$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft File: IRxVC1PrIEdRhbq83n5w32dESLc.mft (raw, json) Hash identifier: q06pztrIcKmS4pDrLrxwTtI3LMXYrwzwwmER26PJxTM= Subject key identifier: DA:5C:47:56:97:49:6D:AE:8B:96:BA:F9:B1:4C:90:46:63:E2:CF:72 Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft Manifest number: 0C98 Signing time: Sun 24 Aug 2025 18:17:10 +0000 Manifest this update: Sun 24 Aug 2025 18:17:09 +0000 Manifest next update: Sun 31 Aug 2025 18:17:09 +0000 Files and hashes: 1: IRxVC1PrIEdRhbq83n5w32dESLc.crl (hash: xAV4an3eMeU/zB6vh1qkhoS8dfF5x+77S1lZH6YBRDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A608, serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7 Validity Not Before: Aug 24 18:17:09 2025 GMT Not After : Aug 31 18:17:09 2025 GMT Subject: CN=68ab5725-0794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:51:c4:04:5e:c6:de:c5:fb:8d:dc:c1:46: 2f:05:89:d6:bb:8e:bb:25:72:67:bc:11:cf:06:f1: c1:12:76:8f:a2:10:c4:d0:b5:70:17:09:4e:40:4b: 6f:97:1e:03:76:41:67:bc:dd:fa:a4:16:35:a2:2b: 7a:c0:6f:fc:9c:39:c2:95:c6:8b:06:f8:2e:47:9c: 56:a3:d4:e5:2a:69:d7:3f:6e:3d:24:d5:12:46:97: be:3d:db:63:68:2f:ce:33:08:9a:2f:dc:85:b8:54: 76:41:b2:69:9b:1e:b8:20:02:b9:7b:fb:5f:16:66: 3f:94:d9:60:0b:df:a9:19:2c:20:3f:4a:db:30:5f: 1f:38:79:b5:db:e9:a0:c6:a4:15:f0:7d:ff:2f:cb: bf:67:26:42:6f:12:92:c2:20:9d:5f:2f:7c:77:c2: d7:a0:19:9c:ee:1c:c4:60:cd:44:40:2e:6a:ee:b0: 90:cf:74:45:22:6d:2e:6a:2e:6c:9e:72:9e:a6:35: b1:dc:cf:fc:1f:72:5a:da:67:75:7f:68:cc:39:2c: 18:31:47:00:f2:c1:18:cb:e2:de:ec:02:a7:d0:81: 8a:cb:2a:e4:95:c6:cc:a2:c3:d0:b7:32:5d:5a:4d: fb:52:69:27:15:98:e0:f8:90:91:6a:4e:44:f1:87: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:47:56:97:49:6D:AE:8B:96:BA:F9:B1:4C:90:46:63:E2:CF:72 X509v3 Authority Key Identifier: keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:39:d8:5e:12:8d:77:a0:61:d8:b5:ba:c0:39:a5:51:6d:26: f0:6a:bb:a9:51:05:60:a5:75:a8:d2:eb:cf:91:82:64:25:bb: be:ed:04:fd:57:c4:25:54:86:79:18:9b:67:0b:be:78:69:9c: bb:43:6d:df:5f:20:fd:1f:36:8f:2c:a5:4b:a8:34:76:e5:02: 9e:80:7c:36:95:99:a4:1e:5b:ce:e3:bf:75:4f:1e:a2:27:12: ca:37:7a:b9:1c:49:4b:d7:75:7c:21:57:6a:36:a0:54:11:31: 3b:cd:45:84:8f:17:27:04:e6:69:39:3b:d1:45:28:be:6c:8d: fc:8a:3a:f7:bb:cc:ea:df:58:b7:ee:96:b6:f0:2d:2d:31:4f: ab:59:c7:1d:75:ee:c1:f5:38:d4:97:6e:9a:f6:44:8a:ce:b2: b9:40:8d:3b:9e:ae:11:45:c4:c3:5e:2a:4b:2b:08:d9:ef:41: 4d:e3:7d:ae:05:f2:2f:87:74:ad:03:fd:0a:1e:3c:63:01:fc: d5:7b:59:26:8a:34:3c:01:be:81:3d:dc:bd:f7:c1:1c:fd:2c: fc:a3:01:27:f4:73:db:96:36:fc:3d:fd:cf:c1:b2:a1:31:bc: 96:af:f9:39:af:8a:09:8e:95:75:b0:5e:b8:ba:03:3f:9b:07: fd:30:c6:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2MDgxMTAvBgNVBAUTKDIxMUM1NTBCNTNFQjIwNDc1MTg1QkFCQ0RFN0U3MERG Njc0NDQ4QjcwHhcNMjUwODI0MTgxNzA5WhcNMjUwODMxMTgxNzA5WjAYMRYwFAYD VQQDEw02OGFiNTcyNS0wNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00FRxARext7F+43cwUYvBYnWu467JXJnvBHPBvHBEnaPohDE0LVwFwlOQEtv lx4DdkFnvN36pBY1oit6wG/8nDnClcaLBvguR5xWo9TlKmnXP249JNUSRpe+Pdtj aC/OMwiaL9yFuFR2QbJpmx64IAK5e/tfFmY/lNlgC9+pGSwgP0rbMF8fOHm12+mg xqQV8H3/L8u/ZyZCbxKSwiCdXy98d8LXoBmc7hzEYM1EQC5q7rCQz3RFIm0uai5s nnKepjWx3M/8H3Ja2md1f2jMOSwYMUcA8sEYy+Le7AKn0IGKyyrklcbMosPQtzJd Wk37UmknFZjg+JCRak5E8YenCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpcR1aX SW2ui5a6+bFMkEZj4s9yMB8GA1UdIwQYMBaAFCEcVQtT6yBHUYW6vN5+cN9nREi3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTYwOC83NDgwRkM4ODAy RTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklFZFJoYnE4M241dzMyZEVT TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSeFZDMVBySUVkUmhicTgzbjV3MzJkRVNMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTYwOC83NDgwRkM4ODAyRTcxMUVBQjA0NTA0MThDNEY5QUUwMi9JUnhWQzFQcklF ZFJoYnE4M241dzMyZEVTTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtOdheEo13oGHYtbrAOaVRbSbwarupUQVgpXWo0uvPkYJkJbu+7QT9 V8QlVIZ5GJtnC754aZy7Q23fXyD9HzaPLKVLqDR25QKegHw2lZmkHlvO4791Tx6i JxLKN3q5HElL13V8IVdqNqBUETE7zUWEjxcnBOZpOTvRRSi+bI38ijr3u8zq31i3 7pa28C0tMU+rWccdde7B9TjUl26a9kSKzrK5QI07nq4RRcTDXipLKwjZ70FN432u BfIvh3StA/0KHjxjAfzVe1kmijQ8Ab6BPdy998Ec/Sz8owEn9HPbljb8Pf3PwbKh MbyWr/k5r4oJjpV1sF64ugM/mwf9MMZX -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:25 2025 by rpki-client