$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json) Hash identifier: BJe7CGVHJhZ2Tt38Ap/J5FPNBKbzvDylmS9SgSWyb3Q= Subject key identifier: E5:F6:7E:F6:51:D8:5B:24:78:D3:FE:63:F2:95:BB:FF:61:F7:FF:D8 Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft Manifest number: 0205 Signing time: Thu 07 Aug 2025 02:43:14 +0000 Manifest this update: Thu 07 Aug 2025 02:43:13 +0000 Manifest next update: Thu 14 Aug 2025 02:43:13 +0000 Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: cauDFiNV0/YV5MlzCsLFXwAjW8Ml7+nyezMNYMrDmf8=) 2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A Validity Not Before: Aug 7 02:43:13 2025 GMT Not After : Aug 14 02:43:13 2025 GMT Subject: CN=689412c1-2730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:4c:8c:05:c6:0e:b6:2e:cb:ff:c2:b7:33: 19:f6:6d:0f:7b:48:19:74:5a:58:f5:95:1a:14:9a: f1:43:c1:7b:c0:a7:3b:09:05:ec:b2:54:17:d2:db: 5e:45:36:ed:0f:19:6a:45:18:2c:ab:dc:4e:c4:c5: 9d:c7:5e:eb:23:22:03:41:1a:c6:db:cf:ea:67:a0: 8a:7f:e0:86:5e:39:ad:e1:ec:2d:a7:b4:dd:62:c0: 34:05:4f:8d:77:90:08:ed:32:16:f2:36:22:c3:dd: a2:07:2d:b3:7f:40:61:2f:d4:8f:0c:f0:59:67:26: 8e:f5:0b:31:5f:02:0e:c0:6f:f8:ff:9e:8b:11:a5: bc:51:d3:61:69:15:59:85:4f:16:30:8f:61:1f:f6: 25:ad:f0:a2:1b:f6:df:0b:9f:b7:a2:ce:5f:83:9f: 9a:3a:50:dc:66:f4:33:5a:16:0b:01:66:a6:81:f1: dc:23:1f:77:44:8f:00:be:8e:ec:8f:3d:22:4f:fd: 84:1e:52:e0:8b:27:9e:8c:e4:35:7e:fd:c3:23:ae: b5:18:9a:4d:47:ef:b6:06:b6:44:1f:bd:89:18:ae: 18:0a:36:67:2c:5f:e9:48:3e:22:ed:5e:01:90:40: 49:bf:ba:c3:b7:f7:d2:78:64:77:93:4d:39:e6:52: 82:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F6:7E:F6:51:D8:5B:24:78:D3:FE:63:F2:95:BB:FF:61:F7:FF:D8 X509v3 Authority Key Identifier: keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1a:0d:05:05:11:44:1f:0b:8a:3c:5e:15:83:36:e5:4e:96: 4f:4b:81:86:4f:6b:a5:70:36:a1:be:1a:63:d6:03:e9:98:c3: 7d:83:5f:3b:87:38:1e:0c:99:28:4b:5c:cb:9f:c3:49:ac:ef: d6:6a:ed:8e:e6:9b:1e:39:0b:c9:92:f7:3c:5e:ea:33:60:89: f8:79:92:b8:1e:48:7a:64:5a:c6:95:17:5f:e3:4b:c1:67:b8: 8c:7a:02:2e:79:78:6d:73:2b:bc:ba:66:44:b3:b7:05:de:69: ed:df:26:10:4f:ea:18:e7:58:50:19:45:00:8e:99:a7:e3:44: ba:72:37:44:1d:4d:0d:51:e3:c0:77:64:de:43:f8:02:95:7b: 86:1c:b3:d7:fd:cb:32:85:cd:e8:a1:7f:e9:38:db:f9:83:f4: 30:e0:1a:10:ed:be:30:76:7c:8c:eb:6e:6e:62:74:e0:da:4e: e4:d8:e6:25:16:f4:9e:e5:0b:2e:5b:21:e4:23:15:fc:8c:43: 51:df:32:62:98:52:3d:40:c1:2d:bb:b4:f5:16:1f:a7:71:16: 1f:44:13:e8:26:b1:84:7e:c8:fe:a2:bc:11:9f:19:26:ac:fc: e5:86:ed:7b:5c:b1:fb:66:65:48:dd:c1:72:15:36:ef:db:a7: c6:31:7c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2NzkxMTAvBgNVBAUTKEJDRkQxQzNCRDAxRDdFN0YwODA5Q0E2OUQxMDVEQjY2 MTgzNjIxNkEwHhcNMjUwODA3MDI0MzEzWhcNMjUwODE0MDI0MzEzWjAYMRYwFAYD VQQDEw02ODk0MTJjMS0yNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApupMjAXGDrYuy//CtzMZ9m0Pe0gZdFpY9ZUaFJrxQ8F7wKc7CQXsslQX0tte RTbtDxlqRRgsq9xOxMWdx17rIyIDQRrG28/qZ6CKf+CGXjmt4ewtp7TdYsA0BU+N d5AI7TIW8jYiw92iBy2zf0BhL9SPDPBZZyaO9QsxXwIOwG/4/56LEaW8UdNhaRVZ hU8WMI9hH/YlrfCiG/bfC5+3os5fg5+aOlDcZvQzWhYLAWamgfHcIx93RI8Avo7s jz0iT/2EHlLgiyeejOQ1fv3DI661GJpNR++2BrZEH72JGK4YCjZnLF/pSD4i7V4B kEBJv7rDt/fSeGR3k0055lKCKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOX2fvZR 2FskeNP+Y/KVu/9h9//YMB8GA1UdIwQYMBaAFLz9HDvQHX5/CAnKadEF22YYNiFq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY3OS8zQjQyM0FFODVC MkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZuOElDY3BwMFFYYlpoZzJJ V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQMGNPOUFkZm44SUNjcHAwUVhiWmhnMklXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY3OS8zQjQyM0FFODVCMkUxMUVEODM4NDE5NjlDNEY5QUUwMi92UDBjTzlBZGZu OElDY3BwMFFYYlpoZzJJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQGg0FBRFEHwuKPF4VgzblTpZPS4GGT2ulcDahvhpj1gPpmMN9g187 hzgeDJkoS1zLn8NJrO/Wau2O5pseOQvJkvc8XuozYIn4eZK4Hkh6ZFrGlRdf40vB Z7iMegIueXhtcyu8umZEs7cF3mnt3yYQT+oY51hQGUUAjpmn40S6cjdEHU0NUePA d2TeQ/gClXuGHLPX/csyhc3ooX/pONv5g/Qw4BoQ7b4wdnyM625uYnTg2k7k2OYl FvSe5QsuWyHkIxX8jENR3zJimFI9QMEtu7T1Fh+ncRYfRBPoJrGEfsj+orwRnxkm rPzlhu17XLH7ZmVI3cFyFTbv26fGMXyz -----END CERTIFICATE-----Generated at Fri Aug 8 00:38:12 2025 by rpki-client