$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: qzRukG9TLfDMBbwXSuRlv6gk63eoot6yoEe2H8KTJck= Subject key identifier: 9C:AD:5E:FA:7B:05:B0:50:28:81:85:35:5E:18:BC:CE:22:FC:04:26 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03F0 Signing time: Sat 23 Aug 2025 00:46:28 +0000 Manifest this update: Sat 23 Aug 2025 00:46:27 +0000 Manifest next update: Sat 30 Aug 2025 00:46:27 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: I/W7TMHMqMudTSOzJyZiiRAsy7JVhwFtCkNqUe3u6Jk=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Aug 23 00:46:27 2025 GMT Not After : Aug 30 00:46:27 2025 GMT Subject: CN=68a90f64-8030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:bd:6c:cd:c0:1c:27:64:c0:f6:42:f7:b0: 5d:11:8f:59:c7:3a:8f:89:61:42:5e:62:70:0d:a3: 35:49:d7:29:7d:3e:d5:dc:e9:f5:08:be:be:e8:6c: 95:3f:0c:8f:1a:71:65:95:bf:e2:90:fa:91:6c:40: e1:5f:d4:0a:01:de:26:92:51:7b:b9:a7:8b:2f:66: 01:76:ab:36:93:ae:ab:64:fd:c5:19:96:95:49:52: 50:25:8f:c7:df:79:e5:76:b8:61:b1:bc:ba:b6:0a: 13:55:e1:00:47:34:aa:93:6c:2b:72:11:e0:c6:bd: fb:7b:4c:5a:1a:42:8d:88:bc:17:f2:6f:70:2a:ce: 8d:4e:a3:04:00:80:67:f1:80:89:96:73:67:b5:ba: 5f:b9:a9:96:d6:a7:e8:aa:85:4c:d8:5d:b8:09:e4: 66:c7:f9:d5:c1:ae:d7:2e:2e:e5:24:75:1e:dc:1a: dd:86:5c:ac:0c:23:e7:65:92:0c:a4:f8:42:7e:87: 33:80:6c:0d:4d:7f:ed:9c:72:2d:7d:8a:75:df:2f: 0d:44:6f:17:71:dd:9f:8a:be:dc:41:fa:b1:d4:ea: 10:6a:ed:11:fd:21:41:32:3a:f0:22:73:fb:5c:8c: b4:e7:6b:73:ff:af:e4:f8:a9:35:b1:ca:1a:72:3b: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:5E:FA:7B:05:B0:50:28:81:85:35:5E:18:BC:CE:22:FC:04:26 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:66:3d:19:08:5f:41:02:0d:35:30:6b:8d:f8:f3:3d:b1:9f: 3e:6d:29:d6:43:be:52:d8:ab:6d:b0:7e:31:e8:79:07:b5:c2: 44:f9:3b:7f:ad:6f:92:fa:79:0a:dd:27:f0:d3:e8:6a:22:40: af:74:5f:3d:b2:fa:9f:84:1b:3d:b2:86:87:30:39:06:6e:17: 41:35:30:7d:3f:4c:f0:d1:b0:1a:0a:49:66:91:77:7d:62:5b: 60:e0:65:6f:8b:cf:e2:46:07:ca:b8:36:76:75:4c:4e:0a:32: 2e:49:2c:27:7d:37:4c:ea:d5:68:6d:98:16:f3:6b:1e:19:24: 51:47:3b:ce:c1:04:7f:3b:d7:21:37:73:fe:d5:92:a6:3f:46: 78:48:5f:fc:66:2d:71:3c:3f:51:16:68:a9:79:6a:ca:5d:4d: 2b:29:9a:b9:3c:46:bc:f8:3f:67:c3:af:d5:81:26:f0:3c:88: b5:e0:5a:e9:51:7b:0f:7a:f8:07:20:a9:12:0e:4d:1e:fc:3e: 01:c2:cb:38:0a:d8:01:91:84:9e:fb:32:55:73:50:4e:08:a5: 12:d2:73:44:7b:4a:55:58:fa:15:91:0c:23:82:d6:d1:11:32: fe:f2:56:6e:6f:b8:8b:b2:24:df:57:74:da:d1:f4:3c:3e:b9: 1f:aa:fc:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwODIzMDA0NjI3WhcNMjUwODMwMDA0NjI3WjAYMRYwFAYD VQQDEw02OGE5MGY2NC04MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXq9bM3AHCdkwPZC97BdEY9ZxzqPiWFCXmJwDaM1SdcpfT7V3On1CL6+6GyV PwyPGnFllb/ikPqRbEDhX9QKAd4mklF7uaeLL2YBdqs2k66rZP3FGZaVSVJQJY/H 33nldrhhsby6tgoTVeEARzSqk2wrchHgxr37e0xaGkKNiLwX8m9wKs6NTqMEAIBn 8YCJlnNntbpfuamW1qfoqoVM2F24CeRmx/nVwa7XLi7lJHUe3BrdhlysDCPnZZIM pPhCfoczgGwNTX/tnHItfYp13y8NRG8Xcd2fir7cQfqx1OoQau0R/SFBMjrwInP7 XIy052tz/6/k+Kk1scoacjuvgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJytXvp7 BbBQKIGFNV4YvM4i/AQmMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEZj0ZCF9BAg01MGuN+PM9sZ8+bSnWQ75S2KttsH4x6HkHtcJE+Tt/ rW+S+nkK3Sfw0+hqIkCvdF89svqfhBs9soaHMDkGbhdBNTB9P0zw0bAaCklmkXd9 Yltg4GVvi8/iRgfKuDZ2dUxOCjIuSSwnfTdM6tVobZgW82seGSRRRzvOwQR/O9ch N3P+1ZKmP0Z4SF/8Zi1xPD9RFmipeWrKXU0rKZq5PEa8+D9nw6/VgSbwPIi14Frp UXsPevgHIKkSDk0e/D4Bwss4CtgBkYSe+zJVc1BOCKUS0nNEe0pVWPoVkQwjgtbR ETL+8lZub7iLsiTfV3Ta0fQ8PrkfqvzD -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:10 2025 by rpki-client