$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: p3sRNM8vL1b1ptenSkoN/GNIw5YAY6mS8jzfkz5bN0Q= Subject key identifier: D7:ED:05:B1:98:5D:69:2B:09:E2:C5:69:34:8D:87:C6:66:40:A3:EF Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 01C2 Signing time: Thu 07 Aug 2025 03:24:31 +0000 Manifest this update: Thu 07 Aug 2025 03:24:31 +0000 Manifest next update: Thu 14 Aug 2025 03:24:31 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: pYQz29HkifDpBKCtXGhvN0ABzdB/DNCQM+NDl2zD30c=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Aug 7 03:24:31 2025 GMT Not After : Aug 14 03:24:31 2025 GMT Subject: CN=68941c6f-8d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:75:ec:f1:8d:97:ce:13:e2:fa:ea:5d:96: b1:3c:97:27:55:5f:87:0e:27:a1:3a:ab:b2:c0:ff: f8:2f:cc:02:07:90:47:84:04:4e:84:c5:8d:52:6b: 9c:66:90:83:7e:19:a5:70:90:d5:87:45:e4:fc:52: a8:9d:b2:33:c8:82:0a:8b:f8:25:0a:36:0c:74:a4: 02:e7:0b:e9:fc:e0:a4:b9:16:32:82:aa:fb:0d:b8: 40:55:0f:7b:62:26:8e:6b:bf:84:2c:ff:7d:b6:d4: 2b:20:c2:05:d1:c6:f2:c2:12:ba:0a:5c:5a:1f:2a: 0b:9a:cd:78:fd:d4:c8:e7:bf:a0:f6:49:d0:c2:d6: 5b:ae:db:d0:2f:7c:df:b6:e8:66:c5:ac:ab:f8:6a: ef:77:07:3b:c7:8c:f3:be:9a:80:27:22:d7:ba:fd: 03:d4:cb:20:8e:76:78:a4:5f:d9:5b:a5:1e:79:22: 12:09:a3:1e:c3:7a:a4:f7:81:e0:b4:32:e8:48:8a: 79:95:9d:8a:f6:1a:17:da:74:73:03:91:9c:e2:fb: 7b:2c:ff:e3:a3:00:73:99:06:f8:24:9a:30:db:4d: 67:bd:00:53:40:b2:03:96:4d:58:3f:3f:76:4f:c8: bd:28:4b:42:5e:ef:ce:15:ce:bd:49:5e:fe:94:32: d0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:ED:05:B1:98:5D:69:2B:09:E2:C5:69:34:8D:87:C6:66:40:A3:EF X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:91:8a:94:1d:cc:41:59:08:c7:11:3f:67:37:6e:a9:28: 30:22:0c:79:6c:13:b3:ad:ef:2c:62:84:fe:e8:f0:45:0b:0e: d1:fd:83:8f:fe:c2:52:67:d0:19:20:d6:c4:fd:a7:4f:0a:a2: bb:12:0e:c2:db:5b:79:93:30:1b:27:1b:fc:0c:8f:e0:ee:18: ff:e8:07:7f:a0:da:6b:08:43:76:34:5f:31:2e:2f:5a:78:cb: df:66:63:c2:6b:5a:9a:04:57:48:a2:a6:b2:34:b6:e0:0e:c6: a1:ec:54:b6:24:1d:f7:23:04:f8:5c:88:58:55:3a:2a:f0:5c: be:cd:e5:45:ac:20:f2:5d:76:fc:00:a6:84:73:3f:84:67:76: dd:8d:e0:7a:ff:26:dc:6d:a8:a1:f3:b4:81:c8:e2:7e:5f:02: 80:bf:26:e3:7f:0e:05:56:8b:89:f2:c8:f7:de:8e:11:bc:6c: 7c:5f:2b:5b:9b:36:08:72:db:ea:78:8c:38:1d:2c:ed:7e:0c: cb:c3:23:b0:80:ea:d3:2c:c3:9e:ac:fc:2e:75:70:d8:7b:d2: 33:fe:38:6c:0e:57:40:ce:75:a2:ff:57:51:6d:58:cb:e2:8f: 40:ae:1d:f5:e1:0b:4b:c6:be:0d:b9:3e:a0:20:72:2f:67:a8: c3:73:da:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjUwODA3MDMyNDMxWhcNMjUwODE0MDMyNDMxWjAYMRYwFAYD VQQDEw02ODk0MWM2Zi04ZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFh17PGNl84T4vrqXZaxPJcnVV+HDiehOquywP/4L8wCB5BHhAROhMWNUmuc ZpCDfhmlcJDVh0Xk/FKonbIzyIIKi/glCjYMdKQC5wvp/OCkuRYygqr7DbhAVQ97 YiaOa7+ELP99ttQrIMIF0cbywhK6ClxaHyoLms14/dTI57+g9knQwtZbrtvQL3zf tuhmxayr+Grvdwc7x4zzvpqAJyLXuv0D1MsgjnZ4pF/ZW6UeeSISCaMew3qk94Hg tDLoSIp5lZ2K9hoX2nRzA5Gc4vt7LP/jowBzmQb4JJow201nvQBTQLIDlk1YPz92 T8i9KEtCXu/OFc69SV7+lDLQDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNftBbGY XWkrCeLFaTSNh8ZmQKPvMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCY5GKlB3MQVkIxxE/ZzduqSgwIgx5bBOzre8sYoT+6PBFCw7R/YOP /sJSZ9AZINbE/adPCqK7Eg7C21t5kzAbJxv8DI/g7hj/6Ad/oNprCEN2NF8xLi9a eMvfZmPCa1qaBFdIoqayNLbgDsah7FS2JB33IwT4XIhYVToq8Fy+zeVFrCDyXXb8 AKaEcz+EZ3bdjeB6/ybcbaih87SByOJ+XwKAvybjfw4FVouJ8sj33o4RvGx8Xytb mzYIctvqeIw4HSztfgzLwyOwgOrTLMOerPwudXDYe9Iz/jhsDldAznWi/1dRbVjL 4o9Arh314QtLxr4NuT6gIHIvZ6jDc9o4 -----END CERTIFICATE-----Generated at Fri Aug 8 10:21:44 2025 by rpki-client