$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: eWk1eeekYHmk/BTu3o/NeYFxApmUul+4CusXEzFYx0U= Subject key identifier: 03:8F:7D:D9:57:A0:2F:A3:A1:5F:B0:86:E4:F5:BD:84:A0:73:B4:AD Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 07B4 Signing time: Wed 20 Aug 2025 21:21:32 +0000 Manifest this update: Wed 20 Aug 2025 21:21:32 +0000 Manifest next update: Wed 27 Aug 2025 21:21:32 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: SJsEnXDHIEGQ6Qd97jJjs33heCwMUnDE2pDPspseI7s=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Aug 20 21:21:32 2025 GMT Not After : Aug 27 21:21:32 2025 GMT Subject: CN=68a63c5c-f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:6a:59:55:7d:9d:b9:52:a2:f8:66:bb:42: f5:e0:a4:23:9b:d5:75:ce:da:ad:60:06:9c:d1:96: 40:9f:83:a8:e5:81:ee:00:e2:10:70:44:29:9a:93: 23:4b:97:6f:70:6b:57:07:f6:03:05:54:f7:40:8d: 12:88:27:3f:d8:70:1d:15:44:f4:1f:94:54:cc:a1: 42:40:46:fd:60:01:cf:85:d7:c8:38:aa:b1:14:cc: 47:69:ec:b3:34:05:81:ea:10:43:4f:a6:37:a6:3b: 90:01:da:a1:4e:39:e3:ea:5e:af:fc:37:5a:4b:28: 51:74:99:2e:d8:88:ee:8a:3e:fa:5c:05:c8:93:37: f9:fe:00:88:bf:c5:0b:4c:7c:44:1c:e0:0f:a4:41: e8:7e:cc:8c:81:24:a7:0d:fa:40:91:68:a4:7d:d4: 14:0e:8d:9f:4a:7e:d4:1e:11:ea:75:35:ed:1f:82: fa:0a:da:19:36:1c:46:72:bc:6b:0d:20:eb:16:c3: 0b:54:65:78:03:bc:b1:3d:23:0d:ba:e3:85:ae:ed: 19:37:74:b2:70:1d:7d:f7:7b:a2:5c:8a:c9:ee:df: 1f:dc:0b:83:c7:2b:ce:15:52:40:46:76:f3:a5:9d: cb:d8:0e:0e:4d:81:6e:e6:2e:cf:0c:a3:00:99:a8: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8F:7D:D9:57:A0:2F:A3:A1:5F:B0:86:E4:F5:BD:84:A0:73:B4:AD X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:86:25:6b:e1:f9:2c:40:53:ab:e3:08:a7:b0:7b:dd:86: 2b:dd:ef:d6:fe:9b:0f:3b:fc:cd:79:85:11:8f:b6:99:c1:e2: 22:1f:f1:34:72:be:ac:53:d5:fe:3d:4b:10:52:cf:49:29:6c: c1:f2:c0:cc:88:ed:5c:c8:fa:71:95:e9:99:dc:7d:d5:21:7e: d2:e6:ff:28:c0:b0:05:f1:3e:c4:87:89:8b:83:b2:b8:0b:9f: db:28:db:69:9a:30:19:03:b6:5e:21:c0:80:25:c7:4b:90:7c: 58:d1:ae:52:47:87:dc:6f:4f:8b:ef:1b:5b:b8:3b:13:ec:86: d1:b9:7c:07:3f:1d:ba:04:5a:4d:69:90:9d:37:f3:be:64:c2: 47:f2:e8:9a:02:4d:9a:b7:64:3a:ee:ae:32:c4:ba:20:03:ad: 86:5b:17:0f:fd:d3:c6:99:36:b7:45:de:cc:54:b2:93:f7:4f: ca:db:4f:85:e8:0f:32:53:e8:2a:0d:19:fb:25:4d:75:ca:4f: 89:11:21:7c:33:ad:6f:cb:a5:68:51:6e:82:35:e6:cc:c7:9c: f0:ca:3c:95:6a:18:bd:1d:69:fe:a9:8f:6a:ba:c1:1a:ed:56: 77:21:f0:d7:5d:9c:f2:30:2f:68:4a:04:46:42:ca:35:62:ad: d2:7b:6b:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwODIwMjEyMTMyWhcNMjUwODI3MjEyMTMyWjAYMRYwFAYD VQQDEw02OGE2M2M1Yy1mOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzhqWVV9nblSovhmu0L14KQjm9V1ztqtYAac0ZZAn4Oo5YHuAOIQcEQpmpMj S5dvcGtXB/YDBVT3QI0SiCc/2HAdFUT0H5RUzKFCQEb9YAHPhdfIOKqxFMxHaeyz NAWB6hBDT6Y3pjuQAdqhTjnj6l6v/DdaSyhRdJku2Ijuij76XAXIkzf5/gCIv8UL THxEHOAPpEHofsyMgSSnDfpAkWikfdQUDo2fSn7UHhHqdTXtH4L6CtoZNhxGcrxr DSDrFsMLVGV4A7yxPSMNuuOFru0ZN3SycB1993uiXIrJ7t8f3AuDxyvOFVJARnbz pZ3L2A4OTYFu5i7PDKMAmajIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOPfdlX oC+joV+whuT1vYSgc7StMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6YIYla+H5LEBTq+MIp7B73YYr3e/W/psPO/zNeYURj7aZweIiH/E0 cr6sU9X+PUsQUs9JKWzB8sDMiO1cyPpxlemZ3H3VIX7S5v8owLAF8T7Eh4mLg7K4 C5/bKNtpmjAZA7ZeIcCAJcdLkHxY0a5SR4fcb0+L7xtbuDsT7IbRuXwHPx26BFpN aZCdN/O+ZMJH8uiaAk2at2Q67q4yxLogA62GWxcP/dPGmTa3Rd7MVLKT90/K20+F 6A8yU+gqDRn7JU11yk+JESF8M61vy6VoUW6CNebMx5zwyjyVahi9HWn+qY9qusEa 7VZ3IfDXXZzyMC9oSgRGQso1Yq3Se2su -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:10 2025 by rpki-client