$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: 7M/IikL0x65AjkoM2BaWmxV+FvcGHffSOydLzb3X5LI= Subject key identifier: 03:A4:67:20:6E:65:77:52:4C:01:43:C0:D2:4D:D1:A1:0F:E5:66:90 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 740C2254B823D039B6CE25A7C950EEF7029EC9D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 78 Signing time: Mon 20 Oct 2025 06:01:57 +0000 Manifest this update: Mon 20 Oct 2025 05:56:57 +0000 Manifest next update: Tue 21 Oct 2025 06:04:57 +0000 Files and hashes: 1: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: GgVZOoFLtwIsYdW4cbv3PWaTapQ2Kd8LLKOhDCYOnpM=) 2: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=) 3: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=) 4: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: RDNXpylv0IlOw3O/7fE48tOOsRe7Sfyvu1b+jDwo7qI=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 06:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0c:22:54:b8:23:d0:39:b6:ce:25:a7:c9:50:ee:f7:02:9e:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Oct 20 05:56:57 2025 GMT Not After : Oct 21 06:04:57 2025 GMT Subject: CN=03A467206E6577524C0143C0D24DD1A10FE56690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:28:d1:d6:23:71:4e:73:1b:fb:69:f3:36: 31:03:75:12:99:84:5e:79:cf:cc:98:60:23:22:af: e2:aa:c0:56:b5:a4:af:21:1e:a5:d0:f0:32:1b:06: 8e:0f:da:af:9a:77:e6:a8:87:ea:57:41:40:41:87: e3:67:2c:40:c4:3e:83:71:3d:77:e6:fe:9f:46:e0: bc:06:2a:79:b9:84:f3:57:6c:b4:77:f5:90:bf:90: dc:a9:6c:24:76:80:fd:ff:00:45:93:23:23:4d:43: a9:4e:bc:6b:98:bc:eb:44:9e:90:ca:a3:63:1e:da: e6:9e:be:71:bb:a8:82:71:bf:69:cf:6c:c3:93:8e: 3c:23:05:2a:aa:38:ec:ac:e9:e0:dc:5b:a6:ee:69: 8f:b8:c2:12:7a:32:3f:79:af:be:d0:76:c6:18:06: 34:5a:f1:c6:e1:af:e6:b5:9d:af:36:95:14:1b:c0: bc:99:82:0c:83:22:02:47:a3:ec:01:9f:19:53:bc: 4e:4d:38:51:e3:73:71:1b:b5:4f:f0:ff:3a:10:9f: 67:44:f8:f6:74:39:19:9d:e0:cb:c3:32:80:53:a4: 4b:6a:aa:43:04:fe:66:c4:6b:c7:17:49:fe:b3:59: 78:9b:92:fb:56:72:9b:45:58:cf:e5:0e:42:6b:8c: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A4:67:20:6E:65:77:52:4C:01:43:C0:D2:4D:D1:A1:0F:E5:66:90 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0e:74:bf:9f:fa:80:f2:40:38:ef:ac:bd:4c:eb:b9:ae:cf: 18:32:5e:c5:37:c1:ad:98:7a:24:8c:fa:d1:56:5b:ec:93:ce: 3e:2e:8f:ce:c4:37:80:13:cc:01:02:e8:b0:57:09:49:8f:7b: ae:51:5b:62:21:73:ed:c0:0f:f0:7c:06:9c:bb:b4:65:4a:5f: e5:bc:4c:0a:69:c3:d6:13:a6:93:1a:79:d0:92:be:16:ca:62: 2d:94:d8:e2:2a:3b:8c:47:c4:6b:eb:99:3a:b1:4a:59:b2:ac: e8:06:6d:83:1f:f4:2e:d8:03:6b:d0:8b:b6:a7:56:d7:c1:11: 86:5e:94:b7:e8:86:98:7b:63:f3:df:fd:bf:cf:6d:ea:13:ac: 08:b4:a5:67:47:b3:3f:e2:f1:4f:42:92:84:e0:17:ee:1a:c2: 2a:02:69:f5:cd:aa:aa:87:a3:ed:42:2f:8d:21:21:ea:09:a5: 62:ed:f0:db:20:2c:f8:36:b6:b4:12:c9:6e:31:98:43:d0:60: 23:e6:53:b4:1b:94:11:90:ba:11:4c:a0:37:e4:c7:0b:d8:4a: 72:16:8e:46:5e:e0:5a:ac:ce:4c:d6:e9:6a:d1:e6:d3:0e:c3: c6:05:bb:2a:0b:d7:35:da:1f:06:26:f1:2b:cf:24:45:44:a4: 99:77:be:b4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdAwiVLgj0Dm2ziWnyVDu9wKeydAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI1MTAyMDA1NTY1N1oX DTI1MTAyMTA2MDQ1N1owMzExMC8GA1UEAxMoMDNBNDY3MjA2RTY1Nzc1MjRDMDE0 M0MwRDI0REQxQTEwRkU1NjY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMpgKNHWI3FOcxv7afM2MQN1EpmEXnnPzJhgIyKv4qrAVrWkryEepdDwMhsG jg/ar5p35qiH6ldBQEGH42csQMQ+g3E9d+b+n0bgvAYqebmE81dstHf1kL+Q3Kls JHaA/f8ARZMjI01DqU68a5i860SekMqjYx7a5p6+cbuognG/ac9sw5OOPCMFKqo4 7Kzp4Nxbpu5pj7jCEnoyP3mvvtB2xhgGNFrxxuGv5rWdrzaVFBvAvJmCDIMiAkej 7AGfGVO8Tk04UeNzcRu1T/D/OhCfZ0T49nQ5GZ3gy8MygFOkS2qqQwT+ZsRrxxdJ /rNZeJuS+1Zym0VYz+UOQmuMNJsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQDpGcg bmV3UkwBQ8DSTdGhD+VmkDAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAkw50v5/6gPJAOO+svUzrua7PGDJexTfBrZh6JIz60VZb7JPO Pi6PzsQ3gBPMAQLosFcJSY97rlFbYiFz7cAP8HwGnLu0ZUpf5bxMCmnD1hOmkxp5 0JK+FspiLZTY4io7jEfEa+uZOrFKWbKs6AZtgx/0LtgDa9CLtqdW18ERhl6Ut+iG mHtj89/9v89t6hOsCLSlZ0ezP+LxT0KShOAX7hrCKgJp9c2qqoej7UIvjSEh6gml Yu3w2yAs+Da2tBLJbjGYQ9BgI+ZTtBuUEZC6EUygN+THC9hKchaORl7gWqzOTNbp atHm0w7DxgW7KgvXNdofBibxK88kRUSkmXe+tA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:55 2025 by rpki-client