$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: lhdm7dJKuNenIm1c5Wabn1+w7i9EaI6fLPSH1Ucpbx8= Subject key identifier: AF:95:E2:2A:44:BF:AA:6A:E5:9C:58:6F:63:EC:4A:00:32:B4:AE:91 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: F3 Signing time: Sun 19 Oct 2025 08:10:48 +0000 Manifest this update: Sun 19 Oct 2025 08:10:48 +0000 Manifest next update: Sun 26 Oct 2025 08:10:48 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: baUPzawBKyy+4kG31nF+JSEiOjNs4vxlQ8hH8QIrhFA=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: Xtt+dRvGTSadJPsj0h+bYSdSHUpop3mgErELCN/AU2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Oct 19 08:10:48 2025 GMT Not After : Oct 26 08:10:48 2025 GMT Subject: CN=68f49d08-7761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:9c:9a:86:9c:d6:cc:b9:14:35:7c:da:93: 8a:de:e0:b1:2f:0b:f4:b3:b0:bf:d7:82:41:df:85: c6:8b:f1:86:02:79:a5:0d:6c:c4:4e:de:60:87:de: e2:ac:31:f4:b7:9a:d4:d2:b9:b5:c3:61:ad:f9:6c: d4:53:84:c8:de:df:7d:2c:cc:6f:28:8d:f5:be:f4: c2:e3:66:5c:e7:d9:86:6e:9e:67:fa:45:ee:99:ae: 63:5e:19:eb:e6:f2:ff:68:95:ee:7c:9d:60:83:a1: 11:60:d3:0c:a3:47:67:c1:40:0e:0f:93:57:6d:4b: 20:64:a3:23:09:6f:17:12:87:9f:da:68:f1:c8:59: b9:8d:f5:d5:dc:a5:a0:d0:90:ac:2a:c1:63:a1:b9: 7f:a5:d3:89:d5:79:9d:19:ea:1d:f4:d3:2d:84:75: 50:ee:ec:ea:cc:ca:e1:30:ce:a0:22:f4:0d:c0:29: 36:c4:50:0d:ea:8b:75:1a:33:d8:e5:c8:1d:01:f1: 96:a7:2e:5b:45:0f:0e:6a:f4:4c:e7:f1:85:c7:da: 6c:5e:a8:b4:67:d8:69:30:35:e6:96:76:b7:11:4b: fe:a0:a2:aa:31:05:44:67:10:b5:96:a6:1a:dd:fb: dc:85:7a:eb:7d:b6:4b:b2:ec:53:28:f0:bd:11:45: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:95:E2:2A:44:BF:AA:6A:E5:9C:58:6F:63:EC:4A:00:32:B4:AE:91 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c2:8f:63:84:12:fd:69:cb:e5:07:7f:da:7c:46:b0:45:0f: 7e:07:d2:6e:03:e9:e2:dd:a8:34:7d:c8:59:bf:aa:1f:8f:b2: 52:df:45:c3:b5:cc:44:33:bb:d7:7a:1d:54:1b:b2:c0:17:05: ae:b7:21:64:33:46:26:d7:6f:a9:4b:40:2f:d5:fe:89:4b:5d: 49:5c:e0:c8:b2:78:59:3b:4e:e1:c5:17:9d:9a:b6:39:c9:0b: 58:d1:e4:ad:57:05:05:91:1c:53:4d:d1:1c:cf:91:90:08:bb: 33:c5:ab:8c:95:49:8d:2b:57:b1:fe:dc:f9:8e:fe:fd:0e:b7: 33:09:52:4e:19:6a:1c:6a:03:89:81:eb:2d:9d:39:a3:ae:ed: e0:1a:b9:39:f5:45:8a:87:55:2f:7d:4f:2e:c3:48:f6:82:fe: ae:68:d8:c5:ec:8c:1b:d3:87:91:82:e3:36:8c:11:5c:4d:74: 62:10:3f:22:f5:a6:ef:a2:b8:ff:0a:20:7d:14:99:55:df:87: ef:6a:72:68:d4:4e:be:43:bf:72:49:03:54:e2:95:2f:e3:71: 91:cb:46:c4:44:67:14:59:8b:96:e7:42:98:ca:fc:1c:da:a3: 7a:29:d3:af:a4:15:77:f9:75:ec:51:a6:03:b2:30:c1:18:3d: ed:87:c3:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjUxMDE5MDgxMDQ4WhcNMjUxMDI2MDgxMDQ4WjAYMRYwFAYD VQQDEw02OGY0OWQwOC03NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ2cmoac1sy5FDV82pOK3uCxLwv0s7C/14JB34XGi/GGAnmlDWzETt5gh97i rDH0t5rU0rm1w2Gt+WzUU4TI3t99LMxvKI31vvTC42Zc59mGbp5n+kXuma5jXhnr 5vL/aJXufJ1gg6ERYNMMo0dnwUAOD5NXbUsgZKMjCW8XEoef2mjxyFm5jfXV3KWg 0JCsKsFjobl/pdOJ1XmdGeod9NMthHVQ7uzqzMrhMM6gIvQNwCk2xFAN6ot1GjPY 5cgdAfGWpy5bRQ8OavRM5/GFx9psXqi0Z9hpMDXmlna3EUv+oKKqMQVEZxC1lqYa 3fvchXrrfbZLsuxTKPC9EUXQXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+V4ipE v6pq5ZxYb2PsSgAytK6RMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3wo9jhBL9acvlB3/afEawRQ9+B9JuA+ni3ag0fchZv6ofj7JS30XD tcxEM7vXeh1UG7LAFwWutyFkM0Ym12+pS0Av1f6JS11JXODIsnhZO07hxRedmrY5 yQtY0eStVwUFkRxTTdEcz5GQCLszxauMlUmNK1ex/tz5jv79DrczCVJOGWocagOJ gestnTmjru3gGrk59UWKh1UvfU8uw0j2gv6uaNjF7Iwb04eRguM2jBFcTXRiED8i 9abvorj/CiB9FJlV34fvanJo1E6+Q79ySQNU4pUv43GRy0bERGcUWYuW50KYyvwc 2qN6KdOvpBV3+XXsUaYDsjDBGD3th8Mb -----END CERTIFICATE-----Generated at Tue Oct 21 05:11:22 2025 by rpki-client