$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: 9AfcYtEzBGvDNqUT/Fp3ZPma31JkTPpvYreBXbq8A4I= Subject key identifier: B1:6C:05:22:8C:26:2F:9B:1C:0E:A2:A2:64:8E:E2:97:A8:E1:E3:75 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02E3 Signing time: Wed 17 Sep 2025 01:48:36 +0000 Manifest this update: Wed 17 Sep 2025 01:48:35 +0000 Manifest next update: Wed 24 Sep 2025 01:48:35 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: gsw9AAtqY94v5I01tarZMUI9VIFQtbI2qw1W0Ro4/oM=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Sep 17 01:48:35 2025 GMT Not After : Sep 24 01:48:35 2025 GMT Subject: CN=68ca1374-2d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:c6:37:06:21:13:65:45:51:2a:91:2a:b0: 36:b6:df:0d:ed:4c:99:90:e1:1d:04:45:e7:01:10: 84:42:70:f8:ee:e1:ca:f6:47:65:d4:d6:66:ed:b7: 25:55:4f:a9:11:41:26:fa:cf:79:bc:50:d6:01:8c: 99:94:ab:1d:30:37:96:b0:5f:b6:f0:3a:3f:da:3d: 70:d2:f2:ca:1e:6c:53:de:a3:33:50:82:3e:5f:b1: 8b:4f:6e:12:f1:f6:b7:68:87:f9:3b:cb:0f:61:41: 2c:a1:c8:d4:d8:c3:1e:0c:a6:82:31:f2:ea:21:c6: ec:1a:d3:6d:b5:fd:72:01:2a:4a:a2:2c:40:41:c1: 0d:ee:e9:cf:00:e6:a3:5a:69:c3:8d:58:3b:cc:99: be:5f:6b:6d:d7:46:8d:29:51:6a:81:d1:fb:a2:f9: 88:26:d1:3b:d3:b8:eb:8d:83:ff:9e:69:9a:19:6f: ba:74:bd:f1:f5:89:73:c8:bd:35:53:62:68:21:12: c8:e6:83:fd:96:0b:5e:9e:94:60:67:01:d8:73:f7: 3e:ce:fe:fd:f3:f7:dc:a1:57:f1:78:6a:5a:44:2e: 26:99:b8:fb:ac:75:cd:1b:92:f3:06:e2:a0:c0:49: 52:d8:14:c5:3f:a8:c3:d4:a2:83:88:4b:f9:1e:12: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6C:05:22:8C:26:2F:9B:1C:0E:A2:A2:64:8E:E2:97:A8:E1:E3:75 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:df:53:7b:9d:97:e3:05:24:f1:a3:99:07:30:18:57:ea:e0: 72:e6:be:13:3d:94:35:d9:a5:ea:d4:ac:d9:d3:1f:25:5a:50: 41:e8:a8:a1:f6:b8:25:3b:37:6d:5a:29:1b:e9:0b:71:5d:7d: 39:82:96:f3:61:75:5a:f9:b0:22:bf:8d:d2:7b:11:de:d9:a8: 80:7e:7b:7f:6f:06:d0:34:b0:f5:01:b3:41:91:91:9a:b8:3c: e3:35:67:dc:0f:52:31:67:ac:88:3c:53:e1:fd:99:79:f8:39: 6a:69:7a:51:c1:5f:b6:c2:28:47:e5:51:32:79:df:e6:6b:6f: 3b:8f:34:e9:aa:aa:58:85:37:2a:16:41:b2:4d:a9:a7:0f:b8: 54:7f:b0:7e:39:43:07:c3:1f:0b:e8:cc:78:d1:55:66:aa:18: 38:5c:13:ea:d4:69:d1:d9:d1:41:13:32:de:a1:a5:74:13:c7: bb:71:37:9c:e5:17:e4:59:ff:79:fb:4f:c0:e9:9f:e1:39:26: ae:8f:9d:01:1f:5a:8c:7c:b1:ec:2d:f2:f4:43:fc:a4:a0:74: 5a:ad:b5:c9:b6:b3:79:ae:e7:fa:bc:4b:f5:d9:ad:8e:04:75: 77:57:79:77:4e:67:a1:68:ef:73:81:ba:55:ba:aa:5b:e3:71: 27:06:e9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUwOTE3MDE0ODM1WhcNMjUwOTI0MDE0ODM1WjAYMRYwFAYD VQQDEw02OGNhMTM3NC0yZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YfGNwYhE2VFUSqRKrA2tt8N7UyZkOEdBEXnARCEQnD47uHK9kdl1NZm7bcl VU+pEUEm+s95vFDWAYyZlKsdMDeWsF+28Do/2j1w0vLKHmxT3qMzUII+X7GLT24S 8fa3aIf5O8sPYUEsocjU2MMeDKaCMfLqIcbsGtNttf1yASpKoixAQcEN7unPAOaj WmnDjVg7zJm+X2tt10aNKVFqgdH7ovmIJtE707jrjYP/nmmaGW+6dL3x9YlzyL01 U2JoIRLI5oP9lgtenpRgZwHYc/c+zv798/fcoVfxeGpaRC4mmbj7rHXNG5LzBuKg wElS2BTFP6jD1KKDiEv5HhLQ3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFsBSKM Ji+bHA6iomSO4peo4eN1MB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA331N7nZfjBSTxo5kHMBhX6uBy5r4TPZQ12aXq1KzZ0x8lWlBB6Kih 9rglOzdtWikb6QtxXX05gpbzYXVa+bAiv43SexHe2aiAfnt/bwbQNLD1AbNBkZGa uDzjNWfcD1IxZ6yIPFPh/Zl5+DlqaXpRwV+2wihH5VEyed/ma287jzTpqqpYhTcq FkGyTamnD7hUf7B+OUMHwx8L6Mx40VVmqhg4XBPq1GnR2dFBEzLeoaV0E8e7cTec 5RfkWf95+0/A6Z/hOSauj50BH1qMfLHsLfL0Q/ykoHRarbXJtrN5ruf6vEv12a2O BHV3V3l3TmehaO9zgbpVuqpb43EnBunA -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:51 2025 by rpki-client