$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: v9hrw2pEAQmJPUn/tPiq4Pz38v2/q3nQEzkJcSLp5oI= Subject key identifier: CB:8A:BD:8F:30:8D:D4:0A:CA:29:93:1A:5D:C3:20:90:22:2B:61:70 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 091694631D6176AEF8C39C2BBE6FB7054824805C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 17:10:02 +0000 Manifest this update: Sat 23 Aug 2025 17:05:02 +0000 Manifest next update: Sun 24 Aug 2025 18:52:02 +0000 Files and hashes: 1: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=) 2: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: XWN3yKUlkgHfc3qXwPkzWHDrsJkPPKW3pBajKcjIll0=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:16:94:63:1d:61:76:ae:f8:c3:9c:2b:be:6f:b7:05:48:24:80:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Aug 23 17:05:02 2025 GMT Not After : Aug 24 18:52:02 2025 GMT Subject: CN=CB8ABD8F308DD40ACA29931A5DC32090222B6170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:87:5b:f6:9e:22:dc:75:eb:08:f7:30:ce: 39:0a:0e:b3:22:01:d6:56:f6:f3:9c:69:94:69:11: a4:41:e1:0a:a7:da:00:29:09:85:50:79:03:05:49: ce:2a:57:41:d5:d6:f8:8a:9d:c1:a2:e7:a3:6b:f0: d3:15:fa:4d:2e:17:d7:44:26:11:7c:ce:d6:3f:45: eb:05:e0:96:d9:fc:65:ef:46:82:ea:98:d1:60:26: dc:fb:df:ad:49:68:a0:9a:6b:c5:3b:b1:e5:10:a0: 54:2c:0d:e7:46:6e:81:60:dc:82:93:c8:4c:6e:a5: e9:77:fa:24:4f:ad:cf:7d:b1:3e:5e:2e:5b:b5:74: 46:91:f1:d3:b9:e9:fa:40:61:c5:31:db:f5:0d:29: cf:55:67:fd:a2:97:0a:32:0b:a0:54:c5:8c:a1:9a: 8b:76:0a:cb:39:21:fe:ab:ea:ac:1d:fc:f3:e3:09: 81:ce:8b:e9:2d:b8:6f:42:62:7d:26:2d:3e:d0:39: 67:6f:39:0e:8a:7f:60:a9:11:6d:a7:03:20:7e:cd: ce:47:86:bc:47:64:22:02:84:ed:f7:bd:32:48:50: c5:5d:25:d8:70:6e:09:14:17:ab:db:f0:97:c9:63: 2a:57:84:de:e8:86:2b:f3:61:16:dc:ba:3a:c5:7c: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8A:BD:8F:30:8D:D4:0A:CA:29:93:1A:5D:C3:20:90:22:2B:61:70 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7e:74:0f:4e:22:3a:98:2a:43:ef:0c:b2:30:d9:bf:df:22: f3:16:b1:7d:ee:0d:5f:a5:03:80:00:ed:d9:62:b8:be:cd:22: 22:69:78:c0:6d:d2:06:06:f5:77:b8:39:ee:db:d2:bc:a5:7d: 72:89:1e:a2:45:f9:9f:b9:70:8b:ce:bc:7d:29:a1:5d:80:dd: 1c:d8:c4:e8:89:3d:4e:6f:97:a0:24:5a:9f:d1:19:32:4d:08: 91:d6:f0:13:d2:72:4d:fb:b3:37:ba:60:f0:fd:ef:e6:f7:e8: 00:0d:a2:6c:a7:a1:84:29:5b:ef:bb:c9:57:26:41:37:a2:1b: 01:81:e6:55:f1:4f:ea:89:2c:f4:44:85:23:5d:29:20:51:e1: d5:54:80:e8:09:26:bd:50:c9:ac:7a:86:4a:57:d7:2a:f4:99: 25:69:12:6a:b0:9d:02:4e:06:09:d3:c1:99:f0:31:52:41:1f: 7e:c7:44:c4:9c:c3:bc:9a:24:cc:65:84:d1:33:de:9c:a2:57: ec:95:03:3a:3b:7a:2c:41:db:05:eb:6d:25:0b:ef:d5:1a:d9: d0:9d:40:76:f1:66:96:95:01:a6:7f:fa:4a:90:23:bf:34:1b: a1:eb:b0:58:a0:50:11:2d:d0:aa:6d:ff:a8:d5:ce:7e:d4:7f: f3:18:1c:a8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCRaUYx1hdq74w5wrvm+3BUgkgFwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI1MDgyMzE3MDUwMloX DTI1MDgyNDE4NTIwMlowMzExMC8GA1UEAxMoQ0I4QUJEOEYzMDhERDQwQUNBMjk5 MzFBNURDMzIwOTAyMjJCNjE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKkWh1v2niLcdesI9zDOOQoOsyIB1lb285xplGkRpEHhCqfaACkJhVB5AwVJ zipXQdXW+IqdwaLno2vw0xX6TS4X10QmEXzO1j9F6wXgltn8Ze9GguqY0WAm3Pvf rUlooJprxTux5RCgVCwN50ZugWDcgpPITG6l6Xf6JE+tz32xPl4uW7V0RpHx07np +kBhxTHb9Q0pz1Vn/aKXCjILoFTFjKGai3YKyzkh/qvqrB388+MJgc6L6S24b0Ji fSYtPtA5Z285Dop/YKkRbacDIH7NzkeGvEdkIgKE7fe9MkhQxV0l2HBuCRQXq9vw l8ljKleE3uiGK/NhFty6OsV8KUsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTLir2P MI3UCsopkxpdwyCQIithcDAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAXX50D04iOpgqQ+8MsjDZv98i8xaxfe4NX6UDgADt2WK4vs0i Iml4wG3SBgb1d7g57tvSvKV9cokeokX5n7lwi868fSmhXYDdHNjE6Ik9Tm+XoCRa n9EZMk0IkdbwE9JyTfuzN7pg8P3v5vfoAA2ibKehhClb77vJVyZBN6IbAYHmVfFP 6oks9ESFI10pIFHh1VSA6AkmvVDJrHqGSlfXKvSZJWkSarCdAk4GCdPBmfAxUkEf fsdExJzDvJokzGWE0TPenKJX7JUDOjt6LEHbBettJQvv1RrZ0J1AdvFmlpUBpn/6 SpAjvzQboeuwWKBQES3Qqm3/qNXOftR/8xgcqA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:37 2025 by rpki-client