$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft File: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json) Hash identifier: GF9oH3DHo2Yum0Z+SgmbS5Z72LXku9yJB6b4o/mkMVg= Subject key identifier: 94:C4:C2:F8:2C:02:32:A2:CC:AE:F2:E5:EE:E6:05:69:F7:8C:D3:87 Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 Certificate issuer: /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft Manifest number: 0176 Signing time: Thu 07 Aug 2025 04:14:42 +0000 Manifest this update: Thu 07 Aug 2025 04:14:42 +0000 Manifest next update: Thu 14 Aug 2025 04:14:42 +0000 Files and hashes: 1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 4R7s/nRvd3HFZXtr2WnZui6cyevoQML93aqp8EtBkA0=) 2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: GFGPvdmy2vrmiAyM3NUeTKYyq91wUi+ACbGsbCoh47g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507 Validity Not Before: Aug 7 04:14:42 2025 GMT Not After : Aug 14 04:14:42 2025 GMT Subject: CN=68942832-83b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:86:10:5b:b2:52:52:8d:ee:05:67:4b:05:d0: 82:c5:67:01:ab:bc:5d:19:6b:1d:2d:67:10:23:62: 6f:c9:ca:4e:a6:c2:d8:41:1f:84:4f:87:69:54:93: 39:ad:2d:6f:1a:97:6c:c7:4d:e4:98:ca:ac:5a:ef: 95:82:c8:cb:f6:f3:f3:57:5e:58:d8:35:00:ab:cf: e3:78:21:37:5a:25:70:dd:5a:ab:36:f5:de:34:de: 54:48:79:1d:6e:55:62:eb:4f:4e:4b:ca:75:f4:98: 2f:dd:bf:20:ff:90:63:ce:1c:69:32:20:a0:36:29: 7e:d3:22:fe:d6:78:2b:db:7a:a7:a5:e6:17:de:1f: d1:f5:90:00:32:2e:a7:68:29:4a:20:49:aa:3d:ad: 51:6a:dd:55:c2:81:6a:4d:2d:13:56:a6:a3:ea:9b: e0:2e:ae:c5:03:e4:54:f0:2b:57:b0:85:d7:07:09: 67:81:bc:61:b6:8e:4e:09:82:9a:5c:bd:68:ad:88: 88:d2:bc:be:64:ad:3f:97:4e:bb:d9:ac:c3:56:29: 86:b1:76:f5:76:47:63:29:c1:2c:a4:03:55:3b:27: 69:cc:9b:9e:1c:1e:b6:0a:12:39:49:8c:11:0a:34: 7d:05:27:fc:00:fa:3c:f5:6d:bd:ed:06:d2:e2:d2: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:C2:F8:2C:02:32:A2:CC:AE:F2:E5:EE:E6:05:69:F7:8C:D3:87 X509v3 Authority Key Identifier: keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:59:89:87:36:d5:7d:a6:49:2a:79:e0:7c:88:c6:a6:3a:7c: fc:52:8c:a9:e9:07:fb:e5:23:ee:0e:61:0b:ac:5d:fa:2f:9e: 5d:ca:3c:42:10:80:42:36:be:f0:ee:ca:ec:94:5e:d7:57:2b: ce:cb:73:32:e9:83:69:6c:86:20:b5:74:2a:67:fa:3e:56:37: ac:82:fe:6d:d1:ba:9f:63:27:72:75:49:a1:6d:b9:1b:71:dc: a6:3a:3d:fb:52:70:66:e4:82:8b:d1:e9:af:4c:55:01:3e:32: 3a:ea:bd:64:d7:81:40:11:29:6d:e0:cd:e9:a9:d9:74:62:17: 67:7b:91:ee:47:4f:54:4c:ff:0a:a5:66:69:03:d8:e0:45:ae: 6f:b5:6a:b7:3e:47:8d:8f:6c:79:76:3b:42:df:c0:3f:4f:26: f4:0d:a5:cc:6e:c6:7b:84:67:cd:21:ab:7d:49:3e:66:bc:c3: b0:bc:f8:d2:a9:fe:f5:38:df:6b:42:46:4b:f7:3a:5b:45:3a: 87:dd:5b:7c:47:9d:fe:12:d4:ef:2c:22:1f:1b:5e:2b:00:9a: fb:25:03:aa:6d:41:e9:00:6d:6a:fe:e8:a7:aa:e4:29:9e:1a: d0:8e:37:f3:46:3f:08:2a:d0:18:f4:66:19:2a:85:b3:98:eb: f9:a5:34:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FERDExMTAvBgNVBAUTKDc2NTJBMjJGQzI1MEZBQUFFM0FCMkMwQzJBRkREMDRF MzA0N0U1MDcwHhcNMjUwODA3MDQxNDQyWhcNMjUwODE0MDQxNDQyWjAYMRYwFAYD VQQDEw02ODk0MjgzMi04M2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7oYQW7JSUo3uBWdLBdCCxWcBq7xdGWsdLWcQI2JvycpOpsLYQR+ET4dpVJM5 rS1vGpdsx03kmMqsWu+VgsjL9vPzV15Y2DUAq8/jeCE3WiVw3VqrNvXeNN5USHkd blVi609OS8p19Jgv3b8g/5BjzhxpMiCgNil+0yL+1ngr23qnpeYX3h/R9ZAAMi6n aClKIEmqPa1Rat1VwoFqTS0TVqaj6pvgLq7FA+RU8CtXsIXXBwlngbxhto5OCYKa XL1orYiI0ry+ZK0/l0672azDVimGsXb1dkdjKcEspANVOydpzJueHB62ChI5SYwR CjR9BSf8APo89W297QbS4tIdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTEwvgs AjKizK7y5e7mBWn3jNOHMB8GA1UdIwQYMBaAFHZSoi/CUPqq46ssDCr90E4wR+UH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUREMS9EMDA2QzBERTM3 RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1xcmpxeXdNS3YzUVRqQkg1 UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RsS2lMOEpRLXFyanF5d01LdjNRVGpCSDVRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUREMS9EMDA2QzBERTM3RUUxMUVFOThERjM2NjZDNEY5QUUwMi9kbEtpTDhKUS1x cmpxeXdNS3YzUVRqQkg1UWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8WYmHNtV9pkkqeeB8iMamOnz8Uoyp6Qf75SPuDmELrF36L55dyjxC EIBCNr7w7srslF7XVyvOy3My6YNpbIYgtXQqZ/o+Vjesgv5t0bqfYydydUmhbbkb cdymOj37UnBm5IKL0emvTFUBPjI66r1k14FAESlt4M3pqdl0Yhdne5HuR09UTP8K pWZpA9jgRa5vtWq3PkeNj2x5djtC38A/Tyb0DaXMbsZ7hGfNIat9ST5mvMOwvPjS qf71ON9rQkZL9zpbRTqH3Vt8R53+EtTvLCIfG14rAJr7JQOqbUHpAG1q/uinquQp nhrQjjfzRj8IKtAY9GYZKoWzmOv5pTSD -----END CERTIFICATE-----Generated at Fri Aug 8 19:39:39 2025 by rpki-client