$ rpki-client -vvf rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft File: k_rViPOepYxliN36F70Nb856YGo.mft (raw, json) Hash identifier: BaAnKG3flVfp0XRFPXQRXpjDchW99+DoTp7VcPJBcCc= Subject key identifier: C9:12:63:EA:2E:69:D2:56:4F:27:77:6F:D0:FE:46:A3:F1:E7:53:EA Authority key identifier: 93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A Certificate issuer: /CN=A917F5F0/serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft Manifest number: 0833 Signing time: Wed 20 Aug 2025 20:49:53 +0000 Manifest this update: Wed 20 Aug 2025 20:49:52 +0000 Manifest next update: Wed 27 Aug 2025 20:49:52 +0000 Files and hashes: 1: k_rViPOepYxliN36F70Nb856YGo.crl (hash: CE+2LjLKyoFvQm+t1amxrO7hWbLWdOIoLuVpG/+4flk=) 2: 4C89E536DC6311EA8C998087C4F9AE02.roa (hash: nq8qpRsk9rXbJOHGglWhSt6QeR+0FuC7rTR0xPKJN7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F5F0, serialNumber=93FAD588F39EA58C6588DDFA17BD0D6FCE7A606A Validity Not Before: Aug 20 20:49:52 2025 GMT Not After : Aug 27 20:49:52 2025 GMT Subject: CN=68a634f0-8570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c9:d5:58:39:14:35:74:ba:48:eb:c6:64:ab: 37:55:d1:4d:a5:aa:50:26:ba:96:9c:83:e0:74:00: 98:22:86:4a:65:33:16:27:d1:4a:35:d4:f3:4b:8a: 0b:ba:79:7f:d9:bc:09:f2:3b:c7:8d:42:b9:70:44: ed:6b:b1:29:c7:43:f8:62:90:af:c7:5e:8b:fd:25: 2f:b4:bd:d4:62:d5:c4:f6:a0:00:f0:b3:97:85:1f: ae:e1:b8:43:06:12:d9:9e:24:36:94:82:69:70:66: f0:12:10:c3:fc:cc:04:9e:5a:c6:10:1f:59:1d:2a: 01:4e:f6:c8:8e:b1:3e:f9:d8:c9:29:8e:5c:3d:cb: 8e:fe:fd:dd:1f:ef:39:9c:ea:ba:6f:99:d3:64:80: 17:8e:db:e7:7b:ce:31:00:ba:f1:8f:45:8c:73:38: 76:97:f9:f1:d4:af:6a:03:55:f6:fb:f1:52:7e:9f: fb:b4:ea:e1:70:5d:b5:f0:96:51:67:00:55:35:82: a3:82:b1:ad:50:06:87:47:6a:ef:11:70:b8:00:88: dd:e9:25:f2:34:35:05:00:0a:5f:e3:bc:9e:10:db: 7e:cf:4a:86:36:e4:f0:5d:e9:36:26:02:69:78:3e: f5:12:87:64:fd:12:e1:86:21:b8:87:79:df:0e:67: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:12:63:EA:2E:69:D2:56:4F:27:77:6F:D0:FE:46:A3:F1:E7:53:EA X509v3 Authority Key Identifier: keyid:93:FA:D5:88:F3:9E:A5:8C:65:88:DD:FA:17:BD:0D:6F:CE:7A:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_rViPOepYxliN36F70Nb856YGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F5F0/709F97A6DC6111EABCA4CA84C4F9AE02/k_rViPOepYxliN36F70Nb856YGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f8:e7:23:06:7b:f0:fc:96:5f:94:92:b8:97:f4:f1:96:a0: 