$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: 7v0+Ut6kdb+OoOqPLjlrrSfhxVT5rt6uWNv6XdRpph4= Subject key identifier: D1:28:AF:2C:A1:05:ED:6E:42:B3:15:AE:B6:CB:06:25:3D:03:11:85 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0805 Signing time: Wed 20 Aug 2025 21:01:35 +0000 Manifest this update: Wed 20 Aug 2025 21:01:34 +0000 Manifest next update: Wed 27 Aug 2025 21:01:34 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: +AgyQ45rkTFarI8KrlSdyEUZE2VXZ34hTz/6RDodpDs=) 2: F9C379F2674F11F09FFF0F5BC4F9AE02.roa (hash: LcAbunDijFcAPxaxvvLn15sAYA8KilXQ0gSd3Vwnavw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Aug 20 21:01:34 2025 GMT Not After : Aug 27 21:01:34 2025 GMT Subject: CN=68a637af-9e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:2b:42:3d:db:f3:a4:4d:3d:45:fe:fd:f1: b6:86:d9:71:84:3f:2d:2c:1d:d1:2e:77:fa:cc:bf: 5d:f7:d8:4c:ce:57:08:7c:d8:b3:9b:01:0f:6f:0b: 3a:fb:fd:94:13:bb:22:49:30:5c:ae:e6:3f:2d:bc: 74:48:22:fe:0f:e0:89:0a:c4:82:ab:1e:45:1f:a6: a4:b7:e8:85:a7:5f:25:45:8f:70:e8:8a:7e:d4:61: 6b:fa:71:29:8c:ce:8a:99:43:42:41:ac:7e:c0:3b: 9b:44:a3:a8:74:30:da:d1:a4:e1:59:33:a6:d6:a8: 76:34:4b:9e:cb:1c:b2:d9:23:79:f2:26:45:4d:cd: c3:94:11:8d:cf:1b:18:5b:5f:45:5e:01:34:6d:f7: 02:cb:1e:ba:87:59:27:e3:f5:51:0a:23:f9:4e:2a: 6a:7b:63:86:ef:2f:2a:14:a8:31:f7:0a:e9:21:b6: 6a:66:07:dd:d0:f4:06:71:f9:62:a5:48:34:08:a3: da:72:0d:6d:36:ac:e0:4b:0e:0b:ec:61:11:98:8d: df:e0:48:89:b4:41:81:3d:cb:86:8c:f9:44:80:e5: 19:4b:55:7a:68:65:30:59:ac:b0:b5:24:e2:40:3b: 28:69:8a:5f:d1:b4:94:58:01:7f:d2:ec:d4:db:b7: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:AF:2C:A1:05:ED:6E:42:B3:15:AE:B6:CB:06:25:3D:03:11:85 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:26:7e:6c:7b:5a:96:eb:0f:17:80:94:ea:74:18:48:5f:2f: 41:a3:80:c2:8f:f4:78:b1:1a:17:ac:6d:3b:cb:eb:4a:c0:17: dd:e7:f9:4d:f5:e0:5d:fb:62:d1:3b:f3:37:e8:44:6a:53:1d: 40:e5:64:ae:e3:06:b9:00:6e:c5:2d:6f:e0:b4:18:70:d2:11: 77:c4:2a:1f:da:30:5a:d3:5b:83:dd:5d:a8:91:c7:ae:00:9d: f0:bd:bd:73:8e:1f:f8:4e:0f:c5:6f:b2:24:65:df:a4:db:a3: 81:11:7d:2e:e1:61:f7:74:2a:f8:f2:bf:06:c8:30:4a:13:43: c3:1b:4d:5b:4f:c3:61:0a:54:38:23:4a:80:d5:f5:c0:b4:17: 41:a2:9b:b0:59:d5:a8:83:42:e4:c9:4d:ba:a7:e4:75:cf:7b: 4d:07:2a:47:14:23:bc:cc:e5:c4:9e:a5:89:1e:ce:e3:42:1f: 52:9a:0a:f3:22:57:e4:53:7d:d2:b5:be:b1:61:a0:6e:88:1f: 45:9e:00:6b:db:61:5a:05:59:b3:27:2e:76:7e:0a:02:a1:4d: d9:0d:bd:8e:25:5c:8d:0b:a5:a8:bd:4f:87:e6:3f:98:31:32: 99:52:19:ee:4f:de:22:a3:af:8f:51:ae:8b:03:8c:11:89:88: 64:9e:7d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwODIwMjEwMTM0WhcNMjUwODI3MjEwMTM0WjAYMRYwFAYD VQQDEw02OGE2MzdhZi05ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvArQj3b86RNPUX+/fG2htlxhD8tLB3RLnf6zL9d99hMzlcIfNizmwEPbws6 +/2UE7siSTBcruY/Lbx0SCL+D+CJCsSCqx5FH6akt+iFp18lRY9w6Ip+1GFr+nEp jM6KmUNCQax+wDubRKOodDDa0aThWTOm1qh2NEueyxyy2SN58iZFTc3DlBGNzxsY W19FXgE0bfcCyx66h1kn4/VRCiP5Tipqe2OG7y8qFKgx9wrpIbZqZgfd0PQGcfli pUg0CKPacg1tNqzgSw4L7GERmI3f4EiJtEGBPcuGjPlEgOUZS1V6aGUwWaywtSTi QDsoaYpf0bSUWAF/0uzU27d/gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEoryyh Be1uQrMVrrbLBiU9AxGFMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJJn5se1qW6w8XgJTqdBhIXy9Bo4DCj/R4sRoXrG07y+tKwBfd5/lN 9eBd+2LRO/M36ERqUx1A5WSu4wa5AG7FLW/gtBhw0hF3xCof2jBa01uD3V2okceu AJ3wvb1zjh/4Tg/Fb7IkZd+k26OBEX0u4WH3dCr48r8GyDBKE0PDG01bT8NhClQ4 I0qA1fXAtBdBopuwWdWog0LkyU26p+R1z3tNBypHFCO8zOXEnqWJHs7jQh9Smgrz IlfkU33Stb6xYaBuiB9FngBr22FaBVmzJy52fgoCoU3ZDb2OJVyNC6WovU+H5j+Y MTKZUhnuT94io6+PUa6LA4wRiYhknn1K -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:25 2025 by rpki-client