$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: /tgqg4wfxPv1ZSPSIYBUtCcy5Rk2cdl5KoCzxOsbmnk= Subject key identifier: 50:AA:FB:E9:B2:52:02:58:DB:9A:0F:CA:03:06:68:21:6D:FD:46:B2 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E84 Signing time: Thu 18 Sep 2025 17:51:57 +0000 Manifest this update: Thu 18 Sep 2025 17:51:57 +0000 Manifest next update: Thu 25 Sep 2025 17:51:57 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: NIk2299AHSaqshT/WQmXFZS8E9MqOkoOF9MgbyZoLN4=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3724 (0xe8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Sep 18 17:51:57 2025 GMT Not After : Sep 25 17:51:57 2025 GMT Subject: CN=68cc46bd-05b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:f2:b0:b5:ce:ba:9d:19:6c:8e:9c:64:52: 8f:a9:15:0e:af:53:a7:66:9a:04:3f:2d:17:c5:0c: 47:83:a8:77:0e:16:5f:01:26:dd:ca:81:24:be:58: 01:06:57:42:06:11:a4:55:09:ac:8a:f1:4c:ae:0f: d4:55:4f:40:5e:d0:c7:e0:9f:ff:8f:a3:e9:8d:f4: 83:22:e7:6e:be:4f:c9:b7:e0:ee:f6:f4:92:85:79: 21:b4:3c:02:29:53:5e:5c:fc:8f:96:a7:aa:7b:41: db:30:6b:43:8f:63:40:b9:b4:e1:5e:71:fe:e4:76: 98:ec:a8:c7:5d:0b:39:48:eb:dd:87:c9:cf:09:03: 1b:e8:72:a5:78:24:6b:49:1a:3f:cd:33:8d:53:06: 62:99:fe:e0:65:ee:b7:bd:48:50:77:74:6e:12:e7: 3d:48:97:cc:46:6c:1b:33:a1:45:ec:9c:b6:ed:f7: 41:4e:80:b4:3e:34:fd:af:e2:e5:f3:ee:96:65:6e: e6:47:ff:8a:76:1e:66:e3:79:50:b1:72:2d:54:98: 1d:6b:4e:b1:52:4e:91:23:07:98:2b:e8:1f:c5:ed: 24:b9:fa:c6:bf:a5:bf:46:83:05:8e:82:71:d8:39: 5f:64:b0:89:71:0c:18:de:2b:7d:ba:2c:28:18:08: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:FB:E9:B2:52:02:58:DB:9A:0F:CA:03:06:68:21:6D:FD:46:B2 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e8:d9:bf:48:f0:08:76:32:67:a6:33:ba:5e:be:1c:79:4c: 6c:45:0a:7b:ad:97:bc:c7:fd:fb:8f:1b:ac:37:8a:ba:a3:db: 5c:11:35:dd:a3:71:ac:88:ed:3d:77:27:ff:be:24:1d:d5:45: 24:3e:b3:25:f2:89:90:9a:5a:7d:9d:39:a6:cc:47:49:81:6b: 59:52:c9:dd:6e:24:6c:ce:44:d0:74:d0:9f:b4:53:0e:61:94: 1a:ee:47:f7:57:e0:e6:77:37:ec:81:dd:bc:6b:16:33:d1:f4: ac:44:cf:2d:7b:e0:c6:d1:c7:50:1a:8b:84:44:23:a6:d8:92: 23:d8:6d:26:e0:9d:2f:d4:4b:57:83:71:7f:47:92:ce:09:79: 47:af:f6:df:8c:91:0b:cc:d4:aa:e6:0d:b6:e4:9e:25:cc:51: 75:b2:a9:26:ec:25:46:74:ad:36:45:c4:ac:15:b5:60:d4:3c: 61:03:7f:78:db:52:f0:07:a5:d6:0f:c0:79:18:7d:54:f8:4b: e3:47:04:96:5b:cf:0c:05:9e:e0:67:cc:47:61:db:d5:80:2a: b0:1e:e1:a4:19:69:77:18:be:cc:71:94:37:c5:af:b9:af:89: 94:7d:86:d9:68:6e:1a:14:a2:6a:5a:77:55:7a:2d:fe:27:63: a3:47:11:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwOTE4MTc1MTU3WhcNMjUwOTI1MTc1MTU3WjAYMRYwFAYD VQQDEw02OGNjNDZiZC0wNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLDysLXOup0ZbI6cZFKPqRUOr1OnZpoEPy0XxQxHg6h3DhZfASbdyoEkvlgB BldCBhGkVQmsivFMrg/UVU9AXtDH4J//j6PpjfSDIuduvk/Jt+Du9vSShXkhtDwC KVNeXPyPlqeqe0HbMGtDj2NAubThXnH+5HaY7KjHXQs5SOvdh8nPCQMb6HKleCRr SRo/zTONUwZimf7gZe63vUhQd3RuEuc9SJfMRmwbM6FF7Jy27fdBToC0PjT9r+Ll 8+6WZW7mR/+Kdh5m43lQsXItVJgda06xUk6RIweYK+gfxe0kufrGv6W/RoMFjoJx 2DlfZLCJcQwY3it9uiwoGAi0vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCq++my UgJY25oPygMGaCFt/UayMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi6Nm/SPAIdjJnpjO6Xr4ceUxsRQp7rZe8x/37jxusN4q6o9tcETXd o3GsiO09dyf/viQd1UUkPrMl8omQmlp9nTmmzEdJgWtZUsndbiRszkTQdNCftFMO YZQa7kf3V+Dmdzfsgd28axYz0fSsRM8te+DG0cdQGouERCOm2JIj2G0m4J0v1EtX g3F/R5LOCXlHr/bfjJELzNSq5g225J4lzFF1sqkm7CVGdK02RcSsFbVg1DxhA394 21LwB6XWD8B5GH1U+EvjRwSWW88MBZ7gZ8xHYdvVgCqwHuGkGWl3GL7McZQ3xa+5 r4mUfYbZaG4aFKJqWndVei3+J2OjRxFp -----END CERTIFICATE-----Generated at Fri Sep 19 05:27:28 2025 by rpki-client