5f:85:a5:df:20:91:1d:25:d3:d5:dc:7c:df:89:69:46:2e:4a: 0c:92:6a:26:03:95:2f:3a:4c:6f:17:b7:b2:50:ae:df:0e:7e: 1f:21:98:9f:d6:d2:a7:de:bb:1a:10:de:dd:d6:22:d7:5d:73: 7a:71:e0:48:44:73:a6:d8:dc:c6:ad:98:dd:1b:2e:a6:c6:b5: 46:fe:3d:05:27:ab:66:9b:65:36:4f:b4:63:f2:27:49:71:5c: 1a:d0:0a:cd:be:7c:1c:2c:50:e1:65:3b:e8:4b:eb:22:47:d6: 3f:05:2a:95:b6:b7:81:58:2e:2e:e0:db:b8:63:2f:55:3f:cc: a7:81:93:f9:99:46:15:55:94:78:74:19:03:08:59:c3:70:57: b7:2d:42:fc:35:db:9a:9e:36:b4:fa:c2:25:2d:7c:0b:7a:20: 10:31:01:f3:01:26:38:d4:cf:a9:5e:0e:01:84:72:d8:0a:08: f2:7d:e6:cc:3f:9e:79:de:31:62:84:71:2a:fd:00:7d:92:76: d2:04:3a:3a:f9:43:b4:6e:01:e6:78:8a:fd:9e:17:04:da:de: 96:6a:5b:d7:d6:c7:77:9c:92:c5:b8:6c:28:c9:73:94:ca:44: d8:cc:46:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y1RjAxMTAvBgNVBAUTKDkzRkFENTg4RjM5RUE1OEM2NTg4RERGQTE3QkQwRDZG Q0U3QTYwNkEwHhcNMjUwODIwMjA0OTUyWhcNMjUwODI3MjA0OTUyWjAYMRYwFAYD VQQDEw02OGE2MzRmMC04NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98nVWDkUNXS6SOvGZKs3VdFNpapQJrqWnIPgdACYIoZKZTMWJ9FKNdTzS4oL unl/2bwJ8jvHjUK5cETta7Epx0P4YpCvx16L/SUvtL3UYtXE9qAA8LOXhR+u4bhD BhLZniQ2lIJpcGbwEhDD/MwEnlrGEB9ZHSoBTvbIjrE++djJKY5cPcuO/v3dH+85 nOq6b5nTZIAXjtvne84xALrxj0WMczh2l/nx1K9qA1X2+/FSfp/7tOrhcF218JZR ZwBVNYKjgrGtUAaHR2rvEXC4AIjd6SXyNDUFAApf47yeENt+z0qGNuTwXek2JgJp eD71Eodk/RLhhiG4h3nfDmdOwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkSY+ou adJWTyd3b9D+RqPx51PqMB8GA1UdIwQYMBaAFJP61YjznqWMZYjd+he9DW/OemBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjVGMC83MDlGOTdBNkRD NjExMUVBQkNBNENBODRDNEY5QUUwMi9rX3JWaVBPZXBZeGxpTjM2RjcwTmI4NTZZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfclZpUE9lcFl4bGlOMzZGNzBOYjg1NllHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjVGMC83MDlGOTdBNkRDNjExMUVBQkNBNENBODRDNEY5QUUwMi9rX3JWaVBPZXBZ eGxpTjM2RjcwTmI4NTZZR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe+OcjBnvw/JZflJK4l/TxlqBfhaXfIJEdJdPV3HzfiWlGLkoMkmom A5UvOkxvF7eyUK7fDn4fIZif1tKn3rsaEN7d1iLXXXN6ceBIRHOm2NzGrZjdGy6m xrVG/j0FJ6tmm2U2T7Rj8idJcVwa0ArNvnwcLFDhZTvoS+siR9Y/BSqVtreBWC4u 4Nu4Yy9VP8yngZP5mUYVVZR4dBkDCFnDcFe3LUL8Nduanja0+sIlLXwLeiAQMQHz ASY41M+pXg4BhHLYCgjyfebMP5553jFihHEq/QB9knbSBDo6+UO0bgHmeIr9nhcE 2t6WalvX1sd3nJLFuGwoyXOUykTYzEYT -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:49 2025 by rpki-client