$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: dCsr08yVCrDlyi+D+N8Ix73t7kw4WPScequDZ64LMoQ= Subject key identifier: 8A:DB:AD:B2:50:B9:C8:35:77:55:74:34:1D:87:83:EB:F8:16:D8:DC Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 0472 Signing time: Sat 23 Aug 2025 00:21:01 +0000 Manifest this update: Sat 23 Aug 2025 00:21:01 +0000 Manifest next update: Sat 30 Aug 2025 00:21:01 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: 7oo2zcA8jipO9DQRM5c1B0NxV+NY4Hxt8Z/EAgXS8Ow=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Aug 23 00:21:01 2025 GMT Not After : Aug 30 00:21:01 2025 GMT Subject: CN=68a9096d-2c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2d:0e:75:a2:34:d6:7d:2b:e9:af:9b:6d:64: 90:55:d2:15:2b:70:3d:79:5e:6d:ab:74:64:3e:2a: a4:c1:43:78:8b:8d:da:d5:bf:8b:4b:ca:9b:14:54: 81:7a:c8:47:61:e6:dd:9c:5d:00:97:ae:cd:42:19: 4f:59:0d:b7:ef:0b:c6:1f:d4:9e:b6:e6:8f:41:b7: ea:87:68:a0:58:d1:29:b8:26:82:77:77:55:ac:fa: 36:4d:80:d2:0c:41:f6:6e:92:6e:8b:d3:1b:70:72: 0f:63:19:26:6f:8d:a2:24:22:48:20:64:dc:5b:10: 6c:9c:f0:72:21:4f:14:36:09:e1:98:e9:28:bb:b6: 6c:14:20:65:b0:51:25:a9:a8:d2:53:70:ab:76:6e: e6:ab:39:51:01:e0:c6:26:ef:76:d0:eb:17:16:0a: 25:7a:31:3c:d0:c2:6e:7e:30:cf:1e:b9:73:7d:58: a1:26:09:52:0f:68:d1:2f:71:c0:d7:0e:bc:8f:5d: b2:5a:2d:a2:8e:23:e2:31:d0:8c:b2:bc:23:db:05: 5e:85:80:bf:ca:6c:3d:9a:30:67:7e:ab:88:45:c8: f9:a4:06:d2:5a:7c:1d:80:f2:3f:ab:49:05:c4:f6: 6e:66:3c:d2:23:d1:cf:5a:72:35:e1:9d:f5:30:95: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DB:AD:B2:50:B9:C8:35:77:55:74:34:1D:87:83:EB:F8:16:D8:DC X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:87:32:7e:05:a5:c9:9d:1f:f8:6a:7d:00:4c:f9:1b:76: 7f:8b:db:8c:97:c7:fc:b3:e4:fc:1c:ba:6c:11:f6:2b:6e:2b: 4a:11:85:a3:a0:a4:0a:88:66:30:6e:66:dc:a4:3a:53:d6:f4: c3:ee:b2:2b:44:2f:3f:27:32:24:71:4c:dc:dc:81:b2:ce:c2: e4:39:27:b2:ba:1b:a0:95:df:62:93:a7:f8:23:15:57:27:dc: c2:ee:e1:3a:99:02:a4:db:f9:5b:7b:6a:33:1a:66:54:79:ee: 98:8b:99:7c:3e:1f:b0:2c:f6:78:ad:09:77:c1:93:47:e4:23: c5:23:86:b6:9e:4e:05:cf:66:68:fa:d6:68:b5:e9:f4:ff:d0: 96:85:32:1f:a3:42:53:bf:1c:6e:47:45:87:66:97:bf:80:b8: 98:54:65:2c:c5:49:c9:f4:1c:6a:97:7c:4c:ad:b5:aa:72:8c: a2:84:06:c6:1a:14:6f:f5:f9:ff:d3:e7:c0:17:25:4f:a0:d0: e6:25:5f:01:1c:76:11:67:57:41:8b:0c:6b:5c:97:4b:b3:b2: d7:c3:d5:fe:25:1d:66:9d:c1:df:49:43:01:7a:37:93:99:96: 0a:97:53:67:b0:ff:83:74:46:07:cb:14:0b:a7:c2:8c:d1:2e: 46:e8:4a:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwODIzMDAyMTAxWhcNMjUwODMwMDAyMTAxWjAYMRYwFAYD VQQDEw02OGE5MDk2ZC0yYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9C0OdaI01n0r6a+bbWSQVdIVK3A9eV5tq3RkPiqkwUN4i43a1b+LS8qbFFSB eshHYebdnF0Al67NQhlPWQ237wvGH9SetuaPQbfqh2igWNEpuCaCd3dVrPo2TYDS DEH2bpJui9MbcHIPYxkmb42iJCJIIGTcWxBsnPByIU8UNgnhmOkou7ZsFCBlsFEl qajSU3Crdm7mqzlRAeDGJu920OsXFgolejE80MJufjDPHrlzfVihJglSD2jRL3HA 1w68j12yWi2ijiPiMdCMsrwj2wVehYC/ymw9mjBnfquIRcj5pAbSWnwdgPI/q0kF xPZuZjzSI9HPWnI14Z31MJVp6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrbrbJQ ucg1d1V0NB2Hg+v4FtjcMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApT4cyfgWlyZ0f+Gp9AEz5G3Z/i9uMl8f8s+T8HLpsEfYrbitKEYWj oKQKiGYwbmbcpDpT1vTD7rIrRC8/JzIkcUzc3IGyzsLkOSeyuhugld9ik6f4IxVX J9zC7uE6mQKk2/lbe2ozGmZUee6Yi5l8Ph+wLPZ4rQl3wZNH5CPFI4a2nk4Fz2Zo +tZoten0/9CWhTIfo0JTvxxuR0WHZpe/gLiYVGUsxUnJ9Bxql3xMrbWqcoyihAbG GhRv9fn/0+fAFyVPoNDmJV8BHHYRZ1dBiwxrXJdLs7LXw9X+JR1mncHfSUMBejeT mZYKl1NnsP+DdEYHyxQLp8KM0S5G6ErP -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:40 2025 by rpki-client