$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: mN5SbtOuYgQOT2fz+Tj0DHvCLi8Bm0KfFNzb4SVCOIM= Subject key identifier: 2D:F1:98:53:81:3A:E0:DF:30:C0:FD:F7:98:38:8D:93:40:FA:85:CD Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 08F4 Signing time: Fri 22 Aug 2025 20:29:57 +0000 Manifest this update: Fri 22 Aug 2025 20:29:57 +0000 Manifest next update: Fri 29 Aug 2025 20:29:57 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: Oap7zdK+mei7WvRQ94LvkfDhUgZL4A/Jft8ayoQmMKw=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: m3vZJbIZBtxTaQynxqIVLeVn+IvoTb+bYR9Z6G9kdLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: Aug 22 20:29:57 2025 GMT Not After : Aug 29 20:29:57 2025 GMT Subject: CN=68a8d345-6cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:c7:22:5c:bb:67:66:cf:56:53:85:e9:c6: 30:7b:18:12:2d:8a:5f:73:2f:92:87:c0:f1:3f:29: 3d:96:e1:6a:2c:91:be:12:d2:c6:02:64:be:0c:1e: ff:18:64:4d:81:ca:76:35:e2:b5:51:1d:da:69:a0: 6c:ca:1a:93:e5:da:fa:b9:ba:66:02:12:87:f4:f3: fa:cb:d2:22:c9:4c:3b:4e:55:4d:c9:1f:66:4e:5a: 14:b0:99:00:63:50:d1:19:41:46:0c:07:2f:44:71: 81:cd:25:47:a0:96:19:3e:9c:b6:f6:41:d5:99:85: 2f:3e:4b:06:ef:29:b8:06:50:91:c5:89:29:60:15: 6f:c5:94:f0:c2:ae:e2:5e:bf:12:50:24:20:ac:3c: c5:35:61:1b:0c:76:d9:82:80:44:c2:61:cf:e9:b4: f0:f4:82:48:db:8c:ed:0b:6d:cc:05:7e:a6:f8:23: 9e:e6:00:ae:51:82:a6:7f:5f:0e:b2:96:59:c3:6f: c7:16:f1:4e:d5:20:f0:ce:e8:80:ae:54:69:5a:5a: fb:ee:e3:cd:b0:bc:7f:c5:8b:4d:27:f2:44:34:67: 43:ce:c8:85:dc:7d:5e:58:00:c1:40:32:fd:66:89: 8d:1d:20:59:9a:0a:17:8f:3f:cc:17:82:8c:5c:2a: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F1:98:53:81:3A:E0:DF:30:C0:FD:F7:98:38:8D:93:40:FA:85:CD X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8f:de:0a:75:75:d8:73:29:50:50:e3:39:de:49:49:1b:91: d1:c1:3d:ad:13:57:c0:30:e1:cc:16:1b:e1:2b:b9:0e:17:61: 85:89:2a:7f:e3:06:aa:dc:c7:99:b4:44:86:ac:35:d6:13:6a: 73:35:e4:b7:01:65:40:fa:5f:98:40:a0:ac:2d:bb:ad:a1:d5: 9d:09:1f:34:ce:fa:ea:2f:ea:ac:66:e2:f6:88:a2:4f:35:38: 99:b7:17:30:bd:a2:20:27:d7:7c:c2:92:4f:f7:ee:f0:09:33: 46:d0:97:f0:2d:e1:3b:0d:d1:37:9e:5e:b3:2d:54:1d:d0:85: 6a:93:55:f1:a7:37:03:09:f3:ef:50:b7:37:15:47:15:16:5b: 9e:11:31:ac:77:17:af:c8:ad:99:60:30:0b:2b:a2:4f:74:21: d2:0b:50:91:d6:25:6e:82:5f:51:75:a1:61:37:d0:b9:14:d5: 03:f8:b3