$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: p+3PrmQG+MHL8F9LjXKo2k/v0n/Tm3tAMdr04x7ECBI= Subject key identifier: 00:A6:64:D5:24:35:AE:60:30:2D:45:9D:C3:B6:D2:C0:BD:7A:46:70 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 0497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 0493 Signing time: Sat 09 Aug 2025 00:29:43 +0000 Manifest this update: Sat 09 Aug 2025 00:29:43 +0000 Manifest next update: Sat 16 Aug 2025 00:29:43 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: QFraYsKkIyQklru6Z3U5pmM2VezSUNejDVDzFZnCLxk=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: MtaWbSK5JAjEiEpHTj/1X7DdZqPg3BZxUlQCHg85KTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1175 (0x497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Aug 9 00:29:43 2025 GMT Not After : Aug 16 00:29:43 2025 GMT Subject: CN=68969677-c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:66:6a:3c:ce:3b:71:1c:e6:38:9a:fe:3c: 3e:18:a1:97:23:f5:da:d2:59:cf:8e:27:db:24:2e: 24:e0:96:fb:d1:bb:b0:e0:48:a6:69:dc:be:1f:09: 97:03:a2:91:b9:a8:52:30:d2:42:25:8a:aa:f8:69: d2:73:44:e4:dc:04:49:28:dc:47:bc:47:b1:54:28: a6:c5:ba:b3:7d:25:ab:e1:d5:87:ed:c1:c0:d3:e8: 6a:39:92:6f:d9:3e:cd:08:15:95:b8:66:7b:95:26: 7d:bf:91:9e:1c:e8:82:eb:c4:e5:40:7c:63:8f:ee: 85:12:ed:44:8f:91:7e:d3:13:78:21:a3:5f:82:83: 12:de:55:b9:4c:6d:61:97:69:cf:65:76:eb:5d:ac: 39:dd:30:1c:e0:5d:ad:42:64:ee:6f:14:be:dc:7e: 50:c7:80:ee:5e:6c:9d:9a:44:5b:75:96:b9:bb:8b: 04:f3:d9:4e:7a:05:a6:45:9e:4e:fa:75:31:d0:49: e1:0e:07:ee:ac:4e:ff:6e:45:50:d1:b1:1d:93:29: 4a:db:5d:2b:26:cd:a4:53:60:a9:b2:6f:df:fa:31: ee:a4:76:7d:f5:cb:d4:b1:5a:42:2c:4f:97:fe:95: f6:2a:73:5d:9e:01:05:ef:87:aa:11:58:a0:9b:35: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A6:64:D5:24:35:AE:60:30:2D:45:9D:C3:B6:D2:C0:BD:7A:46:70 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:67:ed:6f:5d:94:a9:2b:eb:d5:28:4b:8a:ef:f6:38:61:9d: 53:8f:15:d8:f2:fa:34:91:6c:9d:23:55:33:8b:d2:3f:87:42: 1b:b1:97:3e:89:5f:96:3f:49:d8:c5:c7:fe:03:33:2b:0e:f2: b5:71:06:ae:14:3a:ae:2d:82:ee:7c:d1:87:bd:ba:fa:c6:06: b0:5d:9e:54:7f:d9:b9:30:1a:23:6f:6c:8a:64:08:55:4f:60: 01:fe:a6:bd:b3:d2:f0:a4:5c:cb:7f:d9:11:8f:e7:56:b8:b8: 3c:56:23:37:bb:46:ff:2c:54:bc:54:d4:d7:4c:62:8c:3a:9d: c9:0b:66:25:ab:1c:95:b9:85:5e:7f:57:9d:2c:ff:82:b6:3e: 2e:41:6a:f6:74:19:cb:81:cb:ca:56:d0:29:0c:20:ae:94:56: c7:8b:8b:85:99:05:51:e9:37:a6:fb:63:81:b2:9f:92:74:d1: 48:c5:81:52:60:89:0f:74:66:e3:30:a0:82:b7:ea:57:1e:ff: 23:a0:40:7b:45:20:e4:75:9a:a6:0f:d5:1e:76:86:53:50:c3: e1:9c:e9:2a:90:97:22:d1:2f:67:dc:d4:54:b6:20:82:8d:bd: 44:a4:26:4c:ff:62:41:ad:21:10:cc:f3:71:f1:b5:f6:e9:fd: 2b:58:9a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjUwODA5MDAyOTQzWhcNMjUwODE2MDAyOTQzWjAYMRYwFAYD VQQDEw02ODk2OTY3Ny1jMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07FmajzOO3Ec5jia/jw+GKGXI/Xa0lnPjifbJC4k4Jb70buw4Eimady+HwmX A6KRuahSMNJCJYqq+GnSc0Tk3ARJKNxHvEexVCimxbqzfSWr4dWH7cHA0+hqOZJv 2T7NCBWVuGZ7lSZ9v5GeHOiC68TlQHxjj+6FEu1Ej5F+0xN4IaNfgoMS3lW5TG1h l2nPZXbrXaw53TAc4F2tQmTubxS+3H5Qx4DuXmydmkRbdZa5u4sE89lOegWmRZ5O +nUx0EnhDgfurE7/bkVQ0bEdkylK210rJs2kU2Cpsm/f+jHupHZ99cvUsVpCLE+X /pX2KnNdngEF74eqEVigmzVLYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACmZNUk Na5gMC1FncO20sC9ekZwMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeZ+1vXZSpK+vVKEuK7/Y4YZ1TjxXY8vo0kWydI1Uzi9I/h0IbsZc+ iV+WP0nYxcf+AzMrDvK1cQauFDquLYLufNGHvbr6xgawXZ5Uf9m5MBojb2yKZAhV T2AB/qa9s9LwpFzLf9kRj+dWuLg8ViM3u0b/LFS8VNTXTGKMOp3JC2YlqxyVuYVe f1edLP+Ctj4uQWr2dBnLgcvKVtApDCCulFbHi4uFmQVR6Tem+2OBsp+SdNFIxYFS YIkPdGbjMKCCt+pXHv8joEB7RSDkdZqmD9UedoZTUMPhnOkqkJci0S9n3NRUtiCC jb1EpCZM/2JBrSEQzPNx8bX26f0rWJou -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:45 2025 by rpki-client