$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json) Hash identifier: qPVbflHSizemkQaiSKIrnbKAEFyyzmQgNpN1OeWihpA= Subject key identifier: FC:08:EF:F6:13:BF:DE:2B:5B:AA:C6:19:32:2E:7C:34:87:8A:69:91 Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft Manifest number: 0378 Signing time: Sat 19 Jul 2025 02:06:59 +0000 Manifest this update: Sat 19 Jul 2025 02:06:59 +0000 Manifest next update: Sat 26 Jul 2025 02:06:58 +0000 Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: 90OxxpmiGIV93sNSsmilbQBjE2BGs2HY1Nmjc8mt11k=) 2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: aBG6SO8r5rIticJAwQ3F1F0hRoqPZrUVOKMtrK+PpMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Validity Not Before: Jul 19 02:06:59 2025 GMT Not After : Jul 26 02:06:58 2025 GMT Subject: CN=687afdc3-a17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:56:0a:f8:cf:2b:5d:59:23:c4:1e:d0:7b: 76:24:15:4e:90:e0:86:8b:f9:2f:fb:e7:f5:24:67: c0:a0:10:ef:f2:e4:e4:72:0c:53:ee:0c:cd:5c:43: 04:a4:c0:20:f9:76:c8:b9:44:11:58:4b:7d:ed:d5: 08:40:3f:29:9d:2f:3a:2d:eb:18:ea:6c:95:87:74: 43:ed:1d:fb:65:2b:f9:e2:d5:f6:34:ef:bb:47:62: e1:52:4f:9a:96:3a:58:c5:79:b8:a8:fa:04:80:3e: cf:59:ad:91:01:e3:c3:dc:17:92:b8:19:cb:4a:cd: 37:90:8d:9d:0b:0c:95:37:b1:58:61:b3:d6:a2:84: ce:ec:b9:9a:a9:46:b2:f5:ca:6a:05:14:60:e2:6b: 49:01:04:7f:18:15:f3:6b:80:ef:c0:4a:f5:52:02: 94:ab:84:d9:75:5f:13:16:89:70:6d:06:16:48:c3: 95:f5:f7:67:53:df:e7:8c:1e:6b:35:10:47:b3:bb: d2:1f:18:d1:50:87:b9:0e:7e:d4:6a:31:1f:e4:b6: 87:63:fd:c2:b1:7f:33:56:d1:32:be:cc:c8:d1:2c: 5d:15:e9:71:6c:3d:0b:6a:db:ca:ee:91:a5:b4:2e: cb:85:2a:65:ac:c4:44:b4:ad:65:6a:f0:db:a2:73: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:08:EF:F6:13:BF:DE:2B:5B:AA:C6:19:32:2E:7C:34:87:8A:69:91 X509v3 Authority Key Identifier: keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:08:0a:8b:71:22:11:bd:0a:72:b6:20:7c:6d:70:f2:39:e5: 43:ab:c0:2a:70:e2:58:3a:2f:f4:e3:3e:37:8c:43:ce:24:07: f8:90:05:b8:74:09:aa:87:6f:41:1d:e9:40:a0:40:ed:83:b5: 15:7c:7a:b4:1d:9b:c4:f4:22:eb:0e:f5:d1:b4:57:2b:dd:98: 77:1d:df:42:8c:15:ea:dd:87:34:bc:52:ac:b3:f0:c6:7a:a3: f1:09:35:b2:cb:fb:5f:a5:cb:20:75:d6:2b:43:67:01:67:db: 66:ce:6d:34:87:c8:89:c0:01:f6:1b:76:a6:c1:6f:d8:17:86: 85:21:a6:4d:24:e5:33:d0:b8:a1:bc:3b:60:65:8a:87:22:42: e2:8e:8e:f9:ba:e6:ce:ee:a8:ed:ec:2c:0b:4d:ec:04:38:f1: d5:a7:55:3a:76:8a:ff:cc:a1:e2:b9:f9:b7:32:49:ff:02:a5: 53:eb:53:46:00:a9:10:16:bb:af:28:d5:09:a6:b1:88:fb:9c: 6f:6a:f9:bc:5c:46:c5:7c:b0:11:1c:58:95:a5:87:36:96:08: 32:5e:87:04:d4:5c:09:cd:44:19:f9:ff:4c:29:7d:6c:b3:31: d2:79:8e:a9:de:2c:83:19:fc:2a:af:10:1a:8b:d3:25:e8:13: f4:ad:a4:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzcxNjExMC8GA1UEBRMoODc1RUM3MkU0NkYyQ0QxNjNGMDZCODIyRTcwNDEyOUFF RkUzMTkxMDAeFw0yNTA3MTkwMjA2NTlaFw0yNTA3MjYwMjA2NThaMBgxFjAUBgNV BAMTDTY4N2FmZGMzLWExN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcEVYK+M8rXVkjxB7Qe3YkFU6Q4IaL+S/75/UkZ8CgEO/y5ORyDFPuDM1cQwSk wCD5dsi5RBFYS33t1QhAPymdLzot6xjqbJWHdEPtHftlK/ni1fY077tHYuFST5qW OljFebio+gSAPs9ZrZEB48PcF5K4GctKzTeQjZ0LDJU3sVhhs9aihM7suZqpRrL1 ymoFFGDia0kBBH8YFfNrgO/ASvVSApSrhNl1XxMWiXBtBhZIw5X192dT3+eMHms1 EEezu9IfGNFQh7kOftRqMR/ktodj/cKxfzNW0TK+zMjRLF0V6XFsPQtq28rukaW0 LsuFKmWsxES0rWVq8Nuic+TPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Ajv9hO/ 3itbqsYZMi58NIeKaZEwHwYDVR0jBBgwFoAUh17HLkbyzRY/Brgi5wQSmu/jGRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNzE2LzREQjlDQUM0MTQw MjExRURCOTY2MzQxNUM0RjlBRTAyL2gxN0hMa2J5elJZX0JyZ2k1d1FTbXVfakdS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDE3SExrYnl6UllfQnJnaTV3UVNtdV9qR1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NzE2LzREQjlDQUM0MTQwMjExRURCOTY2MzQxNUM0RjlBRTAyL2gxN0hMa2J5elJZ X0JyZ2k1d1FTbXVfakdSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgICotxIhG9CnK2IHxtcPI55UOrwCpw4lg6L/TjPjeMQ84kB/iQBbh0 CaqHb0Ed6UCgQO2DtRV8erQdm8T0IusO9dG0VyvdmHcd30KMFerdhzS8Uqyz8MZ6 o/EJNbLL+1+lyyB11itDZwFn22bObTSHyInAAfYbdqbBb9gXhoUhpk0k5TPQuKG8 O2BliociQuKOjvm65s7uqO3sLAtN7AQ48dWnVTp2iv/MoeK5+bcySf8CpVPrU0YA qRAWu68o1QmmsYj7nG9q+bxcRsV8sBEcWJWlhzaWCDJehwTUXAnNRBn5/0wpfWyz MdJ5jqneLIMZ/CqvEBqL0yXoE/StpGY= -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:34 2025 by rpki-client