$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft File: 10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json) Hash identifier: cdjYR26hzpKuRchNctWcLFM4wU+LF12dlZ/vewowIXc= Subject key identifier: F8:DC:36:9F:7E:CC:EF:0C:5E:4D:08:49:D3:D6:05:42:B5:02:AC:48 Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft Manifest number: 0AEC Signing time: Fri 22 Aug 2025 19:33:07 +0000 Manifest this update: Fri 22 Aug 2025 19:33:07 +0000 Manifest next update: Fri 29 Aug 2025 19:33:07 +0000 Files and hashes: 1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: B1yCOxUl4Myk6do6XzgFqCAslWKZ9YXHrkBe7alzriM=) 2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: Iq6DjDAWYaikvNVka5L51lFXKJ+7UZRQJoPc5OKJvsI=) 3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: O+Syjtqn23Qr9c/D9JPic1jy/KjI63RsKq7ObP7Z1Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Validity Not Before: Aug 22 19:33:07 2025 GMT Not After : Aug 29 19:33:07 2025 GMT Subject: CN=68a8c5f3-479e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:f8:6d:5e:de:e6:fd:7d:db:c7:1c:18:df: 9e:6b:fc:78:55:ef:5e:50:f8:65:b6:29:b1:15:3a: d8:fa:11:de:12:f0:21:3f:26:98:1d:2d:60:8d:e7: 3b:cd:e2:c1:b5:09:30:2a:a3:0f:10:f8:72:93:a6: e8:74:a3:94:52:2d:9a:d7:df:ab:96:fd:8d:89:a8: 23:13:02:7f:19:ac:cd:d7:35:2a:2f:5f:5e:38:23: fd:62:98:aa:56:59:a8:df:01:7c:52:c4:40:d3:dd: d6:9e:e0:89:43:35:4f:65:66:f0:7d:d1:23:bb:69: c2:9e:66:02:ac:d0:ce:67:55:4b:3a:47:63:f1:28: dd:14:7b:b3:43:b9:b3:5b:2b:68:59:4c:43:89:96: 2a:38:22:f4:51:1c:19:dd:49:3a:56:83:80:95:4c: 6c:b5:65:52:02:aa:0b:b2:28:86:65:14:a3:d6:96: bd:95:b5:00:e1:df:48:f5:76:0d:55:3c:8b:c1:b4: 80:24:3e:31:09:24:05:27:0e:5d:f9:32:4a:8e:44: 67:cb:2f:aa:02:cf:6a:ff:95:34:0a:27:25:1f:31: c4:78:2c:19:64:32:65:eb:53:8e:85:7f:52:09:3a: b3:02:1d:67:de:a3:58:9e:5d:62:bb:96:2d:d4:8e: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DC:36:9F:7E:CC:EF:0C:5E:4D:08:49:D3:D6:05:42:B5:02:AC:48 X509v3 Authority Key Identifier: keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a4:b6:24:f0:ba:15:0f:94:cb:15:54:77:f7:ec:64:95:7c: ae:64:ad:de:f8:92:12:79:68:91:8f:d8:22:45:e9:41:c0:73: 37:8e:ce:c8:5c:7f:54:3a:7b:01:52:22:62:2c:81:12:2f:61: 3f:c4:a2:7f:58:95:ed:60:5c:54:8a:72:06:9e:bd:24:cc:57: 2a:55:cc:1c:8b:48:c7:dd:8f:6f:0b:e7:7f:e3:fd:75:64:79: d1:f1:62:fc:16:3a:22:33:13:d8:2a:a8:ee:29:09:ac:13:d6: 76:e1:19:25:dd:e6:c2:71:ed:79:b8:e1:a9:89:f5:45:57:04: da:06:d3:4f:1e:19:68:9e:ef:f6:1e:35:33:1e:88:69:27:87: 1a:cc:ed:1d:e1:d5:53:31:56:1a:26:04:69:83:7e:58:be:2c: 39:64:92:1b:39:26:28:da:ca:ca:98:bf:03:da:ca:2c:7f:55: 6b:4a:d6:e1:cb:09:82:36:47:b1:d0:ed:e6:d0:2c:e5:fc:66: b9:49:71:b2:dd:b6:53:72:91:61:91:7b:24:36:1a:f5:01:85: 8f:60:3e:e3:de:5e:00:63:42:72:44:be:54:c6:e1:ac:d4:31: ad:b8:8c:05:1b:32:a2:8c:7e:15:41:21:7b:3a:60:57:85:cc: 3c:b3:01:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE Q0IwRTIzNkQwHhcNMjUwODIyMTkzMzA3WhcNMjUwODI5MTkzMzA3WjAYMRYwFAYD VQQDEw02OGE4YzVmMy00NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE/4bV7e5v1928ccGN+ea/x4Ve9eUPhltimxFTrY+hHeEvAhPyaYHS1gjec7 zeLBtQkwKqMPEPhyk6bodKOUUi2a19+rlv2NiagjEwJ/GazN1zUqL19eOCP9Ypiq Vlmo3wF8UsRA093WnuCJQzVPZWbwfdEju2nCnmYCrNDOZ1VLOkdj8SjdFHuzQ7mz WytoWUxDiZYqOCL0URwZ3Uk6VoOAlUxstWVSAqoLsiiGZRSj1pa9lbUA4d9I9XYN VTyLwbSAJD4xCSQFJw5d+TJKjkRnyy+qAs9q/5U0CiclHzHEeCwZZDJl61OOhX9S CTqzAh1n3qNYnl1iu5Yt1I6fHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjcNp9+ zO8MXk0ISdPWBUK1AqxIMB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTcyNi82REJGQTM4QTUyRDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVr UDhzdm1RVzhVZHZjc09JMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVpLYk8LoVD5TLFVR39+xklXyuZK3e+JISeWiRj9giRelBwHM3js7I XH9UOnsBUiJiLIESL2E/xKJ/WJXtYFxUinIGnr0kzFcqVcwci0jH3Y9vC+d/4/11 ZHnR8WL8FjoiMxPYKqjuKQmsE9Z24Rkl3ebCce15uOGpifVFVwTaBtNPHhlonu/2 HjUzHohpJ4cazO0d4dVTMVYaJgRpg35Yviw5ZJIbOSYo2srKmL8D2sosf1VrStbh ywmCNkex0O3m0Czl/Ga5SXGy3bZTcpFhkXskNhr1AYWPYD7j3l4AY0JyRL5UxuGs 1DGtuIwFGzKijH4VQSF7OmBXhcw8swGX -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:58 2025 by rpki-client