$ rpki-client -vvf rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft File: Du4Pv3hqd39MJ0FT91NvPfiflJI.mft (raw, json) Hash identifier: xkHUEwZETQBZBdt1Dapnsv+oC2UC1v6RSi7/9hDJXrE= Subject key identifier: F6:02:FB:54:7D:32:3B:AA:F0:74:12:8C:44:4C:63:7F:AB:66:57:96 Authority key identifier: 0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 Certificate issuer: /CN=A9177285/serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft Manifest number: 0C24 Signing time: Sun 24 Aug 2025 18:40:01 +0000 Manifest this update: Sun 24 Aug 2025 18:40:01 +0000 Manifest next update: Sun 31 Aug 2025 18:40:01 +0000 Files and hashes: 1: Du4Pv3hqd39MJ0FT91NvPfiflJI.crl (hash: ZtVgqIjeka+ANE6b19Kd3SVYO3dqZiWvJ8Z88VtMULE=) 2: 9C749C7C140811EABB746522C4F9AE02.roa (hash: t3eros23i5jos6SsnfnITnVUwueCJZ09uU5hK4xc9ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177285, serialNumber=0EEE0FBF786A777F4C274153F7536F3DF89F9492 Validity Not Before: Aug 24 18:40:01 2025 GMT Not After : Aug 31 18:40:01 2025 GMT Subject: CN=68ab5c81-f890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:b5:5d:ae:ef:12:ef:5c:ff:41:25:f8:6e: 23:97:59:3c:8e:05:ac:7f:1b:27:85:17:b6:f8:b2: 7e:8e:15:75:97:17:0a:56:41:d5:98:a6:eb:bb:d4: 80:d1:d6:1a:c1:af:13:c6:e8:ed:a2:23:c6:51:49: a3:55:9e:ba:96:c1:39:58:01:d1:88:bf:4b:76:3f: 38:8f:79:a7:53:f2:aa:6e:6c:25:00:42:47:47:e5: 86:33:2d:9c:cf:87:6e:72:11:1b:fd:ef:01:32:fd: 2e:d2:74:52:72:61:69:9f:5e:50:58:5c:d9:cb:91: db:74:7c:80:18:9b:bc:6e:b4:aa:19:2c:23:f2:ac: d9:d7:43:5c:1e:0c:99:2c:23:48:ca:90:68:12:c8: 5d:c9:8d:0a:17:87:a1:c5:be:01:48:22:56:08:f7: 6f:92:50:38:54:7a:c9:49:4b:26:32:1c:e4:30:79: 93:7f:b2:39:18:86:d9:fe:7c:b0:53:15:44:d7:ac: d9:aa:59:ca:f3:5d:2c:0f:25:16:04:cd:49:2b:9b: 53:27:a5:69:9a:a6:f0:eb:ed:a9:fd:b2:45:d2:e0: b3:a6:ac:79:bc:9d:6f:e1:00:2f:98:ba:2b:a9:db: 2e:68:0c:27:3c:bb:ff:a2:b8:97:9b:c3:d0:82:76: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:02:FB:54:7D:32:3B:AA:F0:74:12:8C:44:4C:63:7F:AB:66:57:96 X509v3 Authority Key Identifier: keyid:0E:EE:0F:BF:78:6A:77:7F:4C:27:41:53:F7:53:6F:3D:F8:9F:94:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Du4Pv3hqd39MJ0FT91NvPfiflJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177285/FE7F637C140611EAA728131FC4F9AE02/Du4Pv3hqd39MJ0FT91NvPfiflJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:47:28:3b:1d:72:d8:64:3e:70:87:23:fb:0c:c4:a8:34: