$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: zPVuSVGtD7rcex2v1FiOx4dn+fhJslKDrJWuS2yyOio= Subject key identifier: 52:29:A0:F8:A0:FD:1B:06:B5:4E:41:D2:82:91:90:43:2F:31:2F:1A Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 096D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0964 Signing time: Tue 12 Aug 2025 20:26:18 +0000 Manifest this update: Tue 12 Aug 2025 20:26:18 +0000 Manifest next update: Tue 19 Aug 2025 20:26:18 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 38bDTV+cUZZyGk2uCzyy6n/boWPrvgUV9nCvOkwqW0E=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2413 (0x96d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Aug 12 20:26:18 2025 GMT Not After : Aug 19 20:26:18 2025 GMT Subject: CN=689ba36a-e163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:af:41:2e:12:50:f7:da:b1:21:da:8a:f9: 02:14:32:55:d8:62:4e:16:8b:5d:89:75:c7:c3:b9: 77:49:73:d5:5d:1b:6e:e0:6f:ea:69:6d:40:5b:a3: 38:f4:19:16:2d:75:f5:88:e6:25:1c:34:85:ad:99: c1:0b:8c:6e:01:75:a3:a1:0d:17:38:7b:6e:51:87: 86:aa:63:c5:db:d4:54:91:ff:f0:f6:bd:a7:0b:9b: bc:5a:9f:02:43:2f:1a:fd:bf:0e:be:16:6e:59:e0: 39:a2:6a:c4:14:d9:9e:0c:53:82:7f:89:6b:76:be: 93:ed:70:c4:65:e4:41:2c:08:25:cd:a6:be:32:bc: cc:e2:5e:9d:3b:09:cf:32:19:ce:1d:b8:72:c8:90: ae:cb:ba:b5:04:61:1d:1e:d7:9e:90:37:96:ac:66: fc:7a:41:1f:e5:ca:ec:61:2f:3f:1e:a3:c3:03:43: 13:f9:b0:e0:91:4a:d5:7a:e5:02:b2:92:74:d6:b0: 48:89:e0:4e:2c:1a:9f:ef:e0:f8:c8:45:c1:f8:15: 4f:0d:b1:60:87:9d:6e:87:1d:c4:64:0f:f5:df:49: 85:e1:5a:18:f3:43:fe:e5:ca:79:12:39:e5:7c:22: b0:c6:5b:53:58:57:41:a5:f5:61:56:8e:4f:7d:89: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:29:A0:F8:A0:FD:1B:06:B5:4E:41:D2:82:91:90:43:2F:31:2F:1A X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a6:c7:ce:ad:a9:8f:84:ca:a0:5d:a4:b2:fb:d3:8f:6e:f6: 11:86:5d:dc:10:c7:44:49:ff:48:31:b2:f9:92:89:92:b4:21: d4:a1:30:fd:b0:32:91:95:29:da:2d:1a:fc:39:0a:de:d7:bf: 13:f1:e7:4d:1d:ae:4d:79:82:aa:b7:31:55:db:34:43:90:4e: 6e:f3:71:39:75:7f:d8:b2:1f:d3:6f:cb:c7:18:6d:f3:7f:02: 4f:31:36:6a:fd:c6:c8:7d:af:d8:c6:1c:09:75:bb:3d:10:60: ea:98:53:e8:4f:97:32:3d:8a:30:dc:a1:3e:62:2c:19:5f:b8: d3:9e:06:5d:8c:bb:91:8d:21:d5:f6:8b:be:5b:fa:83:39:e3: 69:74:af:11:17:30:8f:06:94:eb:06:db:0b:5e:81:40:94:cb: 00:93:93:07:24:6a:32:3e:e0:93:89:0f:7b:82:b6:2f:86:1a: 14:65:b1:e2:36:c1:5c:0c:af:ed:f8:73:a3:67:ee:c4:12:64: 49:9a:ff:0f:2c:d0:7a:7b:94:2c:52:c6:08:ad:95:fa:db:53: 14:de:3c:ce:fe:6b:ed:c1:44:bf:48:4e:10:3c:d6:8e:63:ad: d8:09:e7:2b:b6:03:0b:f5:92:15:2e:f2:7f:4f:b1:8b:3f:8b: 12:18:a6:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUwODEyMjAyNjE4WhcNMjUwODE5MjAyNjE4WjAYMRYwFAYD VQQDEw02ODliYTM2YS1lMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz+vQS4SUPfasSHaivkCFDJV2GJOFotdiXXHw7l3SXPVXRtu4G/qaW1AW6M4 9BkWLXX1iOYlHDSFrZnBC4xuAXWjoQ0XOHtuUYeGqmPF29RUkf/w9r2nC5u8Wp8C Qy8a/b8OvhZuWeA5omrEFNmeDFOCf4lrdr6T7XDEZeRBLAglzaa+MrzM4l6dOwnP MhnOHbhyyJCuy7q1BGEdHteekDeWrGb8ekEf5crsYS8/HqPDA0MT+bDgkUrVeuUC spJ01rBIieBOLBqf7+D4yEXB+BVPDbFgh51uhx3EZA/130mF4VoY80P+5cp5Ejnl fCKwxltTWFdBpfVhVo5PfYmBNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIpoPig /RsGtU5B0oKRkEMvMS8aMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6psfOramPhMqgXaSy+9OPbvYRhl3cEMdESf9IMbL5komStCHUoTD9 sDKRlSnaLRr8OQre178T8edNHa5NeYKqtzFV2zRDkE5u83E5dX/Ysh/Tb8vHGG3z fwJPMTZq/cbIfa/YxhwJdbs9EGDqmFPoT5cyPYow3KE+YiwZX7jTngZdjLuRjSHV 9ou+W/qDOeNpdK8RFzCPBpTrBtsLXoFAlMsAk5MHJGoyPuCTiQ97grYvhhoUZbHi NsFcDK/t+HOjZ+7EEmRJmv8PLNB6e5QsUsYIrZX621MU3jzO/mvtwUS/SE4QPNaO Y63YCecrtgML9ZIVLvJ/T7GLP4sSGKam -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:07 2025 by rpki-client