$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: mKxE5Bj7taG7wUsaRR5EoPOGy78detwHDzsZmEctFNI= Subject key identifier: 39:3A:79:F5:F6:A4:A4:11:A9:A3:42:55:F4:EF:5E:D1:31:C2:BB:3B Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 6C673C23088C2231B9F2616EF9D8040FE2FDC0C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 8E Signing time: Wed 05 Nov 2025 12:45:20 +0000 Manifest this update: Wed 05 Nov 2025 12:40:20 +0000 Manifest next update: Thu 06 Nov 2025 13:01:20 +0000 Files and hashes: 1: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=) 2: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: RDNXpylv0IlOw3O/7fE48tOOsRe7Sfyvu1b+jDwo7qI=) 3: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: bTgw2rApiOjzvNODsxRtdEg25shxmrWjW+Daprq521s=) 4: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:67:3c:23:08:8c:22:31:b9:f2:61:6e:f9:d8:04:0f:e2:fd:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Nov 5 12:40:20 2025 GMT Not After : Nov 6 13:01:20 2025 GMT Subject: CN=393A79F5F6A4A411A9A34255F4EF5ED131C2BB3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5d:a1:62:ea:9c:62:32:dc:e6:9b:65:f3:da: a2:39:ed:4f:05:c7:cc:2b:ac:02:eb:d9:76:a9:fc: 61:59:29:d1:c9:f7:eb:b6:47:34:ff:f7:4c:df:c9: e3:83:57:0f:56:16:d2:bd:04:3f:e6:6d:8f:90:24: 95:74:53:d8:6e:0c:de:ef:3c:c0:15:60:15:c5:37: 44:0b:a5:2d:9b:31:1f:b8:26:da:d0:0a:da:dd:54: 86:b0:d1:f1:a0:13:1c:4a:c0:49:3a:db:80:88:6d: d7:da:37:ff:6d:58:33:9d:ea:d4:61:cf:70:5e:71: 22:d0:c9:63:3e:f7:d1:dc:94:4c:41:64:a5:8b:9d: b3:e5:90:74:d4:2a:e9:58:0a:80:05:54:19:f0:19: 64:ed:18:f5:3c:27:ff:ea:48:07:f6:6e:89:46:65: a4:29:df:df:e0:5e:73:71:d3:6a:3e:26:a0:68:ff: 51:18:e8:fa:8b:f1:b3:85:21:ad:f5:14:76:22:7b: 7f:8f:41:17:a7:89:80:d6:6f:88:0f:bd:59:7e:f1: 08:cc:9b:9e:2e:bd:a6:c2:98:a5:0f:c6:c8:c4:e2: 1f:01:d4:86:25:cd:86:ec:ff:75:50:8a:13:b5:de: dc:e6:a8:54:34:5d:a8:bb:7b:16:d2:29:11:6a:2c: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3A:79:F5:F6:A4:A4:11:A9:A3:42:55:F4:EF:5E:D1:31:C2:BB:3B X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5d:6b:70:53:ba:d4:8a:5b:1e:70:c3:89:09:05:5b:9a:21: f9:92:ae:67:8a:c0:14:da:f4:a7:9a:6a:05:a4:5f:db:d7:d6: 69:3f:b4:33:4d:1a:72:51:91:84:0a:69:64:92:fe:9d:6a:17: 7b:92:9e:4c:38:bd:45:37:b4:11:09:a1:d4:5d:05:ca:fb:01: 8d:d3:56:e0:c5:b9:a7:5d:45:e8:a7:8b:1e:12:77:b4:24:e0: f0:62:3b:c3:53:ff:17:1b:4d:7d:cf:b4:eb:59:8a:8e:eb:69: 5f:28:49:db:8e:95:8c:35:36:aa:9a:b5:ad:c6:88:4f:cb:08: e2:9a:ee:15:e2:a6:e1:a5:26:59:1c:8b:bb:39:f2:bc:26:3d: 2b:78:d3:8a:fa:d9:7c:14:fd:87:4d:85:0c:57:2e:9c:36:dd: ee:b9:66:3a:4a:ed:ff:96:58:e6:4a:97:73:63:44:9f:e6:2d: 90:ca:54:34:89:ef:97:c0:74:c6:e8:10:66:66:90:05:b4:97: 9c:6b:67:d8:56:b4:1d:a3:ac:df:27:bf:e8:fd:3a:17:fe:2b: d7:08:6d:d8:41:bf:a5:65:0e:d4:90:89:79:4d:a8:6d:b5:87: 2a:17:be:c4:23:99:6f:da:14:fa:4c:95:dd:69:93:04:91:c4: f5:b7:44:a2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbGc8IwiMIjG58mFu+dgED+L9wMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI1MTEwNTEyNDAyMFoX DTI1MTEwNjEzMDEyMFowMzExMC8GA1UEAxMoMzkzQTc5RjVGNkE0QTQxMUE5QTM0 MjU1RjRFRjVFRDEzMUMyQkIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpdoWLqnGIy3OabZfPaojntTwXHzCusAuvZdqn8YVkp0cn367ZHNP/3TN/J 44NXD1YW0r0EP+Ztj5AklXRT2G4M3u88wBVgFcU3RAulLZsxH7gm2tAK2t1UhrDR 8aATHErASTrbgIht19o3/21YM53q1GHPcF5xItDJYz730dyUTEFkpYuds+WQdNQq 6VgKgAVUGfAZZO0Y9Twn/+pIB/ZuiUZlpCnf3+Bec3HTaj4moGj/URjo+ovxs4Uh rfUUdiJ7f49BF6eJgNZviA+9WX7xCMybni69psKYpQ/GyMTiHwHUhiXNhuz/dVCK E7Xe3OaoVDRdqLt7FtIpEWos42UCAwEAAaOCAhswggIXMB0GA1UdDgQWBBQ5Onn1 9qSkEamjQlX0717RMcK7OzAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAZ11rcFO61IpbHnDDiQkFW5oh+ZKuZ4rAFNr0p5pqBaRf29fW aT+0M00aclGRhAppZJL+nWoXe5KeTDi9RTe0EQmh1F0FyvsBjdNW4MW5p11F6KeL HhJ3tCTg8GI7w1P/FxtNfc+061mKjutpXyhJ246VjDU2qpq1rcaIT8sI4pruFeKm 4aUmWRyLuznyvCY9K3jTivrZfBT9h02FDFcunDbd7rlmOkrt/5ZY5kqXc2NEn+Yt kMpUNInvl8B0xugQZmaQBbSXnGtn2Fa0HaOs3ye/6P06F/4r1wht2EG/pWUO1JCJ eU2obbWHKhe+xCOZb9oU+kyV3WmTBJHE9bdEog== -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:48 2025 by rpki-client