$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: l7KurLxeiUGVKf2c4OzIuwVTgxuOpVu75Xhe2sBIS1Y= Subject key identifier: 0B:C5:E2:8E:0A:5F:1A:C0:9F:63:AF:58:2F:2A:64:F7:F0:34:FE:4B Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 020D Signing time: Sat 23 Aug 2025 02:19:13 +0000 Manifest this update: Sat 23 Aug 2025 02:19:13 +0000 Manifest next update: Sat 30 Aug 2025 02:19:13 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: fmSpDuYJkUb5u0pk4tX1Ngi08Okz3dPDCnr+7O4qhKc=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Aug 23 02:19:13 2025 GMT Not After : Aug 30 02:19:13 2025 GMT Subject: CN=68a92521-8edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:17:31:db:7e:22:c9:ab:16:eb:7f:12:f5: b4:7b:aa:a5:87:fe:1c:5f:fa:dd:9d:cb:34:37:a0: 7c:52:bd:48:f5:d6:5f:24:d5:d6:be:e9:69:0a:6d: ac:40:ba:cc:16:de:b3:ff:c0:3f:ec:a6:e7:7f:a5: a0:6d:1b:c0:89:19:1f:3c:43:28:0c:cf:aa:fd:75: ab:f3:35:fa:95:3b:57:75:6d:08:2f:13:ab:24:88: a0:e3:d6:aa:c7:f5:40:9b:28:ac:7c:c9:3f:bb:3a: 76:38:aa:31:97:15:fc:dc:62:eb:30:1b:c9:12:77: 2d:b6:0c:8f:3a:5b:ad:90:e6:f3:7a:ec:f5:73:f6: 63:8f:67:5a:57:dd:91:fb:68:4e:70:be:97:0b:ce: 8c:a5:72:ae:00:2a:18:3f:83:68:36:42:4a:fc:b2: 44:e3:87:76:b2:c4:25:c0:ed:fb:55:d5:77:ca:a1: 3e:76:d6:87:b5:76:76:61:e4:ce:d9:3c:96:0a:4c: ea:30:0e:7e:7a:73:29:f0:6b:82:3e:c3:5c:f6:6b: 2f:2b:a5:28:64:29:9d:b5:37:4e:d2:0e:12:47:40: eb:08:a1:0d:8e:1a:0e:c9:4e:92:72:33:74:c2:41: 71:f9:87:37:ad:72:4b:5d:38:09:0c:fd:fd:01:81: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:E2:8E:0A:5F:1A:C0:9F:63:AF:58:2F:2A:64:F7:F0:34:FE:4B X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:82:05:2c:2c:37:e7:bb:17:f5:45:54:e3:dc:2f:e0:b7: 07:1f:44:43:b5:e6:e8:5a:ca:7e:6e:c9:26:99:23:b2:a1:a3: a3:14:47:40:cf:21:5b:b7:f5:4f:bf:03:22:28:86:59:59:0b: a2:dd:d0:b0:f6:3e:0f:55:51:85:18:ef:10:89:1f:7d:0a:06: e5:1d:8c:75:6b:18:45:d5:3a:ed:52:dd:52:05:67:fc:c2:df: 47:9b:f2:2b:bf:ac:c2:a8:47:0e:29:cc:89:4f:53:27:db:14: e3:2b:40:88:01:a4:08:63:c3:09:b2:71:d9:1d:8d:4c:5f:1b: 5b:27:ea:1b:77:c1:45:a3:cd:eb:ab:38:f1:da:5d:a0:1b:9d: fb:37:9f:0b:28:3d:92:f6:36:4a:8f:2d:5e:f9:09:f4:71:9d: 71:0f:06:68:bd:63:90:01:94:2b:72:3b:cb:b9:9a:e1:1e:6a: b3:32:cc:28:81:18:d0:0a:88:91:02:3c:6d:72:24:85:67:48: 9a:f5:ef:b1:68:20:91:b7:e4:2c:22:34:78:fa:49:be:9a:15: 49:f1:35:56:37:e4:88:87:a3:b5:68:07:1e:30:4e:2a:6d:68: ff:d6:a5:86:7d:9d:f5:18:c9:72:71:ef:1f:56:54:ae:2d:85: a5:f4:c4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwODIzMDIxOTEzWhcNMjUwODMwMDIxOTEzWjAYMRYwFAYD VQQDEw02OGE5MjUyMS04ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuMXMdt+IsmrFut/EvW0e6qlh/4cX/rdncs0N6B8Ur1I9dZfJNXWvulpCm2s QLrMFt6z/8A/7Kbnf6WgbRvAiRkfPEMoDM+q/XWr8zX6lTtXdW0ILxOrJIig49aq x/VAmyisfMk/uzp2OKoxlxX83GLrMBvJEncttgyPOlutkObzeuz1c/Zjj2daV92R +2hOcL6XC86MpXKuACoYP4NoNkJK/LJE44d2ssQlwO37VdV3yqE+dtaHtXZ2YeTO 2TyWCkzqMA5+enMp8GuCPsNc9msvK6UoZCmdtTdO0g4SR0DrCKENjhoOyU6ScjN0 wkFx+Yc3rXJLXTgJDP39AYEi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvF4o4K XxrAn2OvWC8qZPfwNP5LMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnn4IFLCw357sX9UVU49wv4LcHH0RDteboWsp+bskmmSOyoaOjFEdA zyFbt/VPvwMiKIZZWQui3dCw9j4PVVGFGO8QiR99CgblHYx1axhF1TrtUt1SBWf8 wt9Hm/Irv6zCqEcOKcyJT1Mn2xTjK0CIAaQIY8MJsnHZHY1MXxtbJ+obd8FFo83r qzjx2l2gG537N58LKD2S9jZKjy1e+Qn0cZ1xDwZovWOQAZQrcjvLuZrhHmqzMswo gRjQCoiRAjxtciSFZ0ia9e+xaCCRt+QsIjR4+km+mhVJ8TVWN+SIh6O1aAceME4q bWj/1qWGfZ31GMlyce8fVlSuLYWl9MTF -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:21 2025 by rpki-client