$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: pclxyRKwVGcbG0u/nkbuOU7n12upEc0yDz8AAmFGYOo= Subject key identifier: 5E:C8:7C:56:AA:79:B9:8A:BA:BB:82:54:2F:8D:40:63:5C:7E:9E:E3 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 01BE Signing time: Sat 23 Aug 2025 03:11:11 +0000 Manifest this update: Sat 23 Aug 2025 03:11:11 +0000 Manifest next update: Sat 30 Aug 2025 03:11:11 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: 4Yg7FAdAqGvkPO4+/r9F7htUFPli4DxjTbFlHPJ7/PI=) 2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: pVr+bUV7osuNpKcdEe2SU8B4kCWvORQSGGyqBngWkWY=) 3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: ou5M00utddUa9B9T2ZjIX4AhXtQUSSATyN+Uf1fiHwE=) 4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: Aug 23 03:11:11 2025 GMT Not After : Aug 30 03:11:11 2025 GMT Subject: CN=68a9314f-2248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:87:9f:96:7d:52:88:c8:f4:32:5e:cf:24: 2f:8b:05:80:05:58:f0:b6:de:1e:2c:51:9e:79:74: 3a:19:1a:8c:06:b5:eb:a8:80:59:3b:1f:01:5a:86: 60:d9:f2:b8:65:34:50:fd:ff:f9:7d:41:04:7e:b4: 7f:b5:6e:d6:69:0c:f2:ac:e3:43:df:57:20:77:76: ca:7d:1a:58:a3:1a:23:dd:c1:9f:96:f5:3f:a1:ba: 9c:c2:e6:6e:64:72:7c:71:1e:d4:d2:09:72:9f:fe: 9f:80:71:34:c9:e0:03:ec:3a:6f:39:cb:88:56:0d: 51:be:a0:4a:78:49:0b:92:a0:1e:b8:41:8f:c1:bb: 20:6c:d2:0c:0d:2b:e1:16:b0:c5:f3:a4:6a:88:d2: b8:62:f4:8c:0e:bb:1c:c1:c5:6b:3f:73:82:55:67: b2:72:75:f8:dc:8a:d9:d9:75:0d:e9:06:30:a6:9f: 07:e4:92:4f:85:a5:ef:a5:eb:9d:fd:75:a6:58:9c: 09:59:25:b7:4e:19:32:b4:16:89:ea:fc:d4:9b:70: cf:3a:81:ec:de:f5:5f:48:b4:3c:a4:4c:e8:a5:f2: b8:24:ed:67:30:e1:ab:e5:b6:3f:96:58:39:23:1f: 67:6e:08:7c:f3:a0:2f:32:2d:5b:1b:b6:45:db:1d: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C8:7C:56:AA:79:B9:8A:BA:BB:82:54:2F:8D:40:63:5C:7E:9E:E3 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ca:38:03:3a:8a:b9:32:e7:a6:0f:5b:6d:e0:bd:a5:a3:9a: 8a:95:c8:a9:e9:6e:e9:87:f0:79:e5:4f:94:ef:1e:d9:99:c7: 69:94:c9:2a:39:ba:0f:a0:d1:53:98:b4:31:af:a1:15:2e:b6: a5:a8:22:fd:33:20:ab:40:61:32:c9:41:a4:db:aa:e3:76:58: d1:20:aa:3d:3a:7a:b5:60:90:89:29:1c:0d:dd:69:12:f6:35: cc:c0:1a:b8:f5:0e:6c:49:47:89:8f:40:6a:3d:f9:4d:6c:98: 80:3f:28:0d:fc:b1:6d:b9:cf:82:e1:8b:c1:83:04:f5:d6:d8: 32:72:89:9d:40:69:2d:a4:8f:93:f0:dc:c3:aa:72:84:e3:59: 52:73:18:fe:b6:18:e9:2f:bc:73:63:e1:db:bd:f3:19:2d:26: 55:dc:31:16:02:e0:23:d8:94:a2:3f:97:ad:36:8d:92:b8:02: 00:77:ee:8c:70:34:5d:a8:62:16:87:b5:67:c8:30:8f:98:c1: 1e:e0:fc:ba:68:22:cb:6e:09:03:61:05:60:45:b7:2d:0d:e5: 49:73:fa:7b:e5:cb:a5:47:86:d5:00:a3:ce:40:39:42:65:1e: 3e:d0:3a:0a:23:c8:21:c2:53:55:bd:e4:9d:2f:b5:87:bb:7d: 4a:48:f6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjUwODIzMDMxMTExWhcNMjUwODMwMDMxMTExWjAYMRYwFAYD VQQDEw02OGE5MzE0Zi0yMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWWHn5Z9UojI9DJezyQviwWABVjwtt4eLFGeeXQ6GRqMBrXrqIBZOx8BWoZg 2fK4ZTRQ/f/5fUEEfrR/tW7WaQzyrOND31cgd3bKfRpYoxoj3cGflvU/obqcwuZu ZHJ8cR7U0glyn/6fgHE0yeAD7DpvOcuIVg1RvqBKeEkLkqAeuEGPwbsgbNIMDSvh FrDF86RqiNK4YvSMDrscwcVrP3OCVWeycnX43IrZ2XUN6QYwpp8H5JJPhaXvpeud /XWmWJwJWSW3ThkytBaJ6vzUm3DPOoHs3vVfSLQ8pEzopfK4JO1nMOGr5bY/llg5 Ix9nbgh886AvMi1bG7ZF2x0QYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7IfFaq ebmKuruCVC+NQGNcfp7jMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApyjgDOoq5MuemD1tt4L2lo5qKlcip6W7ph/B55U+U7x7ZmcdplMkq OboPoNFTmLQxr6EVLralqCL9MyCrQGEyyUGk26rjdljRIKo9Onq1YJCJKRwN3WkS 9jXMwBq49Q5sSUeJj0BqPflNbJiAPygN/LFtuc+C4YvBgwT11tgycomdQGktpI+T 8NzDqnKE41lScxj+thjpL7xzY+HbvfMZLSZV3DEWAuAj2JSiP5etNo2SuAIAd+6M cDRdqGIWh7VnyDCPmMEe4Py6aCLLbgkDYQVgRbctDeVJc/p75culR4bVAKPOQDlC ZR4+0DoKI8ghwlNVveSdL7WHu31KSPbl -----END CERTIFICATE-----Generated at Sat Aug 23 10:55:17 2025 by rpki-client