$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft File: Ic_hSZujbpQWt_68gTw8LqkWvEY.mft (raw, json) Hash identifier: VFPGl8sm4iXh4K67+I6RlMFV/WJp/6/TxiJYskvgej8= Subject key identifier: CC:7E:B7:53:94:B0:71:F1:E3:A4:C6:FD:D6:84:23:D3:E0:6A:0C:F3 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft Manifest number: 0AE5 Signing time: Wed 20 Aug 2025 19:28:59 +0000 Manifest this update: Wed 20 Aug 2025 19:28:58 +0000 Manifest next update: Wed 27 Aug 2025 19:28:58 +0000 Files and hashes: 1: Ic_hSZujbpQWt_68gTw8LqkWvEY.crl (hash: Ugu7MICwbHPhgsc5z/z7vthOkoiFUNypnBkjJwtrlKU=) 2: 498B6EFE942411EA816FC855C4F9AE02.roa (hash: AU3Frw6p1SnNaYVLPNPNSlHZdunuBupMTCIgXK+Ojng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Aug 20 19:28:58 2025 GMT Not After : Aug 27 19:28:58 2025 GMT Subject: CN=68a621fa-6990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:cf:fc:d0:ad:50:f6:94:3b:cb:b4:6d:dd: 5e:49:05:9d:7a:f5:b4:51:be:18:6c:30:68:e1:95: 3e:50:c9:be:24:5b:b2:25:84:14:12:52:3d:5d:90: 8f:0f:96:db:ff:96:3f:ba:98:b0:b7:70:91:57:ef: ab:ae:5d:e8:66:d8:c4:65:f3:5a:84:2b:8a:69:53: 62:b1:b8:a4:68:37:b5:22:b4:b5:14:53:c8:5c:8d: ca:a4:1e:b8:41:b0:36:c2:a7:4b:52:2f:94:e3:00: 5d:dc:8a:32:1b:1f:1a:e4:02:ef:25:2d:89:29:43: 1a:ee:29:06:d3:49:5d:95:57:d0:b3:e2:a3:00:1b: 34:8a:3f:c3:32:61:b9:c5:c3:88:17:b2:fb:85:53: 38:d5:cd:f6:cf:3b:ba:8f:2b:41:28:9a:05:27:c8: 1d:0d:c9:4b:0c:12:35:c6:54:2e:bc:53:ee:5e:40: 14:af:bc:c1:a4:b8:ce:01:b8:af:e2:13:82:3a:f7: 6c:84:1f:f0:74:9e:da:a1:14:ca:a1:50:46:14:1a: da:8a:8b:54:15:d7:ce:24:be:f9:bf:ef:dd:d3:04: 8a:6a:50:6e:be:64:6c:3a:ed:5d:15:58:92:c1:97: 91:e1:4a:99:60:14:20:e1:52:73:58:70:b6:c0:3b: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7E:B7:53:94:B0:71:F1:E3:A4:C6:FD:D6:84:23:D3:E0:6A:0C:F3 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fe:ea:50:3e:3a:20:8e:fb:cb:19:08:3b:a6:3c:03:08:79: 61:ce:91:f2:b7:b6:a4:56:79:bd:94:f6:b7:f2:df:50:30:07: 4e:f7:89:2a:c4:57:c2:d8:9f:17:16:17:4d:27:57:56:a4:55: 3b:25:c0:88:d5:2d:8e:db:24:7c:ea:28:99:36:9c:06:43:c2: b7:1c:cc:8d:6a:fc:c4:1d:64:49:ed:81:95:39:ca:c5:92:6a: 50:e7:e1:1e:e2:36:c8:63:ac:20:1e:b3:fb:e0:d2:d0:df:0f: 9f:ae:95:35:3a:d8:0c:7f:35:e9:dd:d5:2a:af:14:61:d1:b4: 6d:69:c9:ca:5f:a5:58:12:60:26:c4:63:08:4b:5e:44:ea:f3: 11:4c:0d:a0:b6:c7:7c:e6:c1:24:21:83:84:43:16:b8:f4:a4: c3:07:d5:09:b3:81:9c:ea:8c:b9:65:a7:52:0f:9e:05:46:da: a6:93:5c:8e:08:58:84:91:f4:b2:43:86:2a:e1:5d:46:2c:52: 2e:8d:3a:8a:d0:19:9a:cc:3c:c4:c7:e4:39:6d:61:30:fb:06: 4b:b4:85:a0:e6:92:c6:bc:f3:57:bc:71:54:e7:18:c6:05:ea: 5c:a7:2e:ac:c0:23:58:15:5a:c3:68:7c:f6:a1:8c:8c:53:6a: 04:07:04:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjUwODIwMTkyODU4WhcNMjUwODI3MTkyODU4WjAYMRYwFAYD VQQDEw02OGE2MjFmYS02OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4vP/NCtUPaUO8u0bd1eSQWdevW0Ub4YbDBo4ZU+UMm+JFuyJYQUElI9XZCP D5bb/5Y/upiwt3CRV++rrl3oZtjEZfNahCuKaVNisbikaDe1IrS1FFPIXI3KpB64 QbA2wqdLUi+U4wBd3IoyGx8a5ALvJS2JKUMa7ikG00ldlVfQs+KjABs0ij/DMmG5 xcOIF7L7hVM41c32zzu6jytBKJoFJ8gdDclLDBI1xlQuvFPuXkAUr7zBpLjOAbiv 4hOCOvdshB/wdJ7aoRTKoVBGFBraiotUFdfOJL75v+/d0wSKalBuvmRsOu1dFViS wZeR4UqZYBQg4VJzWHC2wDsMFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx+t1OU sHHx46TG/daEI9PgagzzMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjQxMy9COEZDQTdCQTUxNkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJw UVd0XzY4Z1R3OExxa1d2RVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/upQPjogjvvLGQg7pjwDCHlhzpHyt7akVnm9lPa38t9QMAdO94kq xFfC2J8XFhdNJ1dWpFU7JcCI1S2O2yR86iiZNpwGQ8K3HMyNavzEHWRJ7YGVOcrF kmpQ5+Ee4jbIY6wgHrP74NLQ3w+frpU1OtgMfzXp3dUqrxRh0bRtacnKX6VYEmAm xGMIS15E6vMRTA2gtsd85sEkIYOEQxa49KTDB9UJs4Gc6oy5ZadSD54FRtqmk1yO CFiEkfSyQ4Yq4V1GLFIujTqK0BmazDzEx+Q5bWEw+wZLtIWg5pLGvPNXvHFU5xjG Bepcpy6swCNYFVrDaHz2oYyMU2oEBwSL -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:03 2025 by rpki-client