$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: Dx0rjeInN2RyOkqk1OUm8b7kYGcp89MFSkys9cQkUQI= Subject key identifier: 82:E9:74:AD:3F:EB:F2:6C:64:32:AA:6D:47:3E:23:1A:C7:90:35:BD Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 06B6 Signing time: Wed 17 Sep 2025 00:33:17 +0000 Manifest this update: Wed 17 Sep 2025 00:33:16 +0000 Manifest next update: Wed 24 Sep 2025 00:33:16 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 6EUhrMVVaaT/TBWw48wcBnSOgpFwuQb9XK5dSUfOG0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Sep 17 00:33:16 2025 GMT Not After : Sep 24 00:33:16 2025 GMT Subject: CN=68ca01cc-5915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:56:9b:e4:d2:19:59:be:79:3a:66:86:ee: c4:51:37:aa:4f:31:f4:79:02:14:d1:a8:11:fb:8b: 8b:bd:26:6e:72:2b:af:e7:37:a5:a9:4e:99:41:be: dd:4a:27:fb:3b:8a:9f:79:f5:94:d2:33:ed:82:2f: 02:58:d9:ec:a6:a7:b2:d5:b8:5a:9f:ae:75:f4:c8: 11:29:a2:41:8b:85:52:89:1c:84:c9:d1:d3:ab:78: 0f:5a:ab:77:eb:7d:71:ad:ad:9a:a8:b9:d4:00:09: d8:62:55:11:52:a9:16:7d:f4:19:91:5b:ec:55:69: f1:ba:7d:7f:92:94:22:3d:73:6e:fc:4a:49:a7:11: 27:0d:14:8e:c1:91:5c:e5:f9:32:00:11:b4:36:f3: 22:1a:af:51:69:a8:8c:8d:11:ed:ec:2c:4f:d4:d9: 12:cd:77:f2:06:2c:1a:d7:bf:37:3d:79:1f:be:4b: d0:17:82:20:5d:5f:54:c1:f8:91:62:b6:d5:a8:0f: 6a:aa:ff:7d:f7:1b:8d:ee:a9:78:b7:22:93:b8:91: 9b:73:e4:53:7b:46:47:09:6a:50:8c:38:08:0b:92: 6e:d6:82:e8:ab:05:b3:25:7d:0b:8e:03:29:aa:f8: 0d:94:49:d9:0c:e4:a9:03:bc:b6:a9:a1:70:24:b4: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:74:AD:3F:EB:F2:6C:64:32:AA:6D:47:3E:23:1A:C7:90:35:BD X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:fb:4c:a2:15:5c:cb:2b:75:8c:dc:83:52:d3:be:e1:76:09: 3e:60:d4:42:7b:60:d1:87:8f:08:bb:6c:9a:46:fc:ea:44:3c: 8f:7c:20:26:d2:19:e3:14:42:0f:f2:ed:1e:02:3c:bf:c8:a2: 85:c2:79:ca:66:fb:c2:e0:d4:a6:89:92:d6:e9:fa:c7:7d:f7: 27:1b:a5:ec:2b:a0:55:1a:c7:a0:46:6d:79:46:93:27:7f:ce: 5f:4e:41:70:37:2f:7c:6e:3d:4b:1d:6f:00:61:19:3d:6b:a3: e4:fc:7e:1d:42:74:19:c0:b0:cc:a4:ee:78:b4:fc:ca:dc:fb: 85:7a:da:45:85:9b:53:57:03:19:3b:23:73:4a:90:f3:09:04: 8e:81:1c:d5:04:4c:55:90:0d:31:7f:b3:1e:a0:88:bf:8a:b0: 64:dd:9f:74:a5:60:93:0f:71:63:97:48:cd:30:ff:52:31:7e: 42:80:80:36:2d:5e:40:7d:c0:3d:bf:8a:9a:52:d2:7c:2c:41: f8:7b:be:0a:81:74:7b:ab:23:90:f7:59:3b:d3:dd:ff:ec:14: c0:1f:d7:0e:fb:58:05:40:6f:bd:26:d1:70:47:49:af:08:d3: 53:ab:6a:80:17:f5:00:58:a7:1e:ca:bd:3b:23:78:19:ed:6f: 5b:71:38:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUwOTE3MDAzMzE2WhcNMjUwOTI0MDAzMzE2WjAYMRYwFAYD VQQDEw02OGNhMDFjYy01OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD9Wm+TSGVm+eTpmhu7EUTeqTzH0eQIU0agR+4uLvSZuciuv5zelqU6ZQb7d Sif7O4qfefWU0jPtgi8CWNnspqey1bhan6519MgRKaJBi4VSiRyEydHTq3gPWqt3 631xra2aqLnUAAnYYlURUqkWffQZkVvsVWnxun1/kpQiPXNu/EpJpxEnDRSOwZFc 5fkyABG0NvMiGq9RaaiMjRHt7CxP1NkSzXfyBiwa1783PXkfvkvQF4IgXV9UwfiR YrbVqA9qqv999xuN7ql4tyKTuJGbc+RTe0ZHCWpQjDgIC5Ju1oLoqwWzJX0LjgMp qvgNlEnZDOSpA7y2qaFwJLRVqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILpdK0/ 6/JsZDKqbUc+IxrHkDW9MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4+0yiFVzLK3WM3INS077hdgk+YNRCe2DRh48Iu2yaRvzqRDyPfCAm 0hnjFEIP8u0eAjy/yKKFwnnKZvvC4NSmiZLW6frHffcnG6XsK6BVGsegRm15RpMn f85fTkFwNy98bj1LHW8AYRk9a6Pk/H4dQnQZwLDMpO54tPzK3PuFetpFhZtTVwMZ OyNzSpDzCQSOgRzVBExVkA0xf7MeoIi/irBk3Z90pWCTD3Fjl0jNMP9SMX5CgIA2 LV5AfcA9v4qaUtJ8LEH4e74KgXR7qyOQ91k7093/7BTAH9cO+1gFQG+9JtFwR0mv CNNTq2qAF/UAWKceyr07I3gZ7W9bcTiK -----END CERTIFICATE-----Generated at Thu Sep 18 22:12:37 2025 by rpki-client