$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json) Hash identifier: dkV3/tNnkYyQo96DbvNvja60QhpGc6d3I4ZE6VtKg4g= Subject key identifier: 86:0E:20:CA:A7:92:75:CB:AA:5F:BB:F6:53:DA:99:AC:38:52:39:3D Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft Manifest number: 01FC Signing time: Fri 05 Sep 2025 02:43:46 +0000 Manifest this update: Fri 05 Sep 2025 02:43:45 +0000 Manifest next update: Fri 12 Sep 2025 02:43:45 +0000 Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: Qp/a9cjCYSbsl7QczAcneYSyrmpKn9m5GNtnA6IqnMk=) 2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=) 3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6 Validity Not Before: Sep 5 02:43:45 2025 GMT Not After : Sep 12 02:43:45 2025 GMT Subject: CN=68ba4e61-0c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:58:03:f6:79:6d:ac:ce:e4:51:54:44:28: 46:13:a4:d3:67:45:af:cd:7a:9c:dc:6d:95:b7:6b: 96:76:ce:bd:98:3e:d6:4c:04:4a:98:e4:f8:f5:c7: 7f:c7:c4:22:6b:2c:44:14:cf:c5:2a:71:10:2c:b8: 65:2f:9f:64:fb:91:38:80:8b:20:b2:11:c1:94:e7: 4a:ba:5a:68:95:82:cf:5a:ab:e3:70:81:c2:a1:a3: 30:b2:9e:1d:db:93:7b:6f:b8:48:c9:51:32:14:e2: f5:fe:3b:62:23:68:2d:45:e8:4f:92:e8:e6:a2:ac: e0:63:a3:0b:55:e3:44:54:fc:67:26:6c:c4:09:47: 6f:7b:d1:dd:c3:bd:af:d5:29:01:fd:52:53:3f:67: b1:1a:5f:e9:f7:75:21:9c:a0:d5:c0:5e:67:bc:83: cf:7d:1d:85:dd:88:4a:fc:42:30:fe:63:47:5e:08: 85:86:c9:77:bb:b1:2f:c2:42:08:77:77:db:d6:70: 4f:77:ab:6f:fe:d4:69:4a:3c:d8:16:35:67:c0:c4: eb:39:74:a7:50:e7:08:e8:e3:f7:ba:e5:88:85:8d: 1e:61:d5:81:04:b2:95:84:0f:e7:65:fa:a0:12:a0: 81:eb:a5:fc:4c:0b:9a:58:19:f4:38:fa:78:28:b6: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0E:20:CA:A7:92:75:CB:AA:5F:BB:F6:53:DA:99:AC:38:52:39:3D X509v3 Authority Key Identifier: keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c8:23:cb:d2:8b:df:57:93:cb:24:06:a3:3e:12:cb:77:68: 67:d8:84:c8:f7:16:64:5d:5f:3a:df:b1:8a:65:7c:a7:38:b9: 53:a7:04:02:b9:83:d6:46:45:dd:4c:b1:ab:12:39:5a:64:41: 4b:31:77:41:92:37:51:81:c8:c1:ba:51:9f:23:dd:18:f8:9f: 41:47:90:94:4e:55:7e:ae:de:14:e2:e9:59:34:9e:b2:ef:8c: dc:91:c9:f6:23:05:c2:81:c8:37:e9:2e:02:f8:f3:5b:6e:18: e8:cc:e5:05:ad:dd:e0:15:40:6e:28:89:01:76:26:1b:12:e0: af:6d:6b:f2:ad:22:57:2f:f1:4b:a0:b2:ac:5a:0a:a9:93:a8: 5f:23:5e:70:c2:4d:34:67:5d:e6:45:34:ca:be:bd:19:a6:7c: 6f:e1:f9:db:41:02:e9:39:94:5d:b9:5d:e5:a1:dc:0e:b2:8f: a1:8b:54:eb:c9:c2:30:2a:97:31:b1:72:6b:13:fd:9e:a0:09: 60:d2:3e:9c:a2:c8:bc:df:c8:75:ef:55:b5:27:2d:5b:3f:b3: 3c:88:91:a6:25:03:cb:ad:b8:f7:f5:90:aa:d0:20:f0:b6:d3: ad:b4:cd:76:43:ef:ea:49:a9:6f:60:b3:a2:8b:d9:91:28:7d: f8:42:3c:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5 QzUxMjIyRTYwHhcNMjUwOTA1MDI0MzQ1WhcNMjUwOTEyMDI0MzQ1WjAYMRYwFAYD VQQDEw02OGJhNGU2MS0wYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNJYA/Z5bazO5FFURChGE6TTZ0WvzXqc3G2Vt2uWds69mD7WTARKmOT49cd/ x8QiayxEFM/FKnEQLLhlL59k+5E4gIsgshHBlOdKulpolYLPWqvjcIHCoaMwsp4d 25N7b7hIyVEyFOL1/jtiI2gtRehPkujmoqzgY6MLVeNEVPxnJmzECUdve9Hdw72v 1SkB/VJTP2exGl/p93UhnKDVwF5nvIPPfR2F3YhK/EIw/mNHXgiFhsl3u7EvwkII d3fb1nBPd6tv/tRpSjzYFjVnwMTrOXSnUOcI6OP3uuWIhY0eYdWBBLKVhA/nZfqg EqCB66X8TAuaWBn0OPp4KLbK0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYOIMqn knXLql+79lPamaw4Ujk9MB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI UnVhRU8yRW8zU0NjVVNJdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAByCPL0ovfV5PLJAajPhLLd2hn2ITI9xZkXV8637GKZXynOLlTpwQC uYPWRkXdTLGrEjlaZEFLMXdBkjdRgcjBulGfI90Y+J9BR5CUTlV+rt4U4ulZNJ6y 74zckcn2IwXCgcg36S4C+PNbbhjozOUFrd3gFUBuKIkBdiYbEuCvbWvyrSJXL/FL oLKsWgqpk6hfI15wwk00Z13mRTTKvr0Zpnxv4fnbQQLpOZRduV3lodwOso+hi1Tr ycIwKpcxsXJrE/2eoAlg0j6cosi838h171W1Jy1bP7M8iJGmJQPLrbj39ZCq0CDw ttOttM12Q+/qSalvYLOii9mRKH34QjwN -----END CERTIFICATE-----Generated at Sat Sep 6 12:02:27 2025 by rpki-client