$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: y5GjaBeplh24y0SCBRj0iQrQbqb5za//wV9ctwqmIZM= Subject key identifier: 87:6C:7D:EB:B9:21:89:A1:BA:1A:54:27:16:93:1E:ED:C2:B9:4B:03 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 30495018C050C8E9792E260AA6418522353F0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 1F Signing time: Sat 09 Aug 2025 06:23:02 +0000 Manifest this update: Sat 09 Aug 2025 06:18:02 +0000 Manifest next update: Sun 10 Aug 2025 06:30:02 +0000 Files and hashes: 1: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=) 2: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: 4HlQJtIH590qhZokZJwJSQl7YUUdh0RPONQ53O6LXXM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:49:50:18:c0:50:c8:e9:79:2e:26:0a:a6:41:85:22:35:3f:02:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Aug 9 06:18:02 2025 GMT Not After : Aug 10 06:30:02 2025 GMT Subject: CN=876C7DEBB92189A1BA1A542716931EEDC2B94B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:df:47:92:0f:86:83:d9:f3:da:4b:00:dd: 49:fc:03:62:fa:e8:f8:4d:60:e5:74:8b:b2:1b:4f: 41:68:1b:75:c9:b9:95:2f:94:0a:b5:28:89:5f:8d: a2:70:9b:ce:75:45:94:4d:18:fd:1a:f9:ad:ac:11: a1:a9:52:22:ed:3f:3c:7f:a8:58:92:6c:88:41:0c: a2:6a:8e:aa:f8:93:9d:06:34:a8:24:9d:95:96:42: 02:e6:07:a0:14:5b:20:1d:26:44:8b:be:cf:e8:78: d2:c6:5a:aa:68:bf:91:7a:8d:ca:47:d9:1e:9e:cd: f4:45:93:cc:d4:0e:f9:64:8c:16:51:3a:a2:e8:1e: 66:13:68:42:c7:ab:7c:ce:3e:e3:ac:9c:10:27:b2: 18:65:cc:64:20:98:f9:c3:15:64:85:a4:d6:bb:e2: 13:16:63:83:12:0e:19:2d:e9:7f:9c:c4:8a:4b:db: 36:54:d2:e0:08:79:e6:93:39:be:3e:45:52:ee:fe: 10:a0:4b:a5:52:1c:ea:75:61:24:91:3f:fb:25:2a: 75:c8:e8:c2:b4:f9:a2:21:ba:30:ac:42:30:b7:bf: 9c:da:e3:99:f0:09:1c:b5:3a:14:64:fc:73:b9:23: df:1d:9c:80:99:9b:2b:a0:44:d9:73:4e:d7:b8:43: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6C:7D:EB:B9:21:89:A1:BA:1A:54:27:16:93:1E:ED:C2:B9:4B:03 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f9:28:89:cb:18:d4:6e:a0:c8:3c:9d:52:26:9c:6d:da:62: 26:00:6e:3e:e1:88:fa:f2:27:8e:26:7b:54:79:cc:12:e1:8a: df:f5:cd:6f:98:1a:23:00:dc:1f:5d:48:a4:ee:c0:86:47:bf: 3e:09:6b:ed:e3:62:1b:01:ce:92:a9:63:de:89:b1:fe:38:fd: ae:45:39:ca:0b:18:0e:63:ec:db:4a:7e:70:d6:85:92:7a:5d: 0c:ea:a0:d4:e6:22:c7:12:13:68:64:c5:19:bb:ee:3c:f1:8f: 38:4b:64:78:d7:97:89:90:cb:0f:97:db:8c:c2:d1:8f:3b:1b: 61:6d:22:8c:87:7c:2c:cd:bd:da:f4:46:d1:80:3e:2d:71:d3: 72:aa:dd:89:a5:71:b4:79:d5:e6:3c:64:27:9b:81:c8:d6:41: cc:cc:a7:7e:ab:45:13:ac:49:83:7d:a5:74:de:27:4a:09:a4: df:aa:32:1e:3b:35:f1:10:85:54:3d:fb:42:69:a8:4a:71:b7: b3:0e:da:4f:d0:1f:44:17:81:ac:d5:44:86:c0:d2:ff:99:7d: 3d:51:2f:87:69:07:17:8d:c5:63:40:64:b9:db:4f:31:c8:5e: ae:93:af:4a:fe:e9:f7:c3:96:76:30:89:92:8e:62:89:4d:50: 2c:6e:a1:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMElQGMBQyOl5LiYKpkGFIjU/AncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI1MDgwOTA2MTgwMloX DTI1MDgxMDA2MzAwMlowMzExMC8GA1UEAxMoODc2QzdERUJCOTIxODlBMUJBMUE1 NDI3MTY5MzFFRURDMkI5NEIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzA30eSD4aD2fPaSwDdSfwDYvro+E1g5XSLshtPQWgbdcm5lS+UCrUoiV+N onCbznVFlE0Y/Rr5rawRoalSIu0/PH+oWJJsiEEMomqOqviTnQY0qCSdlZZCAuYH oBRbIB0mRIu+z+h40sZaqmi/kXqNykfZHp7N9EWTzNQO+WSMFlE6ougeZhNoQser fM4+46ycECeyGGXMZCCY+cMVZIWk1rviExZjgxIOGS3pf5zEikvbNlTS4Ah55pM5 vj5FUu7+EKBLpVIc6nVhJJE/+yUqdcjowrT5oiG6MKxCMLe/nNrjmfAJHLU6FGT8 c7kj3x2cgJmbK6BE2XNO17hDZjUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBSHbH3r uSGJoboaVCcWkx7twrlLAzAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAhvkoicsY1G6gyDydUiacbdpiJgBuPuGI+vInjiZ7VHnMEuGK 3/XNb5gaIwDcH11IpO7Ahke/Pglr7eNiGwHOkqlj3omx/jj9rkU5ygsYDmPs20p+ cNaFknpdDOqg1OYixxITaGTFGbvuPPGPOEtkeNeXiZDLD5fbjMLRjzsbYW0ijId8 LM292vRG0YA+LXHTcqrdiaVxtHnV5jxkJ5uByNZBzMynfqtFE6xJg32ldN4nSgmk 36oyHjs18RCFVD37QmmoSnG3sw7aT9AfRBeBrNVEhsDS/5l9PVEvh2kHF43FY0Bk udtPMcherpOvSv7p98OWdjCJko5iiU1QLG6hbg== -----END CERTIFICATE-----Generated at Sat Aug 9 22:45:33 2025 by rpki-client