$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: XOHcw/bqm8Qn3madw5Q3M9FjDjl5YhIRi0AbCTilKic= Subject key identifier: C1:94:06:7B:FF:2C:E5:2A:61:DA:19:30:6F:BA:73:60:06:84:21:07 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 049A Signing time: Sat 23 Aug 2025 00:11:55 +0000 Manifest this update: Sat 23 Aug 2025 00:11:54 +0000 Manifest next update: Sat 30 Aug 2025 00:11:54 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: aaabTr2d8CfIgk0Bi0zuN1UcKWZ2uX4d2PzKcosi3bc=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: MtaWbSK5JAjEiEpHTj/1X7DdZqPg3BZxUlQCHg85KTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Aug 23 00:11:54 2025 GMT Not After : Aug 30 00:11:54 2025 GMT Subject: CN=68a9074b-5f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:8a:f4:57:da:94:40:d9:4d:67:41:44:d7: a2:34:1b:ef:c8:74:7e:17:c9:6f:0f:1a:d6:f2:a0: 3d:e0:dc:57:36:db:54:6c:e1:48:f4:31:e2:59:ef: bd:c2:8d:94:57:dc:dd:58:90:94:7b:eb:87:f0:a2: af:16:d5:df:f2:4f:f1:2a:75:6a:66:49:93:8e:58: 1e:e6:9f:23:dc:a4:bd:6b:ff:07:74:c0:22:5b:5b: d8:d7:25:b9:5e:42:09:81:cb:ab:72:90:b6:0e:13: 88:b1:fb:7f:14:d9:62:6d:13:93:af:d7:4e:66:d5: 82:46:a2:5e:97:71:9d:64:2a:6a:df:55:34:fa:ca: 8d:c0:94:25:51:10:37:30:cf:c8:2a:90:95:96:5d: 70:4d:62:6f:53:d2:67:01:2e:83:0f:f4:23:1b:fb: 73:55:58:75:68:2d:c8:96:f6:89:da:69:87:e9:aa: 4d:33:09:35:2f:35:7e:51:0e:67:6b:ae:d8:f3:64: ec:dc:bf:a8:7d:eb:37:4f:95:67:2e:d5:60:eb:92: 58:0d:98:41:a0:f8:00:29:0c:37:e5:47:39:2e:0f: fb:23:d8:e1:6d:42:3c:1d:21:fd:67:58:97:62:76: 85:18:99:bf:4e:e5:fb:6f:14:6f:08:65:e9:6d:d0: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:06:7B:FF:2C:E5:2A:61:DA:19:30:6F:BA:73:60:06:84:21:07 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2e:77:14:d3:ec:21:d8:15:65:a0:b2:d9:6b:06:5c:1c:da: 86:09:2a:5f:15:cd:ac:66:d7:11:8f:37:84:ad:5b:34:f6:81: 94:81:30:30:bb:c4:76:dc:5b:e1:da:d2:74:79:5f:31:95:9a: 15:47:ba:9a:30:77:f6:3e:7f:3c:31:57:95:e4:28:27:ad:93: fc:6d:53:d6:cb:0f:c4:1b:5f:a1:0b:36:c1:c6:f6:e8:c8:51: 6e:d0:52:f7:05:58:63:4d:ee:d1:97:60:3d:a0:87:9e:79:d5: 89:b6:fb:53:53:36:f0:e7:fc:d4:91:0f:56:62:3a:e8:fc:a7: 93:b4:70:2c:44:f6:ff:58:28:28:a0:56:65:27:48:2f:cd:03: 17:3b:85:c7:0c:ae:99:f2:64:88:f1:66:6e:cb:2d:cb:9f:3d: dc:50:9f:dc:1a:78:b4:ca:24:5a:15:88:41:52:36:12:01:bf: 5f:08:32:fa:3a:c0:60:37:c1:a8:c1:2f:65:c1:27:f8:2a:f1: 05:71:fa:f6:15:a1:7f:52:b6:b4:87:91:45:1f:f7:c5:ad:1b: 28:ab:06:c6:f7:23:e0:19:3a:d3:8d:86:83:5a:39:87:33:d9: c1:99:ec:c6:e6:81:31:c2:40:ce:f4:00:ab:6d:39:2a:4a:97: b5:b6:cc:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUwODIzMDAxMTU0WhcNMjUwODMwMDAxMTU0WjAYMRYwFAYD VQQDEw02OGE5MDc0Yi01ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRGK9FfalEDZTWdBRNeiNBvvyHR+F8lvDxrW8qA94NxXNttUbOFI9DHiWe+9 wo2UV9zdWJCUe+uH8KKvFtXf8k/xKnVqZkmTjlge5p8j3KS9a/8HdMAiW1vY1yW5 XkIJgcurcpC2DhOIsft/FNlibROTr9dOZtWCRqJel3GdZCpq31U0+sqNwJQlURA3 MM/IKpCVll1wTWJvU9JnAS6DD/QjG/tzVVh1aC3IlvaJ2mmH6apNMwk1LzV+UQ5n a67Y82Ts3L+ofes3T5VnLtVg65JYDZhBoPgAKQw35Uc5Lg/7I9jhbUI8HSH9Z1iX YnaFGJm/TuX7bxRvCGXpbdDpfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGUBnv/ LOUqYdoZMG+6c2AGhCEHMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKLncU0+wh2BVloLLZawZcHNqGCSpfFc2sZtcRjzeErVs09oGUgTAw u8R23Fvh2tJ0eV8xlZoVR7qaMHf2Pn88MVeV5CgnrZP8bVPWyw/EG1+hCzbBxvbo yFFu0FL3BVhjTe7Rl2A9oIeeedWJtvtTUzbw5/zUkQ9WYjro/KeTtHAsRPb/WCgo oFZlJ0gvzQMXO4XHDK6Z8mSI8WZuyy3Lnz3cUJ/cGni0yiRaFYhBUjYSAb9fCDL6 OsBgN8GowS9lwSf4KvEFcfr2FaF/Ura0h5FFH/fFrRsoqwbG9yPgGTrTjYaDWjmH M9nBmezG5oExwkDO9ACrbTkqSpe1tswq -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:38 2025 by rpki-client