$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json) Hash identifier: fhJHWtg50ftJVEDx69TLMb+CPLGSZloJvBNWKGnrpk4= Subject key identifier: 96:2E:DC:78:D7:0D:C4:9C:90:AA:F5:98:19:7E:26:05:45:09:FB:24 Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft Manifest number: 0379 Signing time: Sat 23 Aug 2025 01:06:48 +0000 Manifest this update: Sat 23 Aug 2025 01:06:48 +0000 Manifest next update: Sat 30 Aug 2025 01:06:48 +0000 Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: CtVGkI/ocNXf0tIHuKdaZhRZsmumlAbBJphG5yI2Xo0=) 2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Validity Not Before: Aug 23 01:06:48 2025 GMT Not After : Aug 30 01:06:48 2025 GMT Subject: CN=68a91428-c3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:03:2f:a4:61:a4:85:0a:5f:12:b1:b0:ad: 1b:aa:64:89:96:67:c4:5d:81:eb:dc:c2:48:cf:e6: 67:2f:23:66:28:9f:ac:f3:70:c0:9e:ae:6a:e4:99: 57:18:18:cc:f8:c1:0a:36:e9:0f:51:2a:72:86:60: f0:77:0b:51:e1:ab:f9:68:db:6b:32:2d:ce:ce:2c: 26:41:c9:0e:b6:78:b9:ed:f9:e8:6f:37:23:a7:e8: ae:88:13:65:fa:15:f4:dc:92:34:b9:b9:71:b5:3a: d6:e5:16:3e:76:8f:93:57:3e:48:bc:05:a8:5d:8f: 9b:e8:83:06:8b:51:e4:89:22:d6:d5:e8:67:c1:7b: df:4e:c2:c9:08:0a:76:fe:93:82:ea:23:7f:05:e3: 3e:d8:4b:36:ea:ea:69:43:c3:27:72:b1:81:c3:f3: 45:15:8f:47:f6:14:a9:e9:4f:9e:fc:5d:78:f6:3a: c6:4c:b3:a5:b7:36:4d:a0:fc:6e:af:f2:11:a2:f9: d8:d8:53:7c:ce:c2:21:41:7e:a1:69:3f:5d:92:f9: 15:93:96:9b:6b:ce:a2:92:5a:06:b3:c9:0f:d0:f5: 0f:a6:d1:ab:a1:42:ae:d6:66:eb:8a:f3:41:d1:4a: 4f:6a:15:8d:c9:ef:a3:f4:90:61:64:dc:79:a6:62: 92:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2E:DC:78:D7:0D:C4:9C:90:AA:F5:98:19:7E:26:05:45:09:FB:24 X509v3 Authority Key Identifier: keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e0:cf:fe:f1:3f:66:3d:34:c0:d6:7a:b9:aa:08:19:bf:f8: 91:c2:5d:91:87:a7:fe:b3:72:cd:4b:06:13:9c:dd:b6:01:f9: f6:5b:bd:aa:99:03:1c:ba:2d:98:bf:8d:5c:7b:4a:e1:a2:6a: 75:35:51:eb:a8:62:21:28:f7:c4:b4:88:c1:14:6d:88:25:cd: c8:3f:b7:06:a1:9e:6f:16:4b:a5:e3:b2:13:0f:58:f8:5e:89: e7:5f:ea:32:1a:b4:de:c3:62:b2:19:f5:2b:ed:90:c3:0d:14: e5:05:d1:dc:5f:5e:65:78:f3:73:92:f7:be:78:f7:65:d7:09: 7e:50:05:c1:a1:44:a0:64:62:4e:47:42:55:86:9a:ee:4a:67: e6:a9:3d:2b:3c:a5:71:eb:ee:87:e2:e8:b0:9b:18:6d:e6:aa: 6b:c7:8a:fe:cd:8a:08:24:b3:d3:e7:bc:85:65:04:fe:d3:5b: 5e:04:7f:ef:1a:b2:b8:e7:66:f0:73:87:38:05:9a:ae:ae:14: df:eb:71:99:e1:e1:ac:7d:e7:1f:1d:77:58:d0:0b:ec:7d:b1: 4e:9a:42:80:25:ff:98:b6:01:71:5b:66:2f:b6:ef:0e:a5:c2: 6b:a7:ab:ea:8b:c1:da:ea:5b:e3:75:56:10:61:03:d3:f2:0e: 5a:33:f1:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz OTNBOUQxNjQwHhcNMjUwODIzMDEwNjQ4WhcNMjUwODMwMDEwNjQ4WjAYMRYwFAYD VQQDEw02OGE5MTQyOC1jM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW4DL6RhpIUKXxKxsK0bqmSJlmfEXYHr3MJIz+ZnLyNmKJ+s83DAnq5q5JlX GBjM+MEKNukPUSpyhmDwdwtR4av5aNtrMi3OziwmQckOtni57fnobzcjp+iuiBNl +hX03JI0ublxtTrW5RY+do+TVz5IvAWoXY+b6IMGi1HkiSLW1ehnwXvfTsLJCAp2 /pOC6iN/BeM+2Es26uppQ8MncrGBw/NFFY9H9hSp6U+e/F149jrGTLOltzZNoPxu r/IRovnY2FN8zsIhQX6haT9dkvkVk5aba86ikloGs8kP0PUPptGroUKu1mbrivNB 0UpPahWNye+j9JBhZNx5pmKS3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYu3HjX DcSckKr1mBl+JgVFCfskMB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5 MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpo a3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV4M/+8T9mPTTA1nq5qggZv/iRwl2Rh6f+s3LNSwYTnN22Afn2W72q mQMcui2Yv41ce0rhomp1NVHrqGIhKPfEtIjBFG2IJc3IP7cGoZ5vFkul47ITD1j4 XonnX+oyGrTew2KyGfUr7ZDDDRTlBdHcX15lePNzkve+ePdl1wl+UAXBoUSgZGJO R0JVhpruSmfmqT0rPKVx6+6H4uiwmxht5qprx4r+zYoIJLPT57yFZQT+01teBH/v GrK452bwc4c4BZqurhTf63GZ4eGsfecfHXdY0AvsfbFOmkKAJf+YtgFxW2Yvtu8O pcJrp6vqi8Ha6lvjdVYQYQPT8g5aM/FF -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:14 2025 by rpki-client