$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: QSpCY2QAxKr/TzuPM/su3s2WrEqzHOz3QYdeIHoHlBU= Subject key identifier: D4:47:B3:7A:02:F2:E3:92:9F:4F:50:62:94:A2:AD:DA:82:4E:8B:46 Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 103C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 1004 Signing time: Fri 22 Aug 2025 17:38:11 +0000 Manifest this update: Fri 22 Aug 2025 17:38:10 +0000 Manifest next update: Fri 29 Aug 2025 17:38:10 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: eBMZ5spWE/oSxbpLoLC4yg+kudNW/EsYqFua+REVfBo=) 2: 388342E06BB911F089CE7580C4F9AE02.roa (hash: rOVEHU2UU8t52B+8KBLIZbGwXL9rBVgFqwmJKW2YWdA=) 3: AA2BE0CC359B11F08F8F7E4AC4F9AE02.roa (hash: cZwW8tsmFD2xtwPfekSh582VRbEv6Jvu1sqyXeWPy+U=) 4: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4156 (0x103c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Aug 22 17:38:10 2025 GMT Not After : Aug 29 17:38:10 2025 GMT Subject: CN=68a8ab02-e4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:e3:bd:0f:d2:cc:cb:77:37:a9:6e:b9:17: 81:85:90:07:9c:35:df:c1:e7:43:b9:76:d0:63:b5: 94:42:de:b7:4e:ab:9f:a1:02:39:30:df:31:f9:2d: ff:7d:dd:c7:fc:21:22:cc:a0:ff:ef:b7:80:7b:c6: fa:e4:26:21:b6:28:bc:44:34:bd:e3:06:aa:4e:e9: 6d:d3:91:e7:07:2f:e1:cc:30:a5:d3:50:54:c7:ce: f2:6a:9d:ea:27:a4:7f:f7:3a:ce:3c:c7:01:8b:82: 71:1e:3e:dd:c6:ba:b7:5b:8c:74:e2:e5:32:c6:6f: 22:85:08:aa:31:f6:b4:68:eb:a4:5c:5c:7f:0f:04: 4a:ab:23:a1:59:f2:8d:5a:5c:0c:2c:df:9c:2e:ef: d0:f5:e7:2d:f7:f8:39:cd:33:d4:54:89:92:cc:e9: e6:47:7c:99:2d:05:24:08:14:8f:98:6e:62:c2:cc: ab:86:af:6b:d4:df:70:2f:3f:dd:ff:c0:4f:0a:86: 50:d0:71:03:6a:ac:fb:8e:50:be:c5:a0:a5:3b:a7: 70:40:25:51:63:bb:26:3f:db:54:32:fd:0d:a7:52: e3:25:dd:16:1f:fd:aa:60:8e:ab:e7:06:d9:81:04: dd:2a:28:66:b2:36:81:50:be:fa:5c:f2:64:f5:ce: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:47:B3:7A:02:F2:E3:92:9F:4F:50:62:94:A2:AD:DA:82:4E:8B:46 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:aa:78:90:1c:99:22:2b:b5:c7:49:e0:e8:3b:f1:10:1b:90: 09:9e:41:12:b2:c6:ac:77:f6:72:e8:71:96:7e:2c:34:64:5c: 6b:84:a7:5c:a1:9d:ba:4f:65:4b:ac:47:0e:c9:b9:99:83:f0: ad:87:20:e9:43:26:63:35:f4:03:37:e9:50:d7:85:8f:d7:be: d0:d9:99:22:f3:ea:f5:fb:a6:d4:85:7f:6d:f2:20:c3:36:32: 81:b6:e8:08:8d:de:57:00:f7:d4:dc:c7:0a:12:d8:2d:ca:f6: 5e:a0:06:18:3b:c3:47:08:91:5e:2e:1a:72:00:7a:5a:37:16: cb:82:9b:c2:39:c1:bf:7f:06:75:ee:08:4e:54:1e:a5:ee:e8: 49:71:67:0a:a1:9a:bf:a7:4d:e9:19:a1:43:bb:e4:e2:cc:19: e0:55:56:d4:54:a3:d8:4c:cc:fb:e8:51:8e:11:33:b8:ca:30: ab:f1:ff:8e:8e:6c:eb:1b:d5:70:66:1f:97:61:80:cd:92:da: f3:aa:eb:f6:9c:b1:34:37:01:3e:4a:39:ef:10:69:13:d2:a7: 7a:4a:5d:2e:32:e5:d7:43:17:53:84:bf:0d:32:bc:e9:84:5d: 87:ad:31:f1:5c:a7:6a:b3:41:38:5b:39:be:54:a1:9e:51:32: 4a:1f:38:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwODIyMTczODEwWhcNMjUwODI5MTczODEwWjAYMRYwFAYD VQQDEw02OGE4YWIwMi1lNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzrjvQ/SzMt3N6luuReBhZAHnDXfwedDuXbQY7WUQt63TqufoQI5MN8x+S3/ fd3H/CEizKD/77eAe8b65CYhtii8RDS94waqTult05HnBy/hzDCl01BUx87yap3q J6R/9zrOPMcBi4JxHj7dxrq3W4x04uUyxm8ihQiqMfa0aOukXFx/DwRKqyOhWfKN WlwMLN+cLu/Q9ect9/g5zTPUVImSzOnmR3yZLQUkCBSPmG5iwsyrhq9r1N9wLz/d /8BPCoZQ0HEDaqz7jlC+xaClO6dwQCVRY7smP9tUMv0Np1LjJd0WH/2qYI6r5wbZ gQTdKihmsjaBUL76XPJk9c4o4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRHs3oC 8uOSn09QYpSirdqCTotGMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsqniQHJkiK7XHSeDoO/EQG5AJnkESssasd/Zy6HGWfiw0ZFxrhKdc oZ26T2VLrEcOybmZg/CthyDpQyZjNfQDN+lQ14WP177Q2Zki8+r1+6bUhX9t8iDD NjKBtugIjd5XAPfU3McKEtgtyvZeoAYYO8NHCJFeLhpyAHpaNxbLgpvCOcG/fwZ1 7ghOVB6l7uhJcWcKoZq/p03pGaFDu+TizBngVVbUVKPYTMz76FGOETO4yjCr8f+O jmzrG9VwZh+XYYDNktrzquv2nLE0NwE+SjnvEGkT0qd6Sl0uMuXXQxdThL8NMrzp hF2HrTHxXKdqs0E4Wzm+VKGeUTJKHzib -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:10 2025 by rpki-client