$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: xrpTCVke/Lv7yzLrkym7xplxpRzmMD+qhfqW3VxwXRM= Subject key identifier: A9:74:73:22:6C:20:03:65:DE:DB:C7:9B:85:D2:80:82:A5:65:15:F4 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 0972 Signing time: Mon 08 Sep 2025 20:08:38 +0000 Manifest this update: Mon 08 Sep 2025 20:08:37 +0000 Manifest next update: Mon 15 Sep 2025 20:08:37 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: mTlIKYSeKIMb1GTN/kfmcw68/lSsBlHOswxfR6O3MuE=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Sep 8 20:08:37 2025 GMT Not After : Sep 15 20:08:37 2025 GMT Subject: CN=68bf37c5-d6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:a3:fc:c3:4e:3f:c7:9a:70:31:91:22:f1: c8:27:a4:be:37:45:cf:c7:bb:45:a8:1b:97:d1:12: 75:e4:7f:6c:87:c6:4f:4f:d3:2a:b4:00:38:c8:c9: 2f:79:fd:b8:ef:89:d6:a3:ef:e1:a8:f2:4a:17:5f: 4d:45:f3:64:5c:ae:a3:70:f1:3b:19:06:5f:91:4d: 94:55:a9:da:8d:47:f3:cf:28:79:1f:b3:a7:d2:3a: 03:99:92:ea:ef:e7:e5:00:5b:82:ae:58:82:e7:77: ba:75:5b:b8:27:0a:62:fd:12:52:40:4a:4d:73:12: bc:98:af:75:56:50:70:37:ac:e9:85:2c:64:f1:d9: 33:56:71:a0:bd:b3:aa:c3:2f:d5:5f:06:37:8f:db: 9a:16:04:57:a8:08:3b:f5:65:fc:1d:cc:b7:2e:92: 69:99:a3:89:e6:37:7a:e7:d1:bf:51:bb:d4:20:38: 0f:00:e5:11:81:44:1b:03:c6:7e:ee:e0:99:b3:72: ec:d2:65:08:0e:71:de:49:6b:21:36:ea:b7:1d:04: e0:69:d7:cc:23:cb:a1:8e:17:20:79:63:06:db:0c: 40:19:fc:dd:13:69:91:59:2c:6b:d0:ba:3f:7a:d7: f5:53:e7:3d:9f:7b:36:86:b8:60:5e:57:94:87:f1: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:73:22:6C:20:03:65:DE:DB:C7:9B:85:D2:80:82:A5:65:15:F4 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:35:66:58:27:4e:01:58:d6:05:e5:b0:fa:91:c7:d4:0c:a9: c0:af:ff:51:47:28:85:92:53:af:8d:0a:72:2f:9a:73:b9:11: 8d:ec:5b:ff:6a:8f:ff:7e:8f:43:e3:d9:91:bb:c8:d9:f2:19: ca:31:55:6d:1b:52:8f:f9:36:2e:28:5f:70:b8:1f:63:89:5b: 31:a3:48:93:c9:76:62:44:d3:b1:df:b8:45:c8:ba:cb:09:19: bc:0d:30:5b:fa:a5:c2:29:69:f5:b3:d0:0e:fc:26:d0:2c:bc: da:52:08:da:01:04:d6:91:b5:03:90:1b:02:9d:ab:44:da:86: 20:a6:e9:0b:fe:7c:f9:a5:f2:5e:cc:e3:ea:5c:3f:0a:6c:6b: 59:03:97:04:6c:7d:08:c8:5f:2b:e0:72:14:5e:b0:d7:2e:ec: 69:d4:15:2e:53:00:f1:c9:35:22:35:5a:e1:ac:8d:c4:21:1d: 34:c4:d6:a9:d3:b0:f2:27:d0:b3:15:63:bb:41:36:73:bf:7a: 84:d5:89:7d:dd:06:a0:18:d6:cc:69:42:2b:86:7f:3e:f3:39: 28:10:f4:36:f4:b2:29:7a:01:6b:ed:0b:8b:d9:12:f2:e1:be: 17:57:74:45:d4:0d:81:fc:f0:1e:3e:0a:5c:fc:da:51:10:91: 6e:d5:c1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUwOTA4MjAwODM3WhcNMjUwOTE1MjAwODM3WjAYMRYwFAYD VQQDEw02OGJmMzdjNS1kNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFGj/MNOP8eacDGRIvHIJ6S+N0XPx7tFqBuX0RJ15H9sh8ZPT9MqtAA4yMkv ef2474nWo+/hqPJKF19NRfNkXK6jcPE7GQZfkU2UVanajUfzzyh5H7On0joDmZLq 7+flAFuCrliC53e6dVu4Jwpi/RJSQEpNcxK8mK91VlBwN6zphSxk8dkzVnGgvbOq wy/VXwY3j9uaFgRXqAg79WX8Hcy3LpJpmaOJ5jd659G/UbvUIDgPAOURgUQbA8Z+ 7uCZs3Ls0mUIDnHeSWshNuq3HQTgadfMI8uhjhcgeWMG2wxAGfzdE2mRWSxr0Lo/ etf1U+c9n3s2hrhgXleUh/GdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl0cyJs IANl3tvHm4XSgIKlZRX0MB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFNWZYJ04BWNYF5bD6kcfUDKnAr/9RRyiFklOvjQpyL5pzuRGN7Fv/ ao//fo9D49mRu8jZ8hnKMVVtG1KP+TYuKF9wuB9jiVsxo0iTyXZiRNOx37hFyLrL CRm8DTBb+qXCKWn1s9AO/CbQLLzaUgjaAQTWkbUDkBsCnatE2oYgpukL/nz5pfJe zOPqXD8KbGtZA5cEbH0IyF8r4HIUXrDXLuxp1BUuUwDxyTUiNVrhrI3EIR00xNap 07DyJ9CzFWO7QTZzv3qE1Yl93QagGNbMaUIrhn8+8zkoEPQ29LIpegFr7QuL2RLy 4b4XV3RF1A2B/PAePgpc/NpREJFu1cHn -----END CERTIFICATE-----Generated at Wed Sep 10 00:03:45 2025 by rpki-client