$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: pZKvOAx8kVhSmwD8fKMSzJnKFtjDM52fYnknFu/GsDM= Subject key identifier: 8A:3B:4D:37:09:FE:3C:C3:67:A6:80:60:FC:9F:55:64:07:80:56:77 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 0147 Signing time: Sat 23 Aug 2025 04:26:37 +0000 Manifest this update: Sat 23 Aug 2025 04:26:37 +0000 Manifest next update: Sat 30 Aug 2025 04:26:37 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: F3A12nprkkUISbiESbBb/ZAeIWx6kv+jdD10H1wZux4=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Aug 23 04:26:37 2025 GMT Not After : Aug 30 04:26:37 2025 GMT Subject: CN=68a942fd-0fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d4:f2:1a:ac:27:b2:54:2a:44:a2:1a:ad:28: bd:f6:39:b5:d6:47:d0:f1:37:6d:32:8b:64:d6:1e: 9a:8e:2e:cb:08:8c:ba:82:d8:3d:6c:46:be:7d:63: 0f:81:87:b4:41:07:b8:9a:29:36:aa:bc:70:dd:b5: 70:c9:a5:0e:a4:72:04:17:00:2e:b9:00:3f:87:1a: c6:7e:51:78:bf:9f:34:68:2e:b8:f8:c4:b0:55:69: 12:7c:40:b3:12:db:d4:15:12:b2:6a:7a:6e:32:5a: bd:cf:24:7c:f5:71:fc:de:22:ef:df:69:a6:66:c9: 0d:59:a6:02:c2:35:c8:2b:00:50:23:87:a9:72:2e: 85:70:ae:48:ca:19:31:a0:d7:90:87:47:1f:4f:ff: 6e:92:be:f5:2c:2f:13:06:7f:19:7c:7b:2b:30:b4: dd:55:5d:26:8d:48:ac:88:c8:44:7d:bc:94:2a:d7: 4d:10:a1:55:15:a3:c9:49:b3:79:52:38:3f:b5:68: ab:fb:ac:16:37:3e:1a:8f:b3:c7:4a:8b:c3:33:77: db:01:98:b8:74:02:ea:1e:7d:62:63:7e:17:b6:c4: 82:cb:21:86:1c:c2:ac:95:a6:fb:ec:70:0f:ad:04: 1b:4b:21:84:20:22:a7:6e:dd:ea:ef:8c:df:9f:52: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:4D:37:09:FE:3C:C3:67:A6:80:60:FC:9F:55:64:07:80:56:77 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:01:89:fd:43:c2:da:1d:c5:fa:5c:07:87:d7:45:23:e5:75: 47:83:ee:94:5f:66:b2:ee:b6:47:3d:3a:85:b9:90:4f:1b:88: 63:7c:d7:a0:af:03:79:fd:7b:46:a8:e1:25:95:cb:14:b0:3a: d6:80:d7:af:26:a6:76:30:a2:28:20:b9:f0:56:b9:9a:a6:9a: 74:4b:93:30:a0:32:40:9f:70:7e:8f:bc:b8:ed:12:be:fa:2b: 7b:95:3f:51:b6:4e:0a:04:fd:34:61:82:4c:e9:36:1d:c7:b3: a7:04:9a:d2:97:40:22:3a:f3:c2:02:67:ed:73:15:92:3b:4f: f1:6a:df:8a:89:8a:06:21:d7:4c:1f:c7:23:8b:8f:d8:8d:be: 26:93:0a:51:c5:7b:e8:cd:24:03:25:ed:92:e5:cc:f3:f2:a2: fa:a5:33:7a:06:fa:21:28:c8:ca:be:a6:39:e6:ea:58:c4:b2: c8:07:fb:05:59:ad:35:e1:46:73:90:75:7e:2e:03:d2:ad:af: f0:ac:1c:73:86:97:d3:e1:2e:0e:a7:40:8e:91:0d:5e:2d:4e: b8:28:35:98:a1:ae:c3:0a:b9:19:9c:7c:58:63:22:75:fc:e4: b5:74:5d:24:3d:36:cc:f3:90:81:9e:b6:e0:15:f8:8d:02:07: 09:68:ac:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwODIzMDQyNjM3WhcNMjUwODMwMDQyNjM3WjAYMRYwFAYD VQQDEw02OGE5NDJmZC0wZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNTyGqwnslQqRKIarSi99jm11kfQ8TdtMotk1h6aji7LCIy6gtg9bEa+fWMP gYe0QQe4mik2qrxw3bVwyaUOpHIEFwAuuQA/hxrGflF4v580aC64+MSwVWkSfECz EtvUFRKyanpuMlq9zyR89XH83iLv32mmZskNWaYCwjXIKwBQI4epci6FcK5Iyhkx oNeQh0cfT/9ukr71LC8TBn8ZfHsrMLTdVV0mjUisiMhEfbyUKtdNEKFVFaPJSbN5 Ujg/tWir+6wWNz4aj7PHSovDM3fbAZi4dALqHn1iY34XtsSCyyGGHMKslab77HAP rQQbSyGEICKnbt3q74zfn1KRfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo7TTcJ /jzDZ6aAYPyfVWQHgFZ3MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsAYn9Q8LaHcX6XAeH10Uj5XVHg+6UX2ay7rZHPTqFuZBPG4hjfNeg rwN5/XtGqOEllcsUsDrWgNevJqZ2MKIoILnwVrmappp0S5MwoDJAn3B+j7y47RK+ +it7lT9Rtk4KBP00YYJM6TYdx7OnBJrSl0AiOvPCAmftcxWSO0/xat+KiYoGIddM H8cji4/Yjb4mkwpRxXvozSQDJe2S5czz8qL6pTN6BvohKMjKvqY55upYxLLIB/sF Wa014UZzkHV+LgPSra/wrBxzhpfT4S4Op0COkQ1eLU64KDWYoa7DCrkZnHxYYyJ1 /OS1dF0kPTbM85CBnrbgFfiNAgcJaKyf -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:34 2025 by rpki-client