$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json) Hash identifier: H14Sxmq05F2X7jXtc7on5uc822APJunbFq1mjBzTxu8= Subject key identifier: CC:3C:86:8D:2B:82:50:A1:24:F4:8B:A7:3D:62:9E:AF:CB:8B:26:45 Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft Manifest number: 0C Signing time: Sat 23 Aug 2025 08:21:13 +0000 Manifest this update: Sat 23 Aug 2025 08:21:13 +0000 Manifest next update: Sat 30 Aug 2025 08:21:13 +0000 Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: BEpf4U2toTwoNGKN/rhGmw6XeBrWChZJKfCY5r6AjGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Validity Not Before: Aug 23 08:21:13 2025 GMT Not After : Aug 30 08:21:13 2025 GMT Subject: CN=68a979f9-7065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:ba:23:c7:e1:4b:da:30:9b:d2:ae:71:ec: bf:69:4c:54:ae:84:0c:c2:d0:40:38:6a:ed:fc:e9: 4b:50:7f:62:35:15:00:b1:96:a5:96:1f:34:54:ba: 27:4d:6c:a0:56:8a:eb:5f:a8:fd:8d:09:4b:f2:94: da:08:63:d3:3a:87:fd:dd:92:ff:87:f0:55:01:4c: a1:13:d2:61:d2:a6:6b:04:92:9a:2f:a7:20:a2:45: c7:4f:8d:4b:fb:98:e7:79:81:a8:ed:54:0f:ed:58: 70:ce:f5:d4:2b:45:e7:df:61:62:20:d1:2a:ea:2c: 96:ad:d7:1b:8f:51:3f:f9:3f:f5:b6:f4:b0:0f:d1: 60:f1:80:84:d7:03:bf:8a:7d:87:85:c6:29:35:54: 5c:13:ca:ed:11:5a:1a:ff:8b:af:18:87:57:ec:e8: 33:97:f7:a3:c9:43:1a:ce:df:d2:7a:ac:81:d2:d5: 2b:a8:ee:80:4d:d0:d5:ef:68:e5:ac:96:71:a8:e6: 80:0c:b5:5a:85:e1:c6:90:2f:7f:bc:10:e4:85:f4: 70:43:c0:92:04:8c:eb:b6:de:c6:50:e4:34:9d:85: 88:3b:0f:1b:a8:ad:39:3c:31:9b:14:26:c9:ca:61: 3a:70:b9:50:03:8d:04:d0:ba:6d:3f:41:34:13:48: bb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3C:86:8D:2B:82:50:A1:24:F4:8B:A7:3D:62:9E:AF:CB:8B:26:45 X509v3 Authority Key Identifier: keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e8:9f:4f:52:c1:97:50:ce:6c:27:21:c9:06:24:89:88:c6: 11:92:37:c7:b9:69:7a:42:5f:1c:89:01:0d:dc:b0:07:5c:99: 3e:f9:5d:b7:7e:7e:b3:81:9e:37:ad:9b:8c:7b:ff:dd:7e:78: f9:3b:95:24:bc:54:1c:b1:13:dd:5b:18:46:61:35:23:6f:cb: 3e:f0:0f:25:21:c9:fa:8b:65:c9:3f:18:4d:8b:36:1c:dd:12: be:9a:88:00:48:d0:3b:44:e4:a4:c7:08:23:e8:d7:c8:da:2a: 55:97:2c:f6:25:df:38:64:97:e0:7f:f9:2f:7b:ac:ec:4c:16: ec:d3:88:22:21:7d:9b:db:4b:6e:07:76:e3:26:3b:ac:0b:e2: b3:5a:d3:bb:cf:45:ad:1b:a8:ba:7f:79:06:df:f0:26:23:c2: 54:ac:4c:7c:4f:1b:45:c7:7e:72:e3:e2:d4:57:27:61:c4:f0: a9:ff:d0:7f:6f:2f:31:35:1c:b1:c4:bb:75:ac:dc:4a:e7:22: c6:d3:b5:89:f7:45:db:5d:ed:ba:ea:1d:33:44:4b:3a:e1:a3: bf:2a:4a:db:72:3e:4d:d4:97:66:0f:98:37:93:d6:1b:75:2b: d0:06:b9:b3:c3:5d:1b:52:a2:88:5e:c7:1b:bf:8b:9b:40:8c: f6:43:de:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3 MEU4OEI4MjAeFw0yNTA4MjMwODIxMTNaFw0yNTA4MzAwODIxMTNaMBgxFjAUBgNV BAMTDTY4YTk3OWY5LTcwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Irojx+FL2jCb0q5x7L9pTFSuhAzC0EA4au386UtQf2I1FQCxlqWWHzRUuidN bKBWiutfqP2NCUvylNoIY9M6h/3dkv+H8FUBTKET0mHSpmsEkpovpyCiRcdPjUv7 mOd5gajtVA/tWHDO9dQrReffYWIg0SrqLJat1xuPUT/5P/W29LAP0WDxgITXA7+K fYeFxik1VFwTyu0RWhr/i68Yh1fs6DOX96PJQxrO39J6rIHS1Suo7oBN0NXvaOWs lnGo5oAMtVqF4caQL3+8EOSF9HBDwJIEjOu23sZQ5DSdhYg7DxuorTk8MZsUJsnK YTpwuVADjQTQum0/QTQTSLu/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzDyGjSuC UKEk9IunPWKer8uLJkUwHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp em1na1BjaXF3NjNEb2k0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3on09SwZdQzmwnIckGJImIxhGSN8e5aXpCXxyJAQ3csAdcmT75Xbd+ frOBnjetm4x7/91+ePk7lSS8VByxE91bGEZhNSNvyz7wDyUhyfqLZck/GE2LNhzd Er6aiABI0DtE5KTHCCPo18jaKlWXLPYl3zhkl+B/+S97rOxMFuzTiCIhfZvbS24H duMmO6wL4rNa07vPRa0bqLp/eQbf8CYjwlSsTHxPG0XHfnLj4tRXJ2HE8Kn/0H9v LzE1HLHEu3Ws3ErnIsbTtYn3Rdtd7brqHTNESzrho78qSttyPk3Ul2YPmDeT1ht1 K9AGubPDXRtSoohexxu/i5tAjPZD3tU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:00 2025 by rpki-client