$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: 0+mKqvrQGF6qTdOgxIpNMvjrrUhXEvR8TmUceWgDLDg= Subject key identifier: 58:27:27:AF:85:D1:92:47:22:4A:9C:A4:DC:6D:F3:EA:0F:A3:AC:FA Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0969 Signing time: Fri 22 Aug 2025 20:16:54 +0000 Manifest this update: Fri 22 Aug 2025 20:16:53 +0000 Manifest next update: Fri 29 Aug 2025 20:16:53 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: JzwFiwt5grAW0hT5inbRiEatEDzvPycqGZxu4CwxsU0=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Aug 22 20:16:53 2025 GMT Not After : Aug 29 20:16:53 2025 GMT Subject: CN=68a8d036-5da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:7d:13:5e:de:ff:ce:6e:1c:37:a4:ea:0e: 77:53:a4:b4:7d:75:2a:04:a2:a0:fe:00:53:ef:db: 95:a8:19:17:79:b0:63:81:ef:80:e5:fd:27:06:ff: 66:60:cf:57:8a:ee:c7:49:bb:08:48:43:c8:a4:f5: 4d:9a:f0:07:2d:c4:e9:0a:03:b0:fb:73:09:e3:19: 24:1b:80:fe:3f:b8:89:40:87:c2:bb:72:e2:4f:b1: cd:21:98:3a:8c:00:3f:25:6f:4b:a6:dd:8f:0c:9e: 72:2b:d5:1c:6f:79:f0:1d:28:d5:0b:35:a2:61:87: f1:d7:a3:6f:96:7c:98:32:b9:14:80:b0:12:f8:40: f6:ff:4f:1b:5a:f3:34:8a:14:ae:e8:ac:d1:10:f7: 7c:53:38:dd:b3:62:e3:67:e4:bf:46:80:01:11:e4: 4f:3e:f8:de:d6:5e:35:d8:88:9c:04:d5:bf:6f:8d: 93:dd:78:ac:37:9f:6b:43:16:3e:7c:a1:9b:21:06: ae:5f:f4:ce:fb:bd:de:07:71:63:17:42:cd:3e:66: cf:80:c4:fc:a7:0a:50:4c:62:c5:44:47:6b:31:40: 92:33:cd:56:1c:25:49:8b:3b:5d:f9:72:ef:6c:05: d4:bf:4f:9a:74:0c:2e:00:64:85:99:76:ec:0c:a6: 7a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:27:AF:85:D1:92:47:22:4A:9C:A4:DC:6D:F3:EA:0F:A3:AC:FA X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:90:3f:63:62:15:5c:70:49:54:0a:6e:6f:73:5c:ab:b4:8f: 63:ef:21:61:e1:ec:8d:49:5a:2f:61:9a:9e:b2:5a:bb:1d:f4: 73:37:d4:1d:70:e5:79:91:2b:86:7c:26:34:fa:2e:a7:31:02: 39:96:c2:f5:d7:93:68:ff:47:88:0c:f7:05:61:0c:80:13:c8: f4:4c:79:47:5e:d4:77:27:03:79:50:6e:c8:70:ca:67:8d:a2: 87:b9:26:87:27:be:d7:6b:ca:57:ed:be:45:37:36:cf:ce:e3: 83:1f:df:fe:ee:94:9b:0e:bd:c4:76:00:9d:91:1e:9f:62:d9: 36:6b:bd:e3:29:e1:dd:a6:28:0a:ca:9a:fa:65:fb:63:85:e4: 13:24:0d:53:66:2a:ba:9d:cf:80:17:0d:97:56:cc:60:13:6e: 93:86:a6:72:19:d9:05:e6:f2:72:af:f1:10:91:0e:a7:cb:02: 7e:76:f6:39:0a:72:d9:0b:e7:67:f2:35:3e:e5:aa:20:9a:e3: 5e:5f:8b:22:66:63:59:d1:c0:8a:d4:ca:06:4c:a6:06:a6:df: c8:9d:09:ad:24:f3:a1:0c:ea:ee:08:1a:b6:e8:e6:82:e2:73: 2f:53:b2:05:63:1b:dc:fe:7b:f1:68:50:48:89:00:80:d0:fe: f3:cd:92:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUwODIyMjAxNjUzWhcNMjUwODI5MjAxNjUzWjAYMRYwFAYD VQQDEw02OGE4ZDAzNi01ZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDh9E17e/85uHDek6g53U6S0fXUqBKKg/gBT79uVqBkXebBjge+A5f0nBv9m YM9Xiu7HSbsISEPIpPVNmvAHLcTpCgOw+3MJ4xkkG4D+P7iJQIfCu3LiT7HNIZg6 jAA/JW9Lpt2PDJ5yK9Ucb3nwHSjVCzWiYYfx16NvlnyYMrkUgLAS+ED2/08bWvM0 ihSu6KzREPd8Uzjds2LjZ+S/RoABEeRPPvje1l412IicBNW/b42T3XisN59rQxY+ fKGbIQauX/TO+73eB3FjF0LNPmbPgMT8pwpQTGLFREdrMUCSM81WHCVJiztd+XLv bAXUv0+adAwuAGSFmXbsDKZ64wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgnJ6+F 0ZJHIkqcpNxt8+oPo6z6MB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgkD9jYhVccElUCm5vc1yrtI9j7yFh4eyNSVovYZqeslq7HfRzN9Qd cOV5kSuGfCY0+i6nMQI5lsL115No/0eIDPcFYQyAE8j0THlHXtR3JwN5UG7IcMpn jaKHuSaHJ77Xa8pX7b5FNzbPzuODH9/+7pSbDr3EdgCdkR6fYtk2a73jKeHdpigK ypr6ZftjheQTJA1TZiq6nc+AFw2XVsxgE26ThqZyGdkF5vJyr/EQkQ6nywJ+dvY5 CnLZC+dn8jU+5aogmuNeX4siZmNZ0cCK1MoGTKYGpt/InQmtJPOhDOruCBq26OaC 4nMvU7IFYxvc/nvxaFBIiQCA0P7zzZJT -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:54 2025 by rpki-client