$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: GB2ee1CEqdqWoSsoYj0iMR/K/7kOXTdnOwvsMVEDLHs= Subject key identifier: 9B:5A:45:43:17:FE:14:72:DB:07:E5:C2:43:B1:06:78:FA:42:96:C0 Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 0310 Signing time: Sat 23 Aug 2025 01:31:20 +0000 Manifest this update: Sat 23 Aug 2025 01:31:20 +0000 Manifest next update: Sat 30 Aug 2025 01:31:20 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: 8sB+2ggehMMz17jBK1R3JkCTXhPEfR8vK4enr4nYYUo=) 2: 3824E928764711F0980D9877C4F9AE02.roa (hash: JnAHd4uMfLRQkVeB0VbNVy59nSthnoANMmYI9+KMBss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: Aug 23 01:31:20 2025 GMT Not After : Aug 30 01:31:20 2025 GMT Subject: CN=68a919e8-b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:13:a9:e7:12:0a:8d:03:1c:f3:88:4e:d0: b6:9d:b1:f1:e8:0f:07:9e:d0:e3:bd:39:22:08:1a: 2f:84:85:57:f2:c4:ee:bc:99:c5:42:9d:26:e8:9e: 06:92:6e:1d:e9:cc:cc:e2:6f:c1:ed:27:cd:72:d9: b5:ea:65:90:9e:3f:15:52:d4:ca:d6:e1:36:29:83: 4c:b2:d9:79:18:43:cf:a9:8a:52:77:56:20:10:1b: 47:c4:7f:08:30:bd:75:ee:06:b6:b8:fe:a2:f2:a4: e7:bd:44:60:47:71:59:d0:0f:d9:81:59:51:79:ba: 83:ec:19:ce:b0:40:c5:5d:e9:27:13:0b:d3:d4:c1: 24:48:67:81:de:c7:d5:4c:30:ab:48:f1:86:b9:78: 43:8d:c1:9d:c6:05:57:31:28:d8:15:79:37:e0:17: f0:02:f3:1e:5a:71:3a:c5:c8:b3:0d:74:c8:de:d9: d2:25:5f:e2:9d:96:df:c8:8f:7a:55:36:4b:eb:98: 93:61:29:c9:ab:31:68:60:2a:b6:0e:e7:28:b6:af: 9b:a2:a3:0f:9e:44:d5:cf:90:be:5d:d1:51:54:ab: 23:43:69:cc:cb:0c:09:c2:96:b4:c3:11:f3:7e:c9: 2a:9b:a4:ec:d3:34:c6:b3:11:0d:b4:7f:68:74:43: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5A:45:43:17:FE:14:72:DB:07:E5:C2:43:B1:06:78:FA:42:96:C0 X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:58:3c:ad:68:fa:79:03:eb:7a:5f:8e:ec:6f:16:e5:6a:87: d5:26:6d:25:97:0a:cb:48:78:09:4d:48:e6:26:07:79:6b:fe: 41:0d:20:83:10:28:14:ad:10:52:01:2e:bb:1d:3e:bd:d3:3a: 37:12:4e:e0:63:a7:1c:d0:2e:16:a1:d7:c4:8e:ba:d4:f6:1d: f9:ea:1c:88:e6:99:d5:ca:fe:15:70:3f:ca:28:4f:a5:26:f0: 02:dc:b8:b9:8a:8f:8d:9f:1b:a2:29:d5:80:9e:6a:68:35:03: f5:26:54:bb:51:07:1b:b1:b1:0e:96:cd:52:db:45:91:ab:48: 20:80:75:a8:fb:69:fb:69:4d:0e:72:10:6e:c5:6e:1b:c5:8c: 2d:21:4d:45:05:b4:59:e0:2c:70:f3:cc:83:21:1f:c0:be:42: ab:e1:60:73:cc:4b:30:36:c5:7e:05:a2:c9:a8:f4:42:50:29: 30:1e:46:a9:da:56:58:7e:f2:29:09:c7:4c:bc:43:93:89:ce: ad:5d:1c:99:d7:be:53:a8:96:ef:47:ce:0f:42:9c:e0:a9:2a: ea:46:19:f5:71:40:c8:a2:af:6c:d7:71:c6:6d:d1:44:0e:d2: e4:82:ac:92:6f:55:ae:16:d3:e6:e4:69:ef:be:ed:db:c0:ed: e1:37:ad:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjUwODIzMDEzMTIwWhcNMjUwODMwMDEzMTIwWjAYMRYwFAYD VQQDEw02OGE5MTllOC1iNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TITqecSCo0DHPOITtC2nbHx6A8HntDjvTkiCBovhIVX8sTuvJnFQp0m6J4G km4d6czM4m/B7SfNctm16mWQnj8VUtTK1uE2KYNMstl5GEPPqYpSd1YgEBtHxH8I ML117ga2uP6i8qTnvURgR3FZ0A/ZgVlRebqD7BnOsEDFXeknEwvT1MEkSGeB3sfV TDCrSPGGuXhDjcGdxgVXMSjYFXk34BfwAvMeWnE6xcizDXTI3tnSJV/inZbfyI96 VTZL65iTYSnJqzFoYCq2Ducotq+boqMPnkTVz5C+XdFRVKsjQ2nMywwJwpa0wxHz fskqm6Ts0zTGsxENtH9odEPrLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtaRUMX /hRy2wflwkOxBnj6QpbAMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFWDytaPp5A+t6X47sbxblaofVJm0llwrLSHgJTUjmJgd5a/5BDSCD ECgUrRBSAS67HT690zo3Ek7gY6cc0C4WodfEjrrU9h356hyI5pnVyv4VcD/KKE+l JvAC3Li5io+NnxuiKdWAnmpoNQP1JlS7UQcbsbEOls1S20WRq0gggHWo+2n7aU0O chBuxW4bxYwtIU1FBbRZ4Cxw88yDIR/AvkKr4WBzzEswNsV+BaLJqPRCUCkwHkap 2lZYfvIpCcdMvEOTic6tXRyZ175TqJbvR84PQpzgqSrqRhn1cUDIoq9s13HGbdFE DtLkgqySb1WuFtPm5Gnvvu3bwO3hN63k -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:44 2025 by rpki-client