$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json) Hash identifier: sNkcZC4Evfz0Ue+zPS6nX3OHEkbp0sDoBKxjpEroRRg= Subject key identifier: 0A:CD:C0:9A:36:D4:4C:C8:22:62:D0:41:C0:88:DB:4C:83:14:91:BF Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft Manifest number: 0C1C Signing time: Fri 08 Aug 2025 18:56:15 +0000 Manifest this update: Fri 08 Aug 2025 18:56:14 +0000 Manifest next update: Fri 15 Aug 2025 18:56:14 +0000 Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: VaH83CLAhMHamf8H4bcOdVME7DRSjFooFvM+uRCez5k=) 2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Aug 8 18:56:14 2025 GMT Not After : Aug 15 18:56:14 2025 GMT Subject: CN=6896484f-1b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:20:0e:42:44:df:32:20:ea:c2:ec:38:63: 52:b0:3d:05:74:85:1d:e7:60:e8:44:d3:78:ba:68: 0f:d4:ae:48:e2:7d:a5:70:54:95:22:ba:93:76:da: 60:b4:e3:93:49:a9:07:21:86:6e:ee:4d:5f:3b:f4: ac:f4:78:52:63:d2:76:7e:12:9e:f0:b8:8c:36:a8: a5:0b:32:ba:70:2b:84:1b:cf:e0:89:cc:97:c2:7e: 8e:b3:eb:d3:7f:a3:9d:af:61:6d:e6:83:55:ad:93: f9:21:6b:f9:b2:87:6a:71:16:46:a8:1b:e3:dd:3f: 75:c6:0f:4d:08:1e:c7:e4:bd:ea:eb:26:9d:97:40: 17:32:f2:b2:a7:33:e9:ce:3f:b1:54:bc:35:48:08: 92:9e:6d:b6:a6:05:68:6b:3e:b5:c2:0a:69:85:5b: 86:1b:4e:bb:91:75:5d:39:52:6c:dc:e3:99:92:16: 0e:12:d8:4c:3b:db:f5:42:55:1c:16:fc:39:f3:6f: 15:7c:67:9c:64:1b:5b:22:56:9f:45:25:9b:c8:be: 6c:c8:41:71:69:d7:d6:d2:82:62:ee:3b:fc:c3:19: 4d:13:41:f3:74:c0:c6:b2:02:5b:49:ae:06:5e:b1: 54:d7:d2:a1:83:6c:b7:bd:ac:19:21:30:17:f1:98: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CD:C0:9A:36:D4:4C:C8:22:62:D0:41:C0:88:DB:4C:83:14:91:BF X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:11:a3:a0:de:17:9b:fd:4b:6a:32:cd:21:fc:8e:69:eb:c9: 08:b7:19:83:de:c4:f4:2d:af:d4:f8:71:18:9f:72:ca:19:79: 49:10:1d:6e:b5:44:80:56:b8:a7:bf:ae:ce:fc:ae:4e:05:86: 52:76:2f:b3:36:55:b9:e6:5f:29:03:92:0d:1e:30:3a:97:1e: 34:c1:26:4a:97:55:ac:e3:0e:5e:68:44:62:16:8e:26:0f:1e: 8e:95:16:c3:65:55:6c:ee:87:33:e4:3f:56:e0:09:fd:e0:da: ab:0b:d8:8f:cb:39:de:d4:6b:82:71:9b:24:58:4e:a6:90:cf: 27:50:97:e3:b3:2c:e0:00:94:00:69:68:b6:3e:9a:8d:f9:71: 13:28:4e:01:75:d8:d0:71:63:6f:c7:d3:52:55:34:b4:84:91: ab:6c:82:a4:a0:5e:95:2b:d0:d0:fe:1e:c1:cf:1a:a3:5f:2d: 1d:46:a3:40:66:9e:3e:8c:cb:20:41:1f:34:7e:35:3a:20:3b: 9b:47:a1:f2:12:50:dc:93:d9:0c:06:42:3f:10:03:85:c2:87: 9c:66:e1:db:90:39:9b:38:0c:98:ac:27:3e:b7:d2:f0:f0:db: 81:c8:99:59:a4:f2:a3:32:e7:44:7e:3c:07:ea:d1:06:ee:bc: 40:a3:41:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUwODA4MTg1NjE0WhcNMjUwODE1MTg1NjE0WjAYMRYwFAYD VQQDEw02ODk2NDg0Zi0xYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GQgDkJE3zIg6sLsOGNSsD0FdIUd52DoRNN4umgP1K5I4n2lcFSVIrqTdtpg tOOTSakHIYZu7k1fO/Ss9HhSY9J2fhKe8LiMNqilCzK6cCuEG8/gicyXwn6Os+vT f6Odr2Ft5oNVrZP5IWv5sodqcRZGqBvj3T91xg9NCB7H5L3q6yadl0AXMvKypzPp zj+xVLw1SAiSnm22pgVoaz61wgpphVuGG067kXVdOVJs3OOZkhYOEthMO9v1QlUc Fvw5828VfGecZBtbIlafRSWbyL5syEFxadfW0oJi7jv8wxlNE0HzdMDGsgJbSa4G XrFU19Khg2y3vawZITAX8Zhi4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArNwJo2 1EzIImLQQcCI20yDFJG/MB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzI4NS9GRTdGNjM3QzE0MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQz OU1KMEZUOTFOdlBmaWZsSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxEaOg3heb/UtqMs0h/I5p68kItxmD3sT0La/U+HEYn3LKGXlJEB1u tUSAVrinv67O/K5OBYZSdi+zNlW55l8pA5INHjA6lx40wSZKl1Ws4w5eaERiFo4m Dx6OlRbDZVVs7ocz5D9W4An94NqrC9iPyzne1GuCcZskWE6mkM8nUJfjsyzgAJQA aWi2PpqN+XETKE4BddjQcWNvx9NSVTS0hJGrbIKkoF6VK9DQ/h7BzxqjXy0dRqNA Zp4+jMsgQR80fjU6IDubR6HyElDck9kMBkI/EAOFwoecZuHbkDmbOAyYrCc+t9Lw 8NuByJlZpPKjMudEfjwH6tEG7rxAo0GL -----END CERTIFICATE-----Generated at Sun Aug 10 18:50:46 2025 by rpki-client