:e0:63:e7:87:70:76:53:40:27:2a:a3:db:cb:41:38: 14:56:c6:44:ae:20:49:da:5f:ab:ba:38:1c:3a:c3:09:2d:04: 12:e8:33:15:c3:05:0f:5e:0a:87:ac:6e:c4:a6:2c:3c:22:c6: 97:b9:af:13:3e:50:ea:9c:57:63:95:4b:ac:b0:f6:4c:b5:23: 53:d1:50:36:ab:6a:f3:09:8d:86:49:7a:a7:5d:a6:0d:51:44: b7:1c:79:63:38:97:0c:8a:c2:12:b5:5f:67:7d:04:61:3d:5e: 14:f6:96:8f:2e:16:d6:9b:f3:a7:75:a0:c7:fe:32:65:2f:a3: 43:a4:42:89:27:87:ea:56:9c:db:d9:85:b5:5f:9c:ac:7f:16: fa:6a:5e:06:ec:e7:9c:f6:e1:03:dd:98:0a:b5:6e:5f:1b:7f: a6:c6:f3:7e:58:c1:39:1d:16:06:1c:0f:f7:15:6f:29:f3:a2: 1f:d6:6e:e0:2a:b7:81:72:d6:46:b5:6d:bd:21:74:c1:42:db: 2d:9e:3e:5a:d6:af:88:9c:7e:e2:5c:59:46:11:54:d2:10:76: 6a:83:ad:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1 OUE0MzgyMzMwHhcNMjUwOTA2MTc1NzIwWhcNMjUwOTEzMTc1NzIwWjAYMRYwFAYD VQQDEw02OGJjNzYwMC1kOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8489aI0n6IA0d3uKuCa+l40pYeV8dh4e7MKcZbsgzKkuKgp5TMS6RLuT9X98 0/dEyxpaGHzuT4KrFyb9/pjgkqtHINIxzmzWT1GxHULUgFR18PNY+BTO3zmCAtN9 oIo/puJBWzU4CPg0yi7gk9IiOstB25ir+uYSmcaP8MWO90xOc7yWbXzaka/FSYpi eETbzPU4WfjC471zuPSYin9AnvHaxzsftfkbrTzxns4UCb7Pew3A1obNgurWLe8M LzyUDoF+beEgXKmn2n4TRIDz0WpsZ090Wg2SYuyKyGFD0Fo/CM3MKyJIWjqYiv9x WT1KzKex+fIoepY9wDsAaJ6BNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlFYjCo E3E7mQ8x5TJuK9YAmDkKMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX MFdBYjZEMkxsSzFacERnak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYc2T6prfRco+Bs+YcwAVqlsq8lrhipG5Odw2CId584tJnYxfbExPg Y+eHcHZTQCcqo9vLQTgUVsZEriBJ2l+rujgcOsMJLQQS6DMVwwUPXgqHrG7Epiw8 IsaXua8TPlDqnFdjlUussPZMtSNT0VA2q2rzCY2GSXqnXaYNUUS3HHljOJcMisIS tV9nfQRhPV4U9paPLhbWm/OndaDH/jJlL6NDpEKJJ4fqVpzb2YW1X5ysfxb6al4G 7Oec9uED3ZgKtW5fG3+mxvN+WME5HRYGHA/3FW8p86If1m7gKreBctZGtW29IXTB Qtstnj5a1q+InH7iXFlGEVTSEHZqg61z -----END CERTIFICATE-----Generated at Sun Sep 7 21:35:07 2025 by rpki-client