$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: xpjDDR8ubK1+5o9HDnBQUC8kOYPNqbowFBlV/Oe1Rx4= Subject key identifier: 5B:2E:1A:92:BF:53:97:49:28:1A:38:92:C1:DF:BB:09:F9:ED:A8:AB Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 0207 Signing time: Sat 23 Aug 2025 02:21:30 +0000 Manifest this update: Sat 23 Aug 2025 02:21:30 +0000 Manifest next update: Sat 30 Aug 2025 02:21:30 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: nMyIysP9oZuiZJbC7EySxqRpbv7qxgi+tlHZqqJJEv4=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: hbdkOUT0eBQ98Cc0oj/9P37h6+6Kubs6FMec8+3wPTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Aug 23 02:21:30 2025 GMT Not After : Aug 30 02:21:30 2025 GMT Subject: CN=68a925aa-f485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:4a:90:f1:61:49:27:b0:ff:49:03:2a:5d: 26:4d:01:ea:27:de:8c:05:0f:8e:b7:a1:eb:d5:9c: 5e:b6:f9:2c:53:c7:34:83:c2:ab:bd:7f:1b:8e:4b: a8:00:ba:92:9a:f5:f4:d8:2e:21:71:c9:30:88:d3: 5a:66:aa:2d:86:b8:5f:4f:68:57:de:7e:6b:bc:1f: 67:b5:87:3d:75:dd:b1:dd:fd:2c:dd:a3:2d:12:34: 22:37:a8:b9:df:b9:9a:af:80:e8:11:ff:81:1b:bb: a1:d1:3a:ea:64:c2:f3:1b:48:af:21:b5:1c:93:d4: 7c:86:e0:43:f3:ec:f5:02:74:c5:7d:7d:7b:1f:a6: 54:c3:0e:48:9b:4d:ae:b9:01:04:d1:33:1b:17:fc: e9:65:dd:97:59:9b:15:0f:9e:1e:40:0a:09:dc:8b: 99:0e:ef:f3:58:88:16:71:7a:98:6b:75:33:b5:95: 92:6c:11:74:a7:a8:fc:81:cb:ea:70:db:98:86:76: 4d:f8:2e:ec:42:ee:41:f5:58:bd:3a:d5:a4:c4:02: 88:62:6d:f6:71:01:f8:96:dc:00:d5:77:06:d0:4d: d6:e8:2e:3b:d0:9b:80:31:b5:3e:1b:ba:6a:ce:d6: b3:5e:45:6e:e3:a4:39:39:19:4a:82:cc:b8:32:df: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:1A:92:BF:53:97:49:28:1A:38:92:C1:DF:BB:09:F9:ED:A8:AB X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:aa:eb:38:df:81:41:e1:cd:4c:43:00:37:12:5b:90:bb:ce: d7:37:e7:98:9b:ee:a4:de:e9:9f:77:c7:91:c4:96:59:f3:da: 53:af:e8:45:ec:2c:ad:dc:b2:98:36:12:8b:34:c2:3d:db:00: 79:f7:07:a5:1b:30:68:bb:a1:48:c7:29:b3:cc:df:02:7c:bd: db:b2:22:3c:ed:6b:13:c7:29:e1:7b:8b:14:61:7e:dd:44:7b: 8b:a4:53:b0:fb:e8:99:14:ad:ac:bd:9a:5e:93:6f:d5:2c:ac: 23:0f:1a:76:37:40:59:f8:32:29:ac:1f:1f:b6:07:7a:b7:87: ab:5e:9b:86:4b:d3:0b:e8:8e:a7:e7:67:52:c8:72:d4:e3:0b: dc:bc:8a:4d:87:81:9b:33:11:09:f4:fa:4d:db:86:dd:75:89: 46:23:4b:10:cd:8b:b2:e7:56:86:1e:66:b7:16:fe:c0:77:69: cf:27:28:43:e1:84:e7:8a:ca:3d:1a:0e:75:d3:06:01:a2:e2: 51:e9:01:54:80:df:d1:82:ef:0e:2f:37:5a:06:02:58:c6:29: cc:0b:74:16:06:c8:ff:33:c0:40:2f:37:b9:11:35:13:e2:ee: de:af:29:d7:7c:ea:0d:56:93:20:f3:37:0c:9f:0d:80:2c:aa: cb:80:00:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjUwODIzMDIyMTMwWhcNMjUwODMwMDIyMTMwWjAYMRYwFAYD VQQDEw02OGE5MjVhYS1mNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0xKkPFhSSew/0kDKl0mTQHqJ96MBQ+Ot6Hr1ZxetvksU8c0g8KrvX8bjkuo ALqSmvX02C4hcckwiNNaZqothrhfT2hX3n5rvB9ntYc9dd2x3f0s3aMtEjQiN6i5 37mar4DoEf+BG7uh0TrqZMLzG0ivIbUck9R8huBD8+z1AnTFfX17H6ZUww5Im02u uQEE0TMbF/zpZd2XWZsVD54eQAoJ3IuZDu/zWIgWcXqYa3UztZWSbBF0p6j8gcvq cNuYhnZN+C7sQu5B9Vi9OtWkxAKIYm32cQH4ltwA1XcG0E3W6C470JuAMbU+G7pq ztazXkVu46Q5ORlKgsy4Mt9r8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsuGpK/ U5dJKBo4ksHfuwn57airMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7qus434FB4c1MQwA3EluQu87XN+eYm+6k3umfd8eRxJZZ89pTr+hF 7Cyt3LKYNhKLNMI92wB59welGzBou6FIxymzzN8CfL3bsiI87WsTxynhe4sUYX7d RHuLpFOw++iZFK2svZpek2/VLKwjDxp2N0BZ+DIprB8ftgd6t4erXpuGS9ML6I6n 52dSyHLU4wvcvIpNh4GbMxEJ9PpN24bddYlGI0sQzYuy51aGHma3Fv7Ad2nPJyhD 4YTniso9Gg510wYBouJR6QFUgN/Rgu8OLzdaBgJYxinMC3QWBsj/M8BALze5ETUT 4u7erynXfOoNVpMg8zcMnw2ALKrLgACt -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:00 2025 by rpki-client