f5:09:26:38:14:3b:63:5f:a5:18:ae:f7:13:1d:9f:d0:8f:37: 9a:da:9c:18:d4:58:c1:81:ce:6c:86:54:3c:b1:48:0a:60:49: e4:79:71:7e:b4:dd:e3:11:69:59:d4:32:d9:0c:e0:6b:fd:2a: 90:18:76:02:51:98:59:14:06:f5:d8:a7:57:96:c9:0f:ea:59: ac:0c:cd:c9:82:5b:4e:cc:12:d7:15:4b:5b:2a:f7:00:d4:e1: 22:84:e6:7f:22:14:f1:16:65:46:8f:ae:9c:23:30:ed:55:0d: 46:83:6d:86:34:3d:7c:bf:ed:8f:d8:2b:78:15:01:0f:c0:e9: 6b:3c:e6:84:b5:c6:2d:91:ea:d2:e2:6e:67:05:d2:28:f9:20: e3:80:fd:04:29:b8:94:ff:c8:c7:3a:33:bf:a0:0f:e2:a9:f1: f8:60:68:6b:ec:25:03:8b:f6:d5:1f:16:98:a8:87:50:84:82: 30:8a:9d:16:8f:f0:70:61:98:1b:92:37:e8:65:3f:53:a1:60: 2c:dd:a7:58:9c:27:c7:65:1a:01:33:b5:66:b7:04:8b:a9:7f: d6:c3:32:1c:8d:46:98:a4:04:7e:64:5c:9e:b9:1f:71:13:26: e9:2e:8f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcyODUxMTAvBgNVBAUTKDBFRUUwRkJGNzg2QTc3N0Y0QzI3NDE1M0Y3NTM2RjNE Rjg5Rjk0OTIwHhcNMjUwODI0MTg0MDAxWhcNMjUwODMxMTg0MDAxWjAYMRYwFAYD VQQDEw02OGFiNWM4MS1mODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKy1Xa7vEu9c/0El+G4jl1k8jgWsfxsnhRe2+LJ+jhV1lxcKVkHVmKbru9SA 0dYawa8TxujtoiPGUUmjVZ66lsE5WAHRiL9Ldj84j3mnU/KqbmwlAEJHR+WGMy2c z4duchEb/e8BMv0u0nRScmFpn15QWFzZy5HbdHyAGJu8brSqGSwj8qzZ10NcHgyZ LCNIypBoEshdyY0KF4ehxb4BSCJWCPdvklA4VHrJSUsmMhzkMHmTf7I5GIbZ/nyw UxVE16zZqlnK810sDyUWBM1JK5tTJ6Vpmqbw6+2p/bJF0uCzpqx5vJ1v4QAvmLor qdsuaAwnPLv/oriXm8PQgnZQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYC+1R9 Mjuq8HQSjERMY3+rZleWMB8GA1UdIwQYMBaAFA7uD794and/TCdBU/dTbz34n5SS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzI4NS9GRTdGNjM3QzE0 MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQzOU1KMEZUOTFOdlBmaWZs SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R1NFB2M2hxZDM5TUowRlQ5MU52UGZpZmxKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzI4NS9GRTdGNjM3QzE0MDYxMUVBQTcyODEzMUZDNEY5QUUwMi9EdTRQdjNocWQz OU1KMEZUOTFOdlBmaWZsSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf9EcoOx1y2GQ+cIcj+wzEqDT1CSY4FDtjX6UYrvcTHZ/Qjzea2pwY 1FjBgc5shlQ8sUgKYEnkeXF+tN3jEWlZ1DLZDOBr/SqQGHYCUZhZFAb12KdXlskP 6lmsDM3JgltOzBLXFUtbKvcA1OEihOZ/IhTxFmVGj66cIzDtVQ1Gg22GND18v+2P 2Ct4FQEPwOlrPOaEtcYtkerS4m5nBdIo+SDjgP0EKbiU/8jHOjO/oA/iqfH4YGhr 7CUDi/bVHxaYqIdQhIIwip0Wj/BwYZgbkjfoZT9ToWAs3adYnCfHZRoBM7VmtwSL qX/WwzIcjUaYpAR+ZFyeuR9xEybpLo9E -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:10 2025 by rpki-client