$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: pJNRIhIWdTSnISLxi49ssdSh3Evk/2xoxqny0gqh6sE= Subject key identifier: 9E:E7:A8:18:AB:00:41:0B:C6:7B:5C:79:90:9E:76:20:61:1D:67:A7 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0801 Signing time: Tue 12 Aug 2025 21:17:09 +0000 Manifest this update: Tue 12 Aug 2025 21:17:08 +0000 Manifest next update: Tue 19 Aug 2025 21:17:08 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: umXubqIZYNL6IRP0lLXuIbT9ANawoR0ZgYraRwH/w18=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Aug 12 21:17:08 2025 GMT Not After : Aug 19 21:17:08 2025 GMT Subject: CN=689baf55-8c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:27:29:a2:45:58:12:94:77:0c:bc:7f:49: c5:46:c5:26:d4:ba:70:56:fb:53:a7:58:4b:02:02: b7:77:14:f0:8d:ff:dc:84:e5:75:06:63:f1:f4:17: 06:34:7e:07:b7:13:31:aa:e8:7d:62:c4:be:e6:e5: 77:29:25:30:83:c2:b0:53:dd:ca:42:f4:14:f2:0d: 93:d4:7d:84:3c:e5:3a:5b:0d:5a:79:25:37:c8:7f: a2:cc:30:34:ed:82:50:af:ba:55:86:bf:d1:32:7f: b1:89:36:d3:09:03:42:e5:70:7b:6d:f6:24:1f:66: fc:c4:cd:25:64:d0:66:9a:69:c3:8b:5f:bc:1f:63: 13:70:e1:2a:49:de:fb:1b:92:60:52:4b:37:b1:8c: d1:46:dd:68:df:bb:26:55:23:86:ea:3c:d9:9a:cc: e6:a8:6d:50:ba:a5:ff:42:e6:cc:07:1d:8d:b6:6a: 17:0c:7b:d9:5c:cf:3d:c3:b0:a4:7a:07:9b:44:66: 54:46:dc:ae:a6:59:d7:49:cf:b7:ca:23:90:8d:c7: 13:9d:89:26:94:2d:61:08:1f:4e:79:ae:bc:f2:2a: ce:14:a6:c2:66:95:65:53:2e:48:d9:0f:92:0e:62: af:d1:ff:d2:8a:fc:0f:5d:10:96:bf:44:d8:39:8e: 53:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E7:A8:18:AB:00:41:0B:C6:7B:5C:79:90:9E:76:20:61:1D:67:A7 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:4a:44:40:d1:52:6e:bb:82:75:93:0b:90:ef:34:c0:66:51: d1:07:f6:13:f8:b8:de:55:00:5a:bb:8d:e1:05:64:39:68:1b: 22:dd:d3:25:38:c2:2f:13:9a:a7:a5:63:57:0e:ff:21:65:70: 3e:22:04:47:9c:16:35:73:d0:37:ef:ac:df:f0:c6:21:f3:fc: fe:d0:4e:40:89:3b:8d:07:e2:fc:82:2a:76:27:72:f6:cc:ee: 6a:ff:ab:02:46:ec:41:b5:21:29:50:03:51:3e:0a:cc:0b:f2: eb:1c:78:1b:49:47:09:a9:e9:5c:b5:ba:6b:99:47:b4:d1:4a: e3:ec:ce:f6:d1:b3:f3:e4:53:e9:ca:95:26:a4:38:17:e1:4b: 4c:36:29:03:bc:e9:09:1c:17:f2:53:6e:a9:72:8c:9c:65:44: f9:d1:04:86:41:78:b2:b9:3f:46:58:2d:fd:f6:f4:93:d0:80: 9c:39:81:5e:15:f4:ae:90:a0:5d:e7:9b:87:c1:05:f0:ea:03: f6:08:a6:c0:9f:b2:b6:74:85:50:17:ea:43:88:29:89:b6:d8: 40:48:cd:f9:02:99:16:a6:e5:a1:1d:81:04:4e:69:2e:22:09: ff:25:91:fa:63:00:55:78:1f:67:f5:ea:ca:15:f3:91:f2:ff: 56:ab:48:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwODEyMjExNzA4WhcNMjUwODE5MjExNzA4WjAYMRYwFAYD VQQDEw02ODliYWY1NS04YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTcnKaJFWBKUdwy8f0nFRsUm1LpwVvtTp1hLAgK3dxTwjf/chOV1BmPx9BcG NH4HtxMxquh9YsS+5uV3KSUwg8KwU93KQvQU8g2T1H2EPOU6Ww1aeSU3yH+izDA0 7YJQr7pVhr/RMn+xiTbTCQNC5XB7bfYkH2b8xM0lZNBmmmnDi1+8H2MTcOEqSd77 G5JgUks3sYzRRt1o37smVSOG6jzZmszmqG1QuqX/QubMBx2NtmoXDHvZXM89w7Ck egebRGZURtyuplnXSc+3yiOQjccTnYkmlC1hCB9Oea688irOFKbCZpVlUy5I2Q+S DmKv0f/SivwPXRCWv0TYOY5T8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7nqBir AEELxntceZCediBhHWenMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBESkRA0VJuu4J1kwuQ7zTAZlHRB/YT+LjeVQBau43hBWQ5aBsi3dMl OMIvE5qnpWNXDv8hZXA+IgRHnBY1c9A376zf8MYh8/z+0E5AiTuNB+L8gip2J3L2 zO5q/6sCRuxBtSEpUANRPgrMC/LrHHgbSUcJqelctbprmUe00Urj7M720bPz5FPp ypUmpDgX4UtMNikDvOkJHBfyU26pcoycZUT50QSGQXiyuT9GWC399vST0ICcOYFe FfSukKBd55uHwQXw6gP2CKbAn7K2dIVQF+pDiCmJtthASM35ApkWpuWhHYEETmku Ign/JZH6YwBVeB9n9erKFfOR8v9Wq0gd -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:26 2025 by rpki-client