$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: n0P/t52jfkPNsMJqPEjDkVSVcSYVBwIVp59B+XMgq64= Subject key identifier: 48:BC:22:73:82:62:EB:8D:20:70:C8:6C:FA:4E:D3:0E:06:FE:E8:AF Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: D6 Signing time: Sat 23 Aug 2025 05:43:30 +0000 Manifest this update: Sat 23 Aug 2025 05:43:30 +0000 Manifest next update: Sat 30 Aug 2025 05:43:30 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: fxHWja6BIu0FUQL1KrkeB+EltoYrBMo4wJh7RefvO6s=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Aug 23 05:43:30 2025 GMT Not After : Aug 30 05:43:30 2025 GMT Subject: CN=68a95502-454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:46:9e:0b:ce:a2:36:5e:90:cc:9d:ab:c6: c6:6d:b5:27:40:06:29:d0:62:18:d7:c6:9e:f5:23: 79:ea:6d:c6:16:6e:c2:28:39:b9:90:92:85:04:33: 37:92:68:c1:89:54:4d:6e:bf:51:8d:f7:91:aa:36: fe:4c:18:bc:2a:fa:7f:30:30:eb:5c:6b:75:86:eb: b0:e5:b0:15:bf:7b:96:23:e3:16:e0:8e:ea:a0:64: 04:f6:c2:6e:c2:30:a4:46:cc:d2:4f:f7:07:44:c8: dc:9e:03:3b:1a:a0:92:c4:cf:17:d7:57:b4:dd:36: c8:58:fd:88:d8:17:4c:8d:22:5b:27:61:ca:03:71: 6b:de:3c:95:34:28:2e:41:ce:41:22:1b:84:3a:2b: c1:ad:b4:54:97:6f:a8:27:45:0f:e8:f0:60:0b:1c: 3f:25:39:3b:7e:31:3c:f8:14:19:7f:b2:61:0b:cd: cf:11:4d:c0:19:4c:a3:79:cd:49:dd:04:3c:2a:96: 98:f5:25:4e:09:4c:5a:79:2c:7e:20:48:28:2a:bd: 71:48:66:02:14:c9:36:49:f5:b1:1f:07:c9:48:6a: 24:b7:f2:9f:e3:b0:0f:87:a0:b7:af:32:19:d6:38: e2:66:16:bf:4c:b4:42:87:13:ce:36:43:6f:55:3e: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:22:73:82:62:EB:8D:20:70:C8:6C:FA:4E:D3:0E:06:FE:E8:AF X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:20:64:95:c3:52:ab:e6:1d:18:95:46:25:31:2b:33:ac:55: 81:b7:90:8d:12:fc:57:55:76:59:cd:3a:92:65:6f:69:ae:21: f2:5e:ca:8e:08:4e:10:15:01:f3:5f:a1:42:d0:81:6a:c7:76: 0e:64:67:45:da:07:0c:21:28:4d:54:08:de:50:6c:24:5d:2f: d6:06:59:1c:89:77:b5:2a:f9:c6:18:f3:0b:c0:1c:46:44:16: 12:f3:f5:04:60:ee:f4:7d:81:e2:80:4e:66:69:c4:ad:5e:ba: b0:e1:ae:21:8a:56:76:30:fb:6c:13:9b:d7:63:ec:69:f8:1d: 7a:7a:f5:c9:00:29:6a:b8:17:56:0b:44:ac:b8:71:b6:63:16: 0f:d4:6e:23:a8:0c:46:e1:20:08:de:b6:fd:f5:99:4c:8d:d8: 23:83:92:3b:67:fe:b9:d5:40:c0:5c:5f:56:ba:18:e5:73:70: 29:5b:b1:54:82:2a:e8:f6:f3:3c:a3:a9:99:a0:e7:f9:4a:23: 14:57:7f:67:5e:2d:24:f3:52:32:11:87:6f:87:a2:28:4d:63: 3c:88:41:c8:79:7f:a3:00:71:69:f2:a5:43:89:01:86:71:41: f7:40:9a:95:cc:41:be:0d:ed:2a:af:8a:65:ef:d3:7f:3e:c0: f0:4c:0f:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUwODIzMDU0MzMwWhcNMjUwODMwMDU0MzMwWjAYMRYwFAYD VQQDEw02OGE5NTUwMi00NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gdGngvOojZekMydq8bGbbUnQAYp0GIY18ae9SN56m3GFm7CKDm5kJKFBDM3 kmjBiVRNbr9RjfeRqjb+TBi8Kvp/MDDrXGt1huuw5bAVv3uWI+MW4I7qoGQE9sJu wjCkRszST/cHRMjcngM7GqCSxM8X11e03TbIWP2I2BdMjSJbJ2HKA3Fr3jyVNCgu Qc5BIhuEOivBrbRUl2+oJ0UP6PBgCxw/JTk7fjE8+BQZf7JhC83PEU3AGUyjec1J 3QQ8KpaY9SVOCUxaeSx+IEgoKr1xSGYCFMk2SfWxHwfJSGokt/Kf47APh6C3rzIZ 1jjiZha/TLRChxPONkNvVT6e3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi8InOC YuuNIHDIbPpO0w4G/uivMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYIGSVw1Kr5h0YlUYlMSszrFWBt5CNEvxXVXZZzTqSZW9priHyXsqO CE4QFQHzX6FC0IFqx3YOZGdF2gcMIShNVAjeUGwkXS/WBlkciXe1KvnGGPMLwBxG RBYS8/UEYO70fYHigE5macStXrqw4a4hilZ2MPtsE5vXY+xp+B16evXJAClquBdW C0SsuHG2YxYP1G4jqAxG4SAI3rb99ZlMjdgjg5I7Z/651UDAXF9Wuhjlc3ApW7FU giro9vM8o6mZoOf5SiMUV39nXi0k81IyEYdvh6IoTWM8iEHIeX+jAHFp8qVDiQGG cUH3QJqVzEG+De0qr4pl79N/PsDwTA89 -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:40 2025 by rpki-client