$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: EPdsxuwZbdrfh4zoPKzBueVG63q4HY2PgofQO6NDrZ8= Subject key identifier: C8:76:F4:10:35:03:2B:F5:0F:22:83:E5:74:F9:87:72:FC:08:3E:B4 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 01AC Signing time: Sat 23 Aug 2025 03:20:48 +0000 Manifest this update: Sat 23 Aug 2025 03:20:47 +0000 Manifest next update: Sat 30 Aug 2025 03:20:47 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: uPkbEhoACHVqFQ+Nb38HFAqtQIsng/Cx0iQr31r89EU=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: UaxkzwEU7Uh70PtMMkf/dHGEWq655rIu4QsEPhurB3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Aug 23 03:20:47 2025 GMT Not After : Aug 30 03:20:47 2025 GMT Subject: CN=68a9338f-dd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:d5:8b:31:30:78:a9:76:37:e7:ae:d3:94: 4d:33:52:d2:53:c1:ec:c1:34:6d:42:29:c7:ff:ef: bf:b3:bc:1c:68:80:5d:88:d8:f4:9a:b1:fe:f7:ec: 2d:de:16:f1:fd:82:c7:ab:cc:7a:ad:22:8a:32:ad: bc:85:ea:4b:03:e1:35:50:0f:40:af:c7:bd:9a:b6: 86:a6:19:da:9e:0f:2e:8b:79:87:0d:ed:da:61:53: 8b:27:9b:3f:24:89:fc:e9:c1:e3:61:c5:7f:6c:16: f2:60:19:7e:9c:5d:e8:6a:2e:e9:c0:e9:c8:fd:ba: d9:0c:f1:c6:4b:a9:0b:53:e6:e8:5c:5d:e6:94:8e: 9a:85:89:e2:fa:b9:66:d1:04:86:d9:73:cf:41:a7: 13:c7:95:90:00:46:ee:88:2f:a0:f4:bf:5c:60:5b: 33:d7:17:fd:71:0e:b7:97:d4:21:48:ee:68:ba:6f: a5:95:ec:13:9d:aa:2d:dc:01:15:71:0b:f4:dc:d6: 2a:26:74:27:7d:61:4f:c1:6e:0c:58:60:9f:6b:7b: 74:d7:40:e6:c9:17:c7:0e:5d:e3:33:43:98:c0:01: f2:72:0e:76:b8:aa:27:80:4d:4a:b0:5d:03:5f:08: 57:c3:5e:62:0e:2b:96:82:91:3b:0f:1d:7b:a0:e5: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:76:F4:10:35:03:2B:F5:0F:22:83:E5:74:F9:87:72:FC:08:3E:B4 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:30:db:ac:95:9f:6d:af:9e:a8:72:ca:e1:ca:89:91:30:bc: 05:ad:35:0c:c0:5d:f2:65:26:9c:4d:8c:f1:21:69:a1:b4:6a: 71:22:7a:b2:37:5a:1e:0e:ee:1c:81:38:98:ca:5b:c0:9c:d8: 37:c6:33:ea:52:8b:12:d9:f3:26:28:6f:4d:9a:16:cc:af:5e: fd:bf:e1:c9:b3:b4:26:83:14:44:b3:38:4d:fc:c5:89:91:02: d8:0a:3c:0b:93:5f:d3:06:bb:7e:a4:d3:70:ea:58:24:14:37: e0:b3:f9:1c:15:2f:cd:a0:4b:e0:d9:e7:87:a3:3a:ef:21:21: bf:18:f8:f8:b4:c6:6a:b6:98:e4:de:60:32:26:9f:75:57:7b: 3a:fd:ab:e5:df:12:c5:57:7a:94:82:18:c9:12:56:23:f7:14: f2:34:91:85:42:e2:0d:2d:3f:22:74:f1:a1:7d:98:f9:3c:d8: e4:f7:67:b2:ef:a2:d4:3b:3a:ed:66:cc:67:c4:f6:9c:d1:79: e7:89:0f:b1:09:90:2b:58:d5:63:9a:b0:32:5f:cf:0b:c8:68: b1:80:75:fa:f1:5e:08:05:82:7a:b8:d1:91:99:c6:cc:15:16: 89:71:ba:54:11:e6:04:7e:ed:17:cb:c8:6d:71:17:7d:f9:c6: f4:d9:19:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUwODIzMDMyMDQ3WhcNMjUwODMwMDMyMDQ3WjAYMRYwFAYD VQQDEw02OGE5MzM4Zi1kZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOLVizEweKl2N+eu05RNM1LSU8HswTRtQinH/++/s7wcaIBdiNj0mrH+9+wt 3hbx/YLHq8x6rSKKMq28hepLA+E1UA9Ar8e9mraGphnang8ui3mHDe3aYVOLJ5s/ JIn86cHjYcV/bBbyYBl+nF3oai7pwOnI/brZDPHGS6kLU+boXF3mlI6ahYni+rlm 0QSG2XPPQacTx5WQAEbuiC+g9L9cYFsz1xf9cQ63l9QhSO5oum+llewTnaot3AEV cQv03NYqJnQnfWFPwW4MWGCfa3t010DmyRfHDl3jM0OYwAHycg52uKongE1KsF0D XwhXw15iDiuWgpE7Dx17oOXfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh29BA1 Ayv1DyKD5XT5h3L8CD60MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlMNuslZ9tr56ocsrhyomRMLwFrTUMwF3yZSacTYzxIWmhtGpxInqy N1oeDu4cgTiYylvAnNg3xjPqUosS2fMmKG9NmhbMr179v+HJs7QmgxREszhN/MWJ kQLYCjwLk1/TBrt+pNNw6lgkFDfgs/kcFS/NoEvg2eeHozrvISG/GPj4tMZqtpjk 3mAyJp91V3s6/avl3xLFV3qUghjJElYj9xTyNJGFQuINLT8idPGhfZj5PNjk92ey 76LUOzrtZsxnxPac0XnniQ+xCZArWNVjmrAyX88LyGixgHX68V4IBYJ6uNGRmcbM FRaJcbpUEeYEfu0Xy8htcRd9+cb02Rnw -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:43 2025 by rpki-client