$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json) Hash identifier: iDbGazxS0A+H7EV9YB8wwgB1iLRYh5HCYZAhcdPG8P0= Subject key identifier: 69:40:88:71:B7:12:42:8D:85:BF:05:A6:EB:5A:4F:0F:E5:5D:43:44 Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft Manifest number: 065B Signing time: Fri 22 Aug 2025 22:44:15 +0000 Manifest this update: Fri 22 Aug 2025 22:44:14 +0000 Manifest next update: Fri 29 Aug 2025 22:44:14 +0000 Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: N3LdABX5S5WcHXhnNqtkC//qEDxjlx+oYsQvjtCSR/c=) 2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: unXzVSB7rlCBOdPMYdpaMnBlAZNAT9x8+AUdN+A92PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178580, serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Validity Not Before: Aug 22 22:44:14 2025 GMT Not After : Aug 29 22:44:14 2025 GMT Subject: CN=68a8f2be-b425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:b5:c8:9a:5e:ba:e2:6a:d4:f8:21:a7:6d: 46:c3:9f:16:5c:28:aa:cf:f6:99:07:a9:1f:63:b2: 2a:e3:ff:74:cf:29:f3:44:55:68:a1:08:9b:61:94: 69:87:14:4e:cc:01:20:5e:55:22:d0:e0:17:f0:93: df:05:da:19:79:55:85:d4:70:48:d5:a2:23:2d:37: b0:67:9e:d0:cd:ad:ac:83:77:fa:ce:26:95:13:d2: 38:79:1c:e0:2b:62:79:f4:e0:25:cf:ba:2c:00:8d: 30:bc:c6:88:1f:26:3a:7d:5e:b3:58:92:95:fe:65: 5b:55:f2:16:a3:07:2d:82:49:4d:91:e1:2a:d0:23: f3:3e:1f:46:be:9f:3d:fe:54:dd:bf:9c:88:6b:8f: b8:c0:b3:77:7b:a6:dd:e8:c9:0f:2b:57:b5:a0:30: 09:22:86:bb:d5:6f:ae:3f:17:9f:5a:20:f3:08:f4: 88:d8:36:7f:96:19:9b:1e:1c:6a:5e:66:9e:61:d7: 19:dd:ae:bb:0b:f8:65:be:95:42:43:ad:40:a2:a9: 41:f3:e7:ae:ab:10:7d:c3:8c:f6:f8:8f:0a:55:da: 3d:df:2b:bb:0b:41:af:15:50:00:49:10:91:35:9e: be:ea:b8:92:9a:9b:55:5b:2e:98:7b:b5:06:18:c9: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:40:88:71:B7:12:42:8D:85:BF:05:A6:EB:5A:4F:0F:E5:5D:43:44 X509v3 Authority Key Identifier: keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:19:51:7c:8e:31:23:7b:96:da:2d:52:84:64:ac:9c:df:26: 6e:bb:ce:30:c5:7d:f1:c7:4a:89:41:ce:dd:b9:62:af:f1:a9: 8e:97:31:36:54:d0:70:a2:25:d8:1d:bf:6a:08:ea:f0:58:ed: 78:4c:cd:c4:be:40:cf:e3:8b:45:10:d0:c1:ae:65:9d:df:84: be:02:00:47:4c:16:be:54:36:d5:a9:d0:f5:64:8e:ed:e1:93: e9:5c:de:25:65:9b:ba:98:26:e6:e2:c3:9f:58:70:05:5d:13: 0f:70:36:36:e1:5a:c4:21:76:bc:3c:fc:d2:77:85:96:7e:06: 39:9f:41:ab:2d:3e:8f:3e:0f:5a:e3:77:25:22:48:67:e5:f4: e1:3c:fc:42:72:09:79:4d:82:b5:77:10:4d:58:5e:a0:a8:d5: 91:a6:b2:07:06:b0:16:a3:10:e7:de:18:66:ae:bb:24:09:51: 79:e9:a0:ce:4a:b8:94:10:d8:82:49:59:0f:37:f7:11:ea:b7: 0b:22:52:33:e9:ae:3e:fa:79:0b:36:04:8f:06:d1:4f:33:79: 73:22:2a:54:cb:e3:1b:e6:02:54:ef:3e:d1:6b:92:23:2c:a2: c4:d2:63:83:24:c1:69:e4:82:42:88:a9:87:4c:f8:78:d5:b5: 86:0a:d2:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF MDkxM0M3RjYwHhcNMjUwODIyMjI0NDE0WhcNMjUwODI5MjI0NDE0WjAYMRYwFAYD VQQDEw02OGE4ZjJiZS1iNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQq1yJpeuuJq1Pghp21Gw58WXCiqz/aZB6kfY7Iq4/90zynzRFVooQibYZRp hxROzAEgXlUi0OAX8JPfBdoZeVWF1HBI1aIjLTewZ57Qza2sg3f6ziaVE9I4eRzg K2J59OAlz7osAI0wvMaIHyY6fV6zWJKV/mVbVfIWowctgklNkeEq0CPzPh9Gvp89 /lTdv5yIa4+4wLN3e6bd6MkPK1e1oDAJIoa71W+uPxefWiDzCPSI2DZ/lhmbHhxq XmaeYdcZ3a67C/hlvpVCQ61AoqlB8+euqxB9w4z2+I8KVdo93yu7C0GvFVAASRCR NZ6+6riSmptVWy6Ye7UGGMnG0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlAiHG3 EkKNhb8FputaTw/lXUNEMB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2 NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODU4MC8zOUY5NjZGODk2NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZ U0ZtYVo5ZnlLVmJna1R4X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCGVF8jjEje5baLVKEZKyc3yZuu84wxX3xx0qJQc7duWKv8amOlzE2 VNBwoiXYHb9qCOrwWO14TM3EvkDP44tFENDBrmWd34S+AgBHTBa+VDbVqdD1ZI7t 4ZPpXN4lZZu6mCbm4sOfWHAFXRMPcDY24VrEIXa8PPzSd4WWfgY5n0GrLT6PPg9a 43clIkhn5fThPPxCcgl5TYK1dxBNWF6gqNWRprIHBrAWoxDn3hhmrrskCVF56aDO SriUENiCSVkPN/cR6rcLIlIz6a4++nkLNgSPBtFPM3lzIipUy+Mb5gJU7z7Ra5Ij LKLE0mODJMFp5IJCiKmHTPh41bWGCtKn -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:00 2025 by rpki-client