$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: MPzhydaiwKbigZFwsJ8temY/oB+FmHjB/44caKae6B8= Subject key identifier: 38:47:74:82:FD:42:1F:9F:B4:C2:F6:57:0E:B5:9A:7E:4E:AB:64:98 Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 34AE Signing time: Fri 22 Aug 2025 14:50:58 +0000 Manifest this update: Fri 22 Aug 2025 14:50:58 +0000 Manifest next update: Fri 29 Aug 2025 14:50:58 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: RgaPjQLGqVhh0Oc6Zcvt3Gw2CcAMyEemVJL7i33FCgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B, serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Aug 22 14:50:58 2025 GMT Not After : Aug 29 14:50:58 2025 GMT Subject: CN=68a883d2-e5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:ee:fa:29:6d:c2:95:b9:b2:cb:50:fd:a2: b3:19:34:ed:1b:91:ca:91:9d:94:99:7a:00:10:c8: f9:18:40:cf:04:b4:c2:f0:11:87:e8:35:3a:e5:21: 82:e1:0a:2e:d7:da:a8:66:c7:01:84:bb:d7:43:f2: 83:ce:84:d5:5c:5d:cd:f2:60:00:06:cb:9c:f9:25: 89:9c:ba:0f:14:96:91:9c:98:91:0c:d3:00:e6:4f: ce:bb:af:1b:07:c4:16:3c:b8:dc:c5:9e:1a:eb:c4: cf:e4:85:ca:c5:56:73:ce:1d:31:0f:1a:ab:30:22: 08:ce:8f:4d:5c:60:45:c9:48:e4:b3:da:8b:d3:51: f2:03:be:48:f1:fe:e9:a1:81:69:89:e6:a7:a0:a7: 4e:9e:37:aa:e2:03:91:3b:b7:a9:42:1c:cc:4b:7c: 17:c3:db:08:bd:16:c8:33:ff:59:97:59:35:4e:70: aa:ec:9d:56:60:38:29:14:61:7e:70:13:37:35:86: fd:8b:ea:44:7a:bc:73:4e:22:12:f0:5b:1f:fc:03: a0:62:2b:ca:9d:c9:64:fe:4d:b4:aa:15:20:6d:84: 74:db:cf:a2:62:5a:e0:2d:37:02:f3:fc:88:c9:a8: 6f:05:ba:15:df:4b:f9:73:61:c1:1e:19:15:1b:1d: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:47:74:82:FD:42:1F:9F:B4:C2:F6:57:0E:B5:9A:7E:4E:AB:64:98 X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f7:ba:58:74:75:7b:a2:3a:22:1d:d0:91:e0:c9:b3:e1:1d: 66:31:59:6e:04:ab:a5:f3:aa:d6:70:b3:a0:81:22:58:b9:82: f8:89:0c:ce:92:cf:25:4a:d2:9a:b0:23:72:2d:25:c7:a4:29: 53:62:ab:90:74:66:7c:15:fb:32:4a:20:17:65:67:68:0e:63: fa:4d:6c:a0:86:71:fb:bf:40:af:d7:20:59:89:9c:b5:01:ca: 63:38:81:d0:1f:6c:45:0f:9b:d3:89:e4:49:2e:15:6f:10:24: fe:37:82:36:d4:3b:27:67:62:ed:25:65:03:d1:4a:30:14:49: 02:90:23:42:8a:ed:9f:32:05:aa:12:c6:44:56:d2:c7:a9:2c: 62:9c:8b:fe:b8:64:d5:11:a4:aa:01:72:20:be:ac:4b:24:e8: fd:9b:ce:ed:b8:52:50:b0:10:17:22:fd:4c:27:17:7f:29:70: b6:fd:2b:34:3f:a4:6b:08:46:eb:80:94:d6:56:fb:2d:ff:2c: 98:ff:c8:9e:b0:f3:84:12:7d:13:fe:8a:a0:1c:a3:ef:22:ec: f5:ec:45:e6:37:32:a0:ba:b7:90:30:6a:bc:ad:b6:8f:ed:c7: dc:db:ed:97:a5:c8:28:64:d9:5d:c5:11:08:1b:e9:b3:4f:ab: e0:11:4b:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjUwODIyMTQ1MDU4WhcNMjUwODI5MTQ1MDU4WjAYMRYwFAYD VQQDEw02OGE4ODNkMi1lNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAju+iltwpW5sstQ/aKzGTTtG5HKkZ2UmXoAEMj5GEDPBLTC8BGH6DU65SGC 4Qou19qoZscBhLvXQ/KDzoTVXF3N8mAABsuc+SWJnLoPFJaRnJiRDNMA5k/Ou68b B8QWPLjcxZ4a68TP5IXKxVZzzh0xDxqrMCIIzo9NXGBFyUjks9qL01HyA75I8f7p oYFpieanoKdOnjeq4gORO7epQhzMS3wXw9sIvRbIM/9Zl1k1TnCq7J1WYDgpFGF+ cBM3NYb9i+pEerxzTiIS8Fsf/AOgYivKnclk/k20qhUgbYR028+iYlrgLTcC8/yI yahvBboV30v5c2HBHhkVGx36SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhHdIL9 Qh+ftML2Vw61mn5Oq2SYMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ97pYdHV7ojoiHdCR4Mmz4R1mMVluBKul86rWcLOggSJYuYL4iQzO ks8lStKasCNyLSXHpClTYquQdGZ8FfsySiAXZWdoDmP6TWyghnH7v0Cv1yBZiZy1 AcpjOIHQH2xFD5vTieRJLhVvECT+N4I21DsnZ2LtJWUD0UowFEkCkCNCiu2fMgWq EsZEVtLHqSxinIv+uGTVEaSqAXIgvqxLJOj9m87tuFJQsBAXIv1MJxd/KXC2/Ss0 P6RrCEbrgJTWVvst/yyY/8iesPOEEn0T/oqgHKPvIuz17EXmNzKgureQMGq8rbaP 7cfc2+2XpcgoZNldxREIG+mzT6vgEUv2 -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:28 2025 by rpki-client