$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: DZ5YPbz3B9iLtPl4nQ13asnX2c/pWHxZPsGQy3iw1j0= Subject key identifier: 05:73:4C:7C:FD:3D:E7:EC:C9:BA:85:50:18:33:E7:BB:9C:CE:C6:F5 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01BC Signing time: Sat 23 Aug 2025 03:11:03 +0000 Manifest this update: Sat 23 Aug 2025 03:11:02 +0000 Manifest next update: Sat 30 Aug 2025 03:11:02 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: WF4pkdEczj7MXRB4f5PFhmGhnexBXBhwdJ/juAUGB7s=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Aug 23 03:11:02 2025 GMT Not After : Aug 30 03:11:02 2025 GMT Subject: CN=68a93147-cb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:54:24:92:6d:3d:27:40:ab:32:73:81:b3: df:9e:91:9b:39:59:40:02:16:bd:b5:81:d3:b8:80: 53:16:6c:04:1a:da:45:f6:28:f4:1a:9a:0e:01:47: 3c:52:c9:49:08:24:5f:56:1a:6d:96:68:75:8e:91: 6a:28:81:a0:27:34:22:70:8f:cf:12:5b:f0:96:f8: 69:43:2d:97:63:5f:d4:92:ab:7b:b1:77:1d:1b:98: b5:ed:b6:0a:38:91:83:49:d0:8e:6f:7f:0f:c5:f7: fa:8b:d0:98:9b:44:54:24:58:ed:37:19:31:74:db: ac:36:d5:79:d9:ca:7d:26:da:65:7d:17:18:ee:a0: 2e:d6:8e:2d:ef:fd:1d:40:a4:27:d7:43:a8:b0:15: 36:23:d9:ba:66:fd:0e:28:75:19:67:d2:3f:26:58: 8d:82:22:38:92:f7:2b:08:bf:d9:df:6f:41:1e:0e: 7a:3c:43:3e:e1:45:73:2b:57:89:2f:8a:f4:da:74: f2:6e:23:f0:fe:19:16:25:5a:71:b5:81:43:b4:ed: 37:80:47:fd:36:61:58:0c:b4:d4:5f:69:f6:fe:c1: a6:87:a2:37:13:51:88:b2:ed:be:fc:c7:fd:17:03: 84:70:ef:42:19:e2:ed:d1:42:bb:36:53:b7:f8:23: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:4C:7C:FD:3D:E7:EC:C9:BA:85:50:18:33:E7:BB:9C:CE:C6:F5 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:24:ac:29:df:71:63:59:f8:e9:b4:b8:29:ae:f5:69:86:f7: 2c:30:9b:06:60:b4:af:38:84:f2:56:ea:51:e7:0e:ef:d9:94: 5e:7e:b6:8b:9c:5c:ba:0d:c7:0e:53:f3:05:c8:ec:49:ca:5e: a8:f9:ed:c3:c1:19:4c:56:2a:10:25:a4:e3:3d:fc:c7:b6:11: 53:5d:99:4d:7e:c8:3c:07:d9:e6:18:de:e8:1e:01:3c:57:83: 8f:60:1d:66:3e:51:db:20:1c:c3:8a:32:71:f2:d4:13:01:8d: f6:30:7e:0f:fa:c1:01:9d:1a:6a:be:18:10:44:6f:93:02:3e: bf:e6:61:1c:4e:02:20:49:86:76:c7:74:97:47:0e:b5:cc:e1: 4e:be:bf:46:11:f7:0c:98:f6:23:11:0c:cb:4c:90:56:9f:ef: 89:85:d1:17:b7:1c:34:d0:1c:9d:09:74:95:37:05:15:98:c9: 5c:13:c1:f6:34:91:f4:af:1c:f1:b1:4d:b0:67:be:20:41:09: 16:d0:cb:e2:f1:09:3e:e0:f9:34:2e:1e:f6:09:b1:60:ef:fe: 8c:2e:ce:a7:f8:1b:47:a5:a9:4d:7a:90:39:b7:fa:7b:38:c6: 0b:0f:66:2f:11:28:59:aa:18:10:9a:d4:35:aa:ee:00:d1:3d: 25:ca:33:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwODIzMDMxMTAyWhcNMjUwODMwMDMxMTAyWjAYMRYwFAYD VQQDEw02OGE5MzE0Ny1jYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GdUJJJtPSdAqzJzgbPfnpGbOVlAAha9tYHTuIBTFmwEGtpF9ij0GpoOAUc8 UslJCCRfVhptlmh1jpFqKIGgJzQicI/PElvwlvhpQy2XY1/Ukqt7sXcdG5i17bYK OJGDSdCOb38Pxff6i9CYm0RUJFjtNxkxdNusNtV52cp9JtplfRcY7qAu1o4t7/0d QKQn10OosBU2I9m6Zv0OKHUZZ9I/JliNgiI4kvcrCL/Z329BHg56PEM+4UVzK1eJ L4r02nTybiPw/hkWJVpxtYFDtO03gEf9NmFYDLTUX2n2/sGmh6I3E1GIsu2+/Mf9 FwOEcO9CGeLt0UK7NlO3+COe4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVzTHz9 PefsybqFUBgz57uczsb1MB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClJKwp33FjWfjptLgprvVphvcsMJsGYLSvOITyVupR5w7v2ZRefraL nFy6DccOU/MFyOxJyl6o+e3DwRlMVioQJaTjPfzHthFTXZlNfsg8B9nmGN7oHgE8 V4OPYB1mPlHbIBzDijJx8tQTAY32MH4P+sEBnRpqvhgQRG+TAj6/5mEcTgIgSYZ2 x3SXRw61zOFOvr9GEfcMmPYjEQzLTJBWn++JhdEXtxw00BydCXSVNwUVmMlcE8H2 NJH0rxzxsU2wZ74gQQkW0Mvi8Qk+4Pk0Lh72CbFg7/6MLs6n+BtHpalNepA5t/p7 OMYLD2YvEShZqhgQmtQ1qu4A0T0lyjN2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:47 2025 by rpki-client