$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: P5Xbo0J8yik8xE39TaEAub9E1/jCuM1VdlOPyLg/arM= Subject key identifier: E9:60:48:2A:5D:E2:54:25:8A:F1:AC:CB:80:49:06:0A:A0:57:58:2B Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0186 Signing time: Sat 09 Aug 2025 03:56:27 +0000 Manifest this update: Sat 09 Aug 2025 03:56:26 +0000 Manifest next update: Sat 16 Aug 2025 03:56:26 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: 57hdvKMsX4tFs4gPubf+JliDUxvnjggMVECzPo59Xz4=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Aug 9 03:56:26 2025 GMT Not After : Aug 16 03:56:26 2025 GMT Subject: CN=6896c6eb-4a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:88:03:0c:0c:82:82:cb:d1:bb:16:cf:4e: c8:5b:6a:02:e2:48:fc:65:2e:8a:bc:30:a7:61:f1: 90:7a:c5:06:42:ca:ff:dd:f1:48:e8:3b:df:a1:73: 4a:74:94:5b:4c:ff:05:49:37:06:d4:b3:b6:9d:27: a2:b8:bd:c5:ef:4a:dc:62:00:6d:09:ae:fe:b1:1c: 23:8a:f4:a9:2f:16:65:da:97:e2:0b:bb:b9:8c:e9: ce:56:b7:57:67:8e:da:44:9e:59:32:46:bb:1c:7a: 05:e5:a7:b7:a8:d6:3f:0f:3b:81:2b:53:71:27:95: b5:75:76:25:f0:45:1b:c7:27:97:51:2b:49:5e:29: d4:d7:7c:54:ec:ed:e6:7f:c8:88:fb:7d:f0:8b:1f: 32:c2:74:40:11:7e:49:62:c2:25:38:19:5c:0c:49: e6:15:d6:f2:65:5d:f6:18:ff:24:42:f0:cb:e5:a1: 95:ce:42:57:ab:62:e9:c5:75:39:f2:4d:f6:1e:ed: 37:86:a3:c1:03:3d:94:76:b6:4b:54:9f:e7:e7:6d: 83:7d:88:02:25:ea:fd:42:d5:8f:f2:06:05:80:2d: 95:bc:6c:fa:e1:6f:e6:7f:a7:26:8a:77:62:b5:cf: 0e:de:ce:40:df:88:61:d2:75:f7:47:73:7b:27:e3: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:60:48:2A:5D:E2:54:25:8A:F1:AC:CB:80:49:06:0A:A0:57:58:2B X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:96:77:29:1e:bb:c6:97:cc:90:80:e5:8f:8f:da:d6:b3: 2f:9c:46:65:86:22:31:ff:98:0e:da:9b:b7:82:36:68:07:a5: d5:ce:aa:1b:85:2e:bd:e4:41:03:cd:57:cb:dc:87:de:27:a7: 91:36:70:99:68:df:a8:94:15:39:06:28:34:44:2c:13:47:c5: c5:3d:db:c3:87:76:b1:74:a5:b4:61:69:6d:51:d0:c5:e4:cf: 1e:c9:3e:dc:1d:5b:68:52:0b:2d:13:6b:c6:63:2b:2d:63:af: 9a:c2:d5:c9:1e:de:d8:0d:d8:d1:ef:34:d8:24:12:3c:7c:0c: f8:62:3d:c2:e5:62:97:05:14:ec:fa:b0:e2:2e:82:c1:3f:a0: 5e:34:0a:dc:d0:6e:2a:d6:ca:6e:91:17:16:8c:db:04:85:da: 94:90:ce:37:59:78:6a:4c:5d:e5:63:86:33:6b:87:93:e6:b3: 46:7a:91:18:26:59:58:00:f0:37:ac:dc:a5:b2:ca:88:4c:e0: d4:da:3d:e2:e5:7d:7a:63:88:1d:d2:c5:e7:c6:cc:a7:d9:ab: 0e:c2:b9:23:7b:f4:7e:57:c1:a1:19:09:af:20:23:10:6a:52: 56:33:7b:14:bf:14:1a:03:51:ef:c8:94:43:27:12:4e:86:c2: 82:67:1e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwODA5MDM1NjI2WhcNMjUwODE2MDM1NjI2WjAYMRYwFAYD VQQDEw02ODk2YzZlYi00YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncOIAwwMgoLL0bsWz07IW2oC4kj8ZS6KvDCnYfGQesUGQsr/3fFI6DvfoXNK dJRbTP8FSTcG1LO2nSeiuL3F70rcYgBtCa7+sRwjivSpLxZl2pfiC7u5jOnOVrdX Z47aRJ5ZMka7HHoF5ae3qNY/DzuBK1NxJ5W1dXYl8EUbxyeXUStJXinU13xU7O3m f8iI+33wix8ywnRAEX5JYsIlOBlcDEnmFdbyZV32GP8kQvDL5aGVzkJXq2LpxXU5 8k32Hu03hqPBAz2UdrZLVJ/n522DfYgCJer9QtWP8gYFgC2VvGz64W/mf6cmindi tc8O3s5A34hh0nX3R3N7J+P2lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlgSCpd 4lQlivGsy4BJBgqgV1grMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg4pZ3KR67xpfMkIDlj4/a1rMvnEZlhiIx/5gO2pu3gjZoB6XVzqob hS695EEDzVfL3IfeJ6eRNnCZaN+olBU5Big0RCwTR8XFPdvDh3axdKW0YWltUdDF 5M8eyT7cHVtoUgstE2vGYystY6+awtXJHt7YDdjR7zTYJBI8fAz4Yj3C5WKXBRTs +rDiLoLBP6BeNArc0G4q1spukRcWjNsEhdqUkM43WXhqTF3lY4Yza4eT5rNGepEY JllYAPA3rNylssqITODU2j3i5X16Y4gd0sXnxsyn2asOwrkje/R+V8GhGQmvICMQ alJWM3sUvxQaA1HvyJRDJxJOhsKCZx63 -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:22 2025 by rpki-client