$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: Em/48oHjcRY2TEdu8RQixj3Njvb89cEY1yGk4pcHCh4= Subject key identifier: 16:7F:A2:17:4A:FD:12:41:FB:E4:F8:40:5D:B4:A9:6C:C8:C3:9A:05 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0806 Signing time: Fri 22 Aug 2025 21:05:25 +0000 Manifest this update: Fri 22 Aug 2025 21:05:24 +0000 Manifest next update: Fri 29 Aug 2025 21:05:24 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: 7gV+37d+mS4lI91LDN5TOvBVQtehPfPqd2lgmy6/KgQ=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Aug 22 21:05:24 2025 GMT Not After : Aug 29 21:05:24 2025 GMT Subject: CN=68a8db95-0bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:15:3c:a9:09:44:1c:51:3f:b2:29:a4:2c:b1: d6:05:4c:d1:50:a0:46:95:6a:c6:2d:7c:f1:52:8d: 91:43:09:32:09:9b:14:c6:33:81:dd:4b:a8:81:1b: 45:9c:e7:fd:dd:81:37:52:9d:55:65:0d:2c:2a:34: 27:5f:51:c7:f8:3b:f8:ff:3a:3e:b1:48:fc:00:0f: 10:6f:c1:c1:8a:10:9b:04:7c:0f:56:2e:a7:b9:ad: f1:7f:07:9c:de:0f:89:48:13:3a:66:52:a4:d4:a3: 44:69:04:81:84:2a:ef:f7:82:10:20:31:04:50:4d: 42:2d:76:a2:e7:1b:1a:20:0e:fb:eb:57:7d:db:18: df:b9:31:b7:63:bf:44:e4:a9:74:65:4f:d5:e1:3a: 02:79:44:08:bb:26:78:33:da:df:59:e1:aa:03:5e: 8c:f6:0d:25:51:90:08:9f:28:f7:b8:64:0d:2f:76: db:d4:32:24:fd:68:ae:4c:f2:a6:b2:8e:4d:c3:6a: 74:db:9a:cf:6f:10:51:f2:e5:a5:a6:9e:ac:40:b5: c4:a2:be:49:ca:2f:82:04:00:4d:0b:76:dc:b3:88: c0:3a:5b:43:5a:ee:93:67:de:da:82:9e:7b:09:03: db:21:50:cf:f0:bc:eb:c3:15:89:83:b8:8c:b8:f4: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:A2:17:4A:FD:12:41:FB:E4:F8:40:5D:B4:A9:6C:C8:C3:9A:05 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fd:a5:f8:6b:52:b4:e5:e9:1b:65:32:93:ec:71:93:f4:3f: ff:d1:c2:0a:17:9c:6a:91:30:ff:6c:86:38:1a:50:b3:28:d1: b5:29:37:0d:51:7c:48:9e:da:90:a4:c0:92:8d:a0:09:ba:65: b8:d6:df:43:b4:2d:6e:64:ce:d4:71:2d:6a:97:d7:c1:06:9e: 1f:39:0d:39:47:a7:b6:62:af:fb:c3:c3:4b:eb:52:30:ee:20: cf:bd:f6:97:4d:e3:a4:e6:6a:bc:1f:10:b0:04:0f:1d:e2:e1: 75:d8:4c:8d:6a:38:c7:da:10:03:58:96:76:a3:57:1a:28:9b: d8:18:60:b0:ce:92:3e:65:b8:4c:b1:93:6e:a3:45:44:44:9e: c1:57:cd:4e:ba:24:b0:4f:9d:5d:73:e0:aa:65:9a:e7:c3:e9: ee:d9:ba:8d:7d:96:76:6d:9a:cb:65:64:29:cb:18:ec:e0:80: 09:4d:ef:b2:9a:eb:05:f2:fd:f6:58:82:5c:6c:36:27:29:a9: 21:a3:6b:4e:8a:9e:66:7c:fb:96:0e:a8:73:32:20:41:12:ad: 18:56:98:03:cd:d9:41:e9:8b:71:28:7f:10:c4:b1:51:79:21: 29:87:2c:45:5f:1f:4f:7d:e2:bc:38:18:8b:54:a8:38:17:ef: c7:86:6f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwODIyMjEwNTI0WhcNMjUwODI5MjEwNTI0WjAYMRYwFAYD VQQDEw02OGE4ZGI5NS0wYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRU8qQlEHFE/simkLLHWBUzRUKBGlWrGLXzxUo2RQwkyCZsUxjOB3UuogRtF nOf93YE3Up1VZQ0sKjQnX1HH+Dv4/zo+sUj8AA8Qb8HBihCbBHwPVi6nua3xfwec 3g+JSBM6ZlKk1KNEaQSBhCrv94IQIDEEUE1CLXai5xsaIA7761d92xjfuTG3Y79E 5Kl0ZU/V4ToCeUQIuyZ4M9rfWeGqA16M9g0lUZAInyj3uGQNL3bb1DIk/WiuTPKm so5Nw2p025rPbxBR8uWlpp6sQLXEor5Jyi+CBABNC3bcs4jAOltDWu6TZ97agp57 CQPbIVDP8LzrwxWJg7iMuPTWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZ/ohdK /RJB++T4QF20qWzIw5oFMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/aX4a1K05ekbZTKT7HGT9D//0cIKF5xqkTD/bIY4GlCzKNG1KTcN UXxIntqQpMCSjaAJumW41t9DtC1uZM7UcS1ql9fBBp4fOQ05R6e2Yq/7w8NL61Iw 7iDPvfaXTeOk5mq8HxCwBA8d4uF12EyNajjH2hADWJZ2o1caKJvYGGCwzpI+ZbhM sZNuo0VERJ7BV81OuiSwT51dc+CqZZrnw+nu2bqNfZZ2bZrLZWQpyxjs4IAJTe+y musF8v32WIJcbDYnKakho2tOip5mfPuWDqhzMiBBEq0YVpgDzdlB6YtxKH8QxLFR eSEphyxFXx9PfeK8OBiLVKg4F+/Hhm/+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:13 2025 by rpki-client