$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: I4o5TI027E7RZt97AuHwDgLEg2amEqtUk+gHSIYrTbw= Subject key identifier: 05:7B:3B:C2:27:F5:5F:20:03:7B:D4:58:DF:A2:2C:68:4C:A8:EF:97 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 05C9 Signing time: Sat 23 Aug 2025 00:28:18 +0000 Manifest this update: Sat 23 Aug 2025 00:28:17 +0000 Manifest next update: Sat 30 Aug 2025 00:28:17 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: /sRib90IkZlPYCY9y0fwVLNqkTVAvtWz0o+yX78MmLU=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: h7NQdBf7/WACdOSa/nz3xaJMmARVVv7RYZRpaElBghA=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: 6joZNeakIUjEpd+YMt0FiTiaFqDSbAMcOBqVVrqw5x4=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: nlYpAXZDAkP9jxeYqTWJb2nQcc7Mu88sU4gd4loVu3I=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: iJ4zqOfhJNhHuoAZdvWWzKmADnr0nYywfMeTT9vEa3M=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: iwHI+lWhCkdLiN75C3FH0nP3GqiBf7AEpFh/Xx5uzNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Aug 23 00:28:17 2025 GMT Not After : Aug 30 00:28:17 2025 GMT Subject: CN=68a90b21-0327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:c3:22:1d:8c:4e:69:77:c4:dd:a0:61:d2: a0:1a:1f:de:95:2a:55:3a:02:d8:12:8f:4d:95:dc: c3:44:77:98:d1:22:6a:43:8a:bb:da:ab:93:82:cb: 71:59:d0:05:86:69:40:2c:67:a3:5a:63:88:39:94: f9:f6:25:c2:5c:fb:18:57:d7:40:34:d4:2d:00:4d: 23:ad:22:89:a6:2e:31:3c:f5:1c:7f:d0:52:6e:df: 65:ef:eb:da:7d:a1:7d:fd:28:9e:d2:7d:2a:a5:8b: 1f:e3:d4:74:61:2e:b9:a4:39:6b:2c:9b:6c:15:9c: 62:19:0f:86:a7:c0:f3:a7:04:e8:2c:de:de:5d:d6: 92:03:1e:55:02:3c:6d:57:b6:ce:b8:fa:76:7a:2f: a8:77:f3:96:38:6f:1b:ca:fb:23:63:68:ef:a4:fe: b8:36:34:1f:92:0c:bd:a5:7a:6e:2d:9e:d5:ab:09: 05:a0:21:d0:e3:11:04:f7:28:8e:4e:aa:13:d3:2d: 43:21:24:ac:d9:68:59:06:c5:5c:5c:d1:b9:74:05: 3c:9f:88:a1:93:47:d0:c9:2d:9b:65:13:19:7d:f5: f2:44:3d:5c:a0:d5:2f:aa:64:c9:33:42:81:9a:1a: ae:d6:f6:43:44:18:cb:b2:e7:bb:4d:ac:19:52:0d: 87:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7B:3B:C2:27:F5:5F:20:03:7B:D4:58:DF:A2:2C:68:4C:A8:EF:97 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1d:17:66:03:cb:91:fa:7f:f4:1c:b2:09:28:22:40:2d:86: 4f:53:61:31:e6:51:da:4e:27:71:c7:05:97:d2:53:c2:04:67: 08:0c:52:6d:76:6a:9e:98:aa:73:93:76:40:d8:e2:20:05:8a: e5:52:d3:1b:30:b1:96:55:34:4e:34:37:be:fb:d9:cc:5f:c1: 72:53:60:3d:55:23:9c:6b:a6:78:25:2f:72:56:89:c1:9f:6a: 71:c1:a9:80:67:43:44:70:f5:c6:86:fd:f8:e7:4d:36:bc:ee: 5d:e9:b5:49:c1:77:2f:fe:20:ba:ca:02:3d:f7:c6:01:c9:d7: df:95:85:4b:34:0a:5f:ce:78:9f:03:b4:cd:0e:5c:75:e0:0b: b1:95:80:31:08:88:48:3d:c8:d0:69:92:8b:0a:dd:75:29:09: 5a:e4:4c:02:a6:a5:61:4a:64:b9:77:6b:7a:e1:78:9c:fa:37: 20:e4:0b:22:30:ec:9f:d3:3d:52:a6:43:7e:6e:dd:fb:7b:3e: 96:c0:54:f8:f3:8e:8a:43:76:ef:8d:eb:bf:1e:61:bb:73:9b: 87:de:0e:2d:b2:e4:8b:c1:aa:93:8b:ac:a4:3e:9e:5d:33:ad: 15:ac:8f:83:44:ec:bc:86:76:63:89:fd:a5:59:3d:42:73:a9: 0c:f7:4e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUwODIzMDAyODE3WhcNMjUwODMwMDAyODE3WjAYMRYwFAYD VQQDEw02OGE5MGIyMS0wMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4/DIh2MTml3xN2gYdKgGh/elSpVOgLYEo9NldzDRHeY0SJqQ4q72quTgstx WdAFhmlALGejWmOIOZT59iXCXPsYV9dANNQtAE0jrSKJpi4xPPUcf9BSbt9l7+va faF9/Sie0n0qpYsf49R0YS65pDlrLJtsFZxiGQ+Gp8DzpwToLN7eXdaSAx5VAjxt V7bOuPp2ei+od/OWOG8byvsjY2jvpP64NjQfkgy9pXpuLZ7VqwkFoCHQ4xEE9yiO TqoT0y1DISSs2WhZBsVcXNG5dAU8n4ihk0fQyS2bZRMZffXyRD1coNUvqmTJM0KB mhqu1vZDRBjLsue7TawZUg2HSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAV7O8In 9V8gA3vUWN+iLGhMqO+XMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNHRdmA8uR+n/0HLIJKCJALYZPU2Ex5lHaTidxxwWX0lPCBGcIDFJt dmqemKpzk3ZA2OIgBYrlUtMbMLGWVTRONDe++9nMX8FyU2A9VSOca6Z4JS9yVonB n2pxwamAZ0NEcPXGhv345002vO5d6bVJwXcv/iC6ygI998YBydfflYVLNApfznif A7TNDlx14AuxlYAxCIhIPcjQaZKLCt11KQla5EwCpqVhSmS5d2t64Xic+jcg5Asi MOyf0z1SpkN+bt37ez6WwFT4846KQ3bvjeu/HmG7c5uH3g4tsuSLwaqTi6ykPp5d M60VrI+DROy8hnZjif2lWT1Cc6kM904S -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:47 2025 by rpki-client