$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: 912uBvjpyy0DyeXOQKj3Vln/HmspJaa/AZdSpjbIbus= Subject key identifier: 17:C7:42:98:AA:6B:3A:4F:A3:5A:85:D8:5E:5A:39:2B:0C:CA:2F:34 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E2E Signing time: Fri 22 Aug 2025 17:55:00 +0000 Manifest this update: Fri 22 Aug 2025 17:54:59 +0000 Manifest next update: Fri 29 Aug 2025 17:54:59 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: crFBzc7vH94Qm4S5tPI1GMMWEY8wjrXomU7NxqvC3Es=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: SWjsz2ZRwBkKRs3lCM8x1HuP6oZ8eAnIrMziwftZzas=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: Uzh2H0WzqUhAdOejeRuGcUfDdr3mQiiZM4aNaZoNZlE=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: /6vaZiCWJmBFNJgiNOI49M1x4iJoUHYLtfB+8hNudBk=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E9L/TTXk+Px8nGO4KJnm/ouPNchL+BTaTG1X0znr2Rg=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: EwzDgqgyP+42whL7/ceKehIKyd0tgvQ5kUq+8PMWfXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3664 (0xe50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Aug 22 17:54:59 2025 GMT Not After : Aug 29 17:54:59 2025 GMT Subject: CN=68a8aef4-f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b6:4e:80:ae:c6:b8:21:3f:30:0c:94:70:7c: da:b4:fc:9e:7c:7a:58:5f:7b:b2:6c:c2:53:82:44: b4:21:03:87:0b:e3:17:5b:bf:a6:05:c5:83:6c:5f: cb:5d:49:df:9c:61:e2:97:39:62:b1:bc:11:2d:5d: 6a:fd:c9:a2:fd:fd:de:76:64:f4:8d:6e:dd:1d:41: 12:79:ba:4a:1b:57:8a:5f:b3:cc:f0:a3:50:01:e5: 7e:aa:10:cf:2b:99:5a:54:3f:2a:3f:26:48:6d:44: d6:bb:7d:eb:77:73:cb:c5:b7:2c:44:4e:b0:c2:5c: 0b:6e:85:5b:a3:eb:18:b8:8d:09:ed:fe:00:ff:80: 3d:4d:aa:2a:e2:82:22:3d:25:3f:2e:01:ca:90:72: 1c:a6:7c:d7:a1:6d:f3:ca:f1:96:04:57:b7:74:4c: d6:0e:7c:da:77:be:15:6d:41:6e:bc:5a:ff:ae:fb: 5c:7b:a5:28:60:1b:cf:b9:4e:7a:aa:1e:33:d4:db: 10:64:68:7e:d1:f4:52:9c:51:a5:26:d2:ae:1f:d9: 2f:1a:42:5f:e3:c7:17:4c:e6:03:2f:ff:7d:15:7c: da:33:2d:76:80:5a:ea:ce:cd:43:59:c4:6b:46:48: ec:3b:c3:2c:0b:ac:f2:cc:9c:95:7a:6b:59:e3:89: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C7:42:98:AA:6B:3A:4F:A3:5A:85:D8:5E:5A:39:2B:0C:CA:2F:34 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:30:fc:3a:5b:67:a4:3a:b2:6f:fe:8b:fa:11:c0:c4:9e:f5: b3:5b:35:5e:be:5c:d3:5a:5e:b8:83:d2:65:59:ed:a1:e6:1c: eb:39:f6:8e:1a:92:20:ba:ac:07:81:41:2a:88:18:76:3f:fb: 33:7c:f7:54:2e:5e:3d:18:34:07:69:01:3e:1c:d8:ef:40:12: bb:27:10:15:91:6e:29:6f:32:45:96:51:a5:96:e0:9c:23:71: ca:2f:fb:ce:fb:2a:25:4e:0e:5e:8b:e7:a3:63:11:b5:1d:97: dc:83:32:b2:d6:b3:84:e8:bd:7d:ef:12:8f:a9:af:53:61:7a: 8b:4d:a1:4a:d6:c2:fa:13:2b:57:9e:ce:99:f5:d8:df:b6:4f: 34:24:63:c3:dc:dc:a6:e0:ad:37:07:17:7c:72:46:ac:7a:11: 24:34:e0:4f:74:77:b2:e9:bd:1d:85:fd:2e:a1:2f:d6:8b:7d: d0:62:75:da:ab:c4:2b:1b:1b:e9:bf:64:28:98:2a:ed:40:83: 78:6f:e0:69:f5:c1:45:93:5d:20:db:07:b3:b4:44:70:c4:dc: 25:80:48:e8:e4:81:aa:9f:1d:4b:db:53:34:11:a4:b5:df:8d: e4:5e:2c:23:c6:51:30:f8:7b:bd:67:01:c0:00:a5:42:6b:2a: 23:a9:9e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUwODIyMTc1NDU5WhcNMjUwODI5MTc1NDU5WjAYMRYwFAYD VQQDEw02OGE4YWVmNC1mNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87ZOgK7GuCE/MAyUcHzatPyefHpYX3uybMJTgkS0IQOHC+MXW7+mBcWDbF/L XUnfnGHilzlisbwRLV1q/cmi/f3edmT0jW7dHUESebpKG1eKX7PM8KNQAeV+qhDP K5laVD8qPyZIbUTWu33rd3PLxbcsRE6wwlwLboVbo+sYuI0J7f4A/4A9Taoq4oIi PSU/LgHKkHIcpnzXoW3zyvGWBFe3dEzWDnzad74VbUFuvFr/rvtce6UoYBvPuU56 qh4z1NsQZGh+0fRSnFGlJtKuH9kvGkJf48cXTOYDL/99FXzaMy12gFrqzs1DWcRr RkjsO8MsC6zyzJyVemtZ44lHnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfHQpiq azpPo1qF2F5aOSsMyi80MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClMPw6W2ekOrJv/ov6EcDEnvWzWzVevlzTWl64g9JlWe2h5hzrOfaO GpIguqwHgUEqiBh2P/szfPdULl49GDQHaQE+HNjvQBK7JxAVkW4pbzJFllGlluCc I3HKL/vO+yolTg5ei+ejYxG1HZfcgzKy1rOE6L197xKPqa9TYXqLTaFK1sL6EytX ns6Z9djftk80JGPD3Nym4K03Bxd8ckasehEkNOBPdHey6b0dhf0uoS/Wi33QYnXa q8QrGxvpv2QomCrtQIN4b+Bp9cFFk10g2weztERwxNwlgEjo5IGqnx1L21M0EaS1 343kXiwjxlEw+Hu9ZwHAAKVCayojqZ79 -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:21 2025 by rpki-client