$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json) Hash identifier: K2GwWCMMAvpevmO1PR3V2VQ3c9ZalKlcglfBevl3KMA= Subject key identifier: 19:22:08:5A:FF:42:14:23:D5:71:80:3D:BD:5B:F4:B7:20:1D:10:B8 Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft Manifest number: 055D Signing time: Fri 22 Aug 2025 23:33:11 +0000 Manifest this update: Fri 22 Aug 2025 23:33:10 +0000 Manifest next update: Fri 29 Aug 2025 23:33:10 +0000 Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: HspOXScpnf0VjyTNjbCF9RgSOKqsmgZY+dGnGA5NQJU=) 2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: gsNxtD+HCrA+T6b9YqONqQ4jv3lalAETh9MJihh24Cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917584F, serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Validity Not Before: Aug 22 23:33:10 2025 GMT Not After : Aug 29 23:33:10 2025 GMT Subject: CN=68a8fe36-f129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:82:e0:7f:98:39:14:ee:ee:b5:30:cf:f8: 0f:b0:a7:52:15:ec:6e:56:65:31:ba:6d:af:92:a2: fe:03:ee:ce:92:71:ac:38:54:85:75:c6:9c:0b:34: 83:af:79:ff:cd:9f:00:15:ef:e0:87:65:41:05:97: 64:a8:02:e5:39:31:ac:e7:c9:d1:41:66:08:79:d9: 5f:ae:80:8e:71:c4:59:dd:d7:62:e5:9d:d1:7b:6c: 43:46:3f:18:2c:6c:6f:18:8f:87:6c:c3:10:e0:28: 4b:00:a0:09:da:46:36:27:2c:8f:a6:ac:9b:cf:b8: 74:9f:48:53:67:45:ed:56:c7:ff:84:b6:06:d1:a9: 67:6b:22:eb:a7:5e:4f:41:db:7b:4e:a5:48:e4:63: 13:1a:f0:5c:ba:09:bc:9f:6e:9d:75:40:59:1e:fd: 4d:cc:86:10:ea:3d:03:30:5b:de:37:fe:ab:84:dd: f0:0e:e4:31:cb:b0:4f:97:60:80:a6:ec:ab:ee:2d: 72:5e:a1:ab:ba:9a:06:9d:3b:03:cc:b7:b1:5d:fb: 4b:31:5b:9b:d4:b7:28:89:f6:48:d4:5d:68:24:46: 8b:82:44:8c:42:cd:1e:ac:59:b0:06:c7:e2:08:3e: 2f:1d:dc:70:58:df:f7:6a:fb:28:0c:31:4d:fe:69: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:22:08:5A:FF:42:14:23:D5:71:80:3D:BD:5B:F4:B7:20:1D:10:B8 X509v3 Authority Key Identifier: keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:c4:a8:c4:b8:e9:1c:d2:50:e3:36:db:98:fa:b1:17:11: 9b:fb:97:b6:05:f0:d7:3b:76:c5:ce:e9:b8:bc:92:28:3d:ad: b6:86:16:54:94:ff:bf:96:85:4d:0c:31:0f:c1:dd:05:8a:15: 8c:32:ea:76:bf:45:24:17:b2:cf:de:0d:08:ff:80:34:9a:69: 8c:5e:e0:15:10:a6:15:c1:9a:d4:b4:aa:df:c4:18:86:5c:d3: f3:7e:d1:3e:54:a6:cd:4b:8b:07:eb:fe:f3:18:34:67:9a:5a: 6c:44:b3:32:d8:77:6a:4a:92:32:fc:43:0a:3e:4e:9d:37:87: 2c:12:2e:39:e0:e0:0e:52:89:fb:92:b1:59:f2:fa:8c:9b:0c: c5:f2:d7:57:44:1c:6d:9a:44:ab:35:44:a9:e6:65:09:28:da: 5d:00:2e:95:90:71:b0:12:ee:30:e1:41:04:a6:f3:1c:0b:fa: 2f:90:bc:38:3e:af:59:48:17:0a:ef:3f:87:38:29:cb:bc:7b: f2:45:24:9a:7f:c3:4f:57:c7:b1:a9:1b:0a:ae:4c:4f:28:fe: 58:db:7f:8a:5a:18:ad:1c:f5:fa:45:9f:ee:00:35:30:70:2d: 94:e3:e6:a9:4a:1b:72:82:56:47:4e:f3:47:59:6e:81:7a:37: 92:f0:f3:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx RjBCRUZFRTcwHhcNMjUwODIyMjMzMzEwWhcNMjUwODI5MjMzMzEwWjAYMRYwFAYD VQQDEw02OGE4ZmUzNi1mMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1H6C4H+YORTu7rUwz/gPsKdSFexuVmUxum2vkqL+A+7OknGsOFSFdcacCzSD r3n/zZ8AFe/gh2VBBZdkqALlOTGs58nRQWYIedlfroCOccRZ3ddi5Z3Re2xDRj8Y LGxvGI+HbMMQ4ChLAKAJ2kY2JyyPpqybz7h0n0hTZ0XtVsf/hLYG0alnayLrp15P Qdt7TqVI5GMTGvBcugm8n26ddUBZHv1NzIYQ6j0DMFveN/6rhN3wDuQxy7BPl2CA puyr7i1yXqGrupoGnTsDzLexXftLMVub1LcoifZI1F1oJEaLgkSMQs0erFmwBsfi CD4vHdxwWN/3avsoDDFN/mlQswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkiCFr/ QhQj1XGAPb1b9LcgHRC4MB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5 QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N TjdkX2w1QTNCcllmQy1fdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIpsSoxLjpHNJQ4zbbmPqxFxGb+5e2BfDXO3bFzum4vJIoPa22hhZU lP+/loVNDDEPwd0FihWMMup2v0UkF7LP3g0I/4A0mmmMXuAVEKYVwZrUtKrfxBiG XNPzftE+VKbNS4sH6/7zGDRnmlpsRLMy2HdqSpIy/EMKPk6dN4csEi454OAOUon7 krFZ8vqMmwzF8tdXRBxtmkSrNUSp5mUJKNpdAC6VkHGwEu4w4UEEpvMcC/ovkLw4 Pq9ZSBcK7z+HOCnLvHvyRSSaf8NPV8exqRsKrkxPKP5Y23+KWhitHPX6RZ/uADUw cC2U4+apShtyglZHTvNHWW6BejeS8PPd -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:58 2025 by rpki-client