$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: gE9scPyyz99ljNO31bKizYJLJ8p/RWw9Qc62P+c0Fd8= Subject key identifier: D2:03:EC:AA:EC:43:F7:67:0A:10:5B:0A:AF:78:8C:49:74:F1:FB:21 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 066B Signing time: Sat 06 Sep 2025 22:50:18 +0000 Manifest this update: Sat 06 Sep 2025 22:50:17 +0000 Manifest next update: Sat 13 Sep 2025 22:50:17 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: hvRFdXmJPlvmWiTHUzGsLkS2wwzNpkmBl1hhByrwrXg=) 2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: lK7bGVCygyPQRcWZjT3XlPriu2CyfUJlUxTwi2dzB50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: Sep 6 22:50:17 2025 GMT Not After : Sep 13 22:50:17 2025 GMT Subject: CN=68bcbaaa-6964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:1a:60:e2:e2:c7:a9:aa:d8:51:3a:86:b9: be:b1:49:2a:a9:4d:e4:a6:ed:8f:13:f5:95:52:26: 6c:eb:d5:85:2d:61:5a:4e:f7:66:02:cf:25:c8:6f: 32:48:54:33:5a:cf:20:7a:d4:e0:7f:b1:09:e6:98: 13:af:89:41:a1:b9:a9:9b:2c:5e:9f:b6:02:ca:4e: 9e:fc:ed:b6:f6:61:e5:99:1f:a6:83:c9:ea:da:d7: 7b:60:e6:d8:30:43:98:1d:de:a1:4b:25:4b:35:a0: b0:14:4f:50:09:58:ff:a3:d5:d0:f1:27:e0:dc:50: 91:22:54:6b:b5:bf:95:e7:82:7c:6a:73:35:95:87: 29:c6:03:b8:45:fe:34:e8:43:8f:ae:13:25:85:21: 4d:84:f4:55:bd:24:dd:1b:78:59:9a:5d:c3:36:9f: d7:04:7e:4a:96:2d:12:60:c0:04:a8:12:a8:e5:40: 11:f1:05:37:cd:71:2a:5b:73:f9:0b:59:ad:7d:35: d0:7f:96:93:f7:12:44:d4:e7:9d:31:b4:00:7d:d9: 36:63:cd:6b:a3:8c:44:49:86:fa:29:fc:ee:0f:6f: 5c:c9:6f:80:1b:6d:8e:dd:f6:13:46:e3:fc:06:77: 84:e0:bc:09:bc:58:61:71:59:9a:69:bd:3a:08:c2: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:03:EC:AA:EC:43:F7:67:0A:10:5B:0A:AF:78:8C:49:74:F1:FB:21 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0a:c7:30:23:aa:d2:5c:93:4d:7b:6a:df:ea:e8:0c:9b:db: 9c:47:30:f7:62:f9:43:e6:b9:02:1f:60:30:71:e5:32:c4:c5: 8c:53:fb:e8:a1:16:31:14:76:7e:42:96:4b:d7:d7:67:6b:47: 2d:7d:e2:e4:b7:67:88:bf:18:cb:ca:89:75:c7:10:39:ab:15: ec:ef:f8:f5:7b:ab:5e:26:50:96:f5:a5:77:f0:eb:5f:56:69: 99:3a:36:0f:1a:47:61:c8:d3:55:16:d7:b6:8f:b9:38:df:71: 4f:3a:c8:33:3e:a7:78:16:e9:ce:0d:8d:18:23:66:2d:da:17: 32:d7:9b:81:6d:41:9b:db:fb:ea:a9:03:98:88:5b:c5:60:5d: 50:b5:62:d2:c3:57:7b:15:d5:21:eb:cb:88:38:ba:60:ad:be: 90:f0:1c:bf:28:33:be:eb:75:19:56:ce:da:51:1f:9e:8a:36: 8b:a9:37:f5:26:e7:53:92:19:df:78:9f:14:30:ae:7b:2c:e1: e2:6e:03:ed:2a:09:12:59:51:43:21:4a:df:2b:75:c6:93:0a: 4c:cf:83:4d:02:b0:5b:5d:f0:92:89:f3:04:81:15:86:a6:d0: 20:4c:aa:da:81:4f:d9:a0:92:1f:28:eb:ee:b5:77:5e:1d:5e: fb:45:40:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjUwOTA2MjI1MDE3WhcNMjUwOTEzMjI1MDE3WjAYMRYwFAYD VQQDEw02OGJjYmFhYS02OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAgaYOLix6mq2FE6hrm+sUkqqU3kpu2PE/WVUiZs69WFLWFaTvdmAs8lyG8y SFQzWs8getTgf7EJ5pgTr4lBobmpmyxen7YCyk6e/O229mHlmR+mg8nq2td7YObY MEOYHd6hSyVLNaCwFE9QCVj/o9XQ8Sfg3FCRIlRrtb+V54J8anM1lYcpxgO4Rf40 6EOPrhMlhSFNhPRVvSTdG3hZml3DNp/XBH5Kli0SYMAEqBKo5UAR8QU3zXEqW3P5 C1mtfTXQf5aT9xJE1OedMbQAfdk2Y81ro4xESYb6KfzuD29cyW+AG22O3fYTRuP8 BneE4LwJvFhhcVmaab06CMIKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNID7Krs Q/dnChBbCq94jEl08fshMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYCscwI6rSXJNNe2rf6ugMm9ucRzD3YvlD5rkCH2AwceUyxMWMU/vo oRYxFHZ+QpZL19dna0ctfeLkt2eIvxjLyol1xxA5qxXs7/j1e6teJlCW9aV38Otf VmmZOjYPGkdhyNNVFte2j7k433FPOsgzPqd4FunODY0YI2Yt2hcy15uBbUGb2/vq qQOYiFvFYF1QtWLSw1d7FdUh68uIOLpgrb6Q8By/KDO+63UZVs7aUR+eijaLqTf1 JudTkhnfeJ8UMK57LOHibgPtKgkSWVFDIUrfK3XGkwpMz4NNArBbXfCSifMEgRWG ptAgTKragU/ZoJIfKOvutXdeHV77RUAJ -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:13 2025 by rpki-client