$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: 16FdI/DKPeo3HXBzM9pl4LNMvVdHlg2IVhnRfiovNdI= Subject key identifier: 19:DF:3C:29:D1:BE:09:FF:D6:23:40:08:55:FC:53:03:95:6D:D7:3A Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 0102 Signing time: Fri 19 Sep 2025 05:45:22 +0000 Manifest this update: Fri 19 Sep 2025 05:45:21 +0000 Manifest next update: Fri 26 Sep 2025 05:45:21 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: rQS+rCjs04HaA9xxAr41caYodidj9PnaDB2CRgsF2dI=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Sep 19 05:45:21 2025 GMT Not After : Sep 26 05:45:21 2025 GMT Subject: CN=68ccedf2-9644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:03:58:a4:fa:90:10:32:63:81:19:4c:af: e4:c1:71:3a:31:5d:3f:1e:23:22:10:0b:27:a4:57: 86:21:68:fa:fc:fb:0a:5c:f1:fa:80:c4:5c:b2:87: cb:f6:41:cf:88:57:ef:e5:96:6e:e3:b6:e3:b2:f5: 78:01:55:61:87:00:1a:9f:b9:40:d3:a7:b9:8a:b5: 3f:0b:2a:f0:58:56:eb:84:23:95:c7:3e:d4:a8:4d: 97:c0:3c:6f:c7:a8:2f:2c:a2:2f:8c:fc:38:4a:05: bd:2b:af:b3:38:c9:cf:6d:d5:ce:a7:a7:16:77:16: cf:9c:b2:26:cd:4c:71:ac:c7:fc:4c:ea:7a:68:0e: db:3e:05:02:16:cf:ac:3d:ee:1e:78:04:c7:d6:8d: 4b:78:ae:c1:74:c6:bf:1a:32:5a:dd:22:23:fa:da: 6a:8b:2c:23:c1:d0:03:d5:0d:9e:6d:fa:1d:7e:75: c4:03:27:a3:a2:17:63:f2:b4:0c:02:6f:18:a2:db: d8:44:91:7b:d6:86:6d:a0:51:57:eb:d0:de:13:64: b0:c1:73:f0:19:8f:0a:19:4f:0e:3c:13:86:3e:5c: 55:bc:2d:ae:7c:9d:a0:3a:ad:99:45:40:27:73:47: 82:48:2c:63:48:2e:6c:81:2a:0d:5a:5b:8d:41:e0: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:3C:29:D1:BE:09:FF:D6:23:40:08:55:FC:53:03:95:6D:D7:3A X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fa:b7:83:29:87:d3:3f:6f:16:29:e6:50:f3:9f:aa:df:94: 7c:49:87:0a:34:cf:15:76:73:3e:00:8d:e7:65:ec:23:0c:32: 45:7a:fc:d4:59:1c:09:80:9e:36:0f:f7:9b:89:96:03:41:f8: 2a:6e:06:de:04:76:8e:ef:23:a5:4f:53:c2:36:ca:70:93:ed: 44:87:f4:a2:4e:e7:3a:1a:31:86:b3:d0:22:9e:4f:a0:67:b1: 45:c6:55:13:2a:34:4f:03:2b:79:de:bc:9d:04:90:81:25:98: 03:ca:c2:3b:5c:c6:3d:16:7f:32:ec:3e:ba:dc:e1:52:4b:bf: 2e:8b:54:1e:93:d4:41:4f:95:57:bd:b8:9a:a5:b9:cf:d6:44: 56:16:91:e1:ff:c6:65:0b:cc:2a:6d:b5:fc:5f:87:df:53:88: 0a:0d:61:64:d5:21:fd:4c:6f:db:f8:5f:e8:3e:08:ed:c9:28: 04:9e:14:97:0a:38:4f:6f:c3:05:cd:ef:3d:e3:cb:e1:60:33: 95:2c:4d:c8:18:13:c8:14:09:cd:20:ec:ba:a9:99:b7:22:60: ae:92:d4:d2:b9:91:d3:e6:ff:66:1b:d9:fb:71:d2:47:15:40: 10:8a:6f:51:40:d6:ea:f1:5d:1d:e3:92:58:4a:7f:2c:03:d7: e8:3d:35:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUwOTE5MDU0NTIxWhcNMjUwOTI2MDU0NTIxWjAYMRYwFAYD VQQDEw02OGNjZWRmMi05NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5UDWKT6kBAyY4EZTK/kwXE6MV0/HiMiEAsnpFeGIWj6/PsKXPH6gMRcsofL 9kHPiFfv5ZZu47bjsvV4AVVhhwAan7lA06e5irU/CyrwWFbrhCOVxz7UqE2XwDxv x6gvLKIvjPw4SgW9K6+zOMnPbdXOp6cWdxbPnLImzUxxrMf8TOp6aA7bPgUCFs+s Pe4eeATH1o1LeK7BdMa/GjJa3SIj+tpqiywjwdAD1Q2ebfodfnXEAyejohdj8rQM Am8YotvYRJF71oZtoFFX69DeE2SwwXPwGY8KGU8OPBOGPlxVvC2ufJ2gOq2ZRUAn c0eCSCxjSC5sgSoNWluNQeCEqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnfPCnR vgn/1iNACFX8UwOVbdc6MB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf+reDKYfTP28WKeZQ85+q35R8SYcKNM8VdnM+AI3nZewjDDJFevzU WRwJgJ42D/ebiZYDQfgqbgbeBHaO7yOlT1PCNspwk+1Eh/SiTuc6GjGGs9Aink+g Z7FFxlUTKjRPAyt53rydBJCBJZgDysI7XMY9Fn8y7D663OFSS78ui1Qek9RBT5VX vbiapbnP1kRWFpHh/8ZlC8wqbbX8X4ffU4gKDWFk1SH9TG/b+F/oPgjtySgEnhSX CjhPb8MFze8948vhYDOVLE3IGBPIFAnNIOy6qZm3ImCuktTSuZHT5v9mG9n7cdJH FUAQim9RQNbq8V0d45JYSn8sA9foPTUL -----END CERTIFICATE-----Generated at Fri Sep 19 07:19:25 2025 by rpki-client