$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: E1xPXBq13uPQWUkb6GEOEYjpht1IlG3Wfiz/Qkk6r84= Subject key identifier: 8C:BE:DC:48:DA:C6:97:F0:1A:93:A3:95:2B:4C:E5:87:E3:1C:4F:7E Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: 017B Signing time: Mon 11 Aug 2025 03:57:34 +0000 Manifest this update: Mon 11 Aug 2025 03:57:34 +0000 Manifest next update: Mon 18 Aug 2025 03:57:34 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: fFStCGykkzvqtg3eAjuRaLW0UV0sB0BebTANfRYEPoc=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: dRIa1L+Dk+ECeqLpFjf2uz44Cfej3F1HAm+B1Eo0OQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E, serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: Aug 11 03:57:34 2025 GMT Not After : Aug 18 03:57:34 2025 GMT Subject: CN=68996a2e-3174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:c3:19:28:7c:4e:b6:a3:33:ad:7b:d6:ed: 34:af:9a:47:36:8e:4c:05:02:dd:a8:2a:33:6b:ce: 11:2c:d2:d0:df:f4:03:54:a5:ce:59:e8:bf:d8:6a: 1f:d0:80:5c:99:d3:67:10:4d:5b:3f:04:24:52:f9: 52:b5:72:19:52:ff:13:72:ee:97:16:71:27:98:b5: 4b:4e:7c:64:2b:78:c6:1d:28:e7:fe:bb:b9:b0:58: a0:4b:97:a6:77:e8:3b:25:71:98:f2:30:45:fc:6a: ce:f4:11:be:d5:e3:1d:57:5d:87:bb:7a:a6:b8:7c: fe:39:34:00:c6:e4:09:0e:be:eb:12:1a:f5:52:44: 35:89:fa:48:46:e2:c7:95:4a:c0:54:8b:c3:4f:68: 91:cc:71:34:85:8d:ca:b5:de:1a:d2:f3:27:0e:de: c3:17:88:37:8a:b4:2f:a4:4c:54:cb:2d:8d:40:47: 9d:c2:d9:11:11:e8:90:e0:c3:a5:f5:f8:20:67:1d: 1b:1a:17:89:a1:2d:e2:92:ab:80:7a:97:23:07:e7: 5f:47:b3:93:41:71:a8:eb:58:1d:28:7d:a4:0d:0a: d5:4a:a6:f8:09:32:77:71:25:30:e9:69:d5:1e:dd: 77:0d:98:ae:c4:cd:fd:40:f2:7b:8f:1d:02:40:db: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BE:DC:48:DA:C6:97:F0:1A:93:A3:95:2B:4C:E5:87:E3:1C:4F:7E X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b8:61:64:01:52:9a:1b:a9:7d:1b:c0:a5:b8:24:87:3a:0a: c7:64:e1:f3:8c:92:08:74:43:93:ef:a0:27:1b:63:91:ae:02: 9f:da:10:cf:ac:53:d5:e0:25:cf:4b:4c:98:93:71:78:c6:b8: b0:a6:d2:ce:b0:40:1d:97:f6:e2:f8:e0:4b:47:9e:eb:65:a9: 55:19:44:20:c5:3f:ce:c9:31:38:48:8c:f3:71:86:20:85:d2: 17:49:46:51:f9:66:10:e3:c0:d0:45:21:7f:96:c2:5f:a1:e8: 4c:53:6a:1e:b7:3a:90:c3:7d:28:75:4a:9c:1b:16:1e:51:de: ee:2d:61:a0:a8:87:2f:b3:67:95:15:24:8c:43:82:72:1b:6f: 87:a3:5d:f1:3a:dc:e7:d0:2d:07:57:8d:40:3c:5c:3c:c0:c9: d5:0a:f9:f1:81:8b:42:7b:2f:13:49:e5:33:e1:2b:55:20:15: ce:0f:c1:14:e4:3a:36:46:8a:39:63:c4:34:9c:cb:a9:6c:df: 05:88:b9:ee:63:d5:04:55:f6:54:71:1d:ec:30:b9:69:8e:27: cc:49:7b:d3:dc:72:3a:cf:74:1c:ea:9a:20:8c:6b:82:02:f1: 64:e7:95:40:22:36:9f:fc:ee:a6:5c:af:cf:e9:ac:b8:36:01: 48:1d:8c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjUwODExMDM1NzM0WhcNMjUwODE4MDM1NzM0WjAYMRYwFAYD VQQDEw02ODk5NmEyZS0zMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq/DGSh8TrajM6171u00r5pHNo5MBQLdqCoza84RLNLQ3/QDVKXOWei/2Gof 0IBcmdNnEE1bPwQkUvlStXIZUv8Tcu6XFnEnmLVLTnxkK3jGHSjn/ru5sFigS5em d+g7JXGY8jBF/GrO9BG+1eMdV12Hu3qmuHz+OTQAxuQJDr7rEhr1UkQ1ifpIRuLH lUrAVIvDT2iRzHE0hY3Ktd4a0vMnDt7DF4g3irQvpExUyy2NQEedwtkREeiQ4MOl 9fggZx0bGheJoS3ikquAepcjB+dfR7OTQXGo61gdKH2kDQrVSqb4CTJ3cSUw6WnV Ht13DZiuxM39QPJ7jx0CQNsQvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy+3Eja xpfwGpOjlStM5YfjHE9+MB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6uGFkAVKaG6l9G8CluCSHOgrHZOHzjJIIdEOT76AnG2ORrgKf2hDP rFPV4CXPS0yYk3F4xriwptLOsEAdl/bi+OBLR57rZalVGUQgxT/OyTE4SIzzcYYg hdIXSUZR+WYQ48DQRSF/lsJfoehMU2oetzqQw30odUqcGxYeUd7uLWGgqIcvs2eV FSSMQ4JyG2+Ho13xOtzn0C0HV41APFw8wMnVCvnxgYtCey8TSeUz4StVIBXOD8EU 5Do2Roo5Y8Q0nMupbN8FiLnuY9UEVfZUcR3sMLlpjifMSXvT3HI6z3Qc6pogjGuC AvFk55VAIjaf/O6mXK/P6ay4NgFIHYxl -----END CERTIFICATE-----Generated at Mon Aug 11 07:34:24 2025 by rpki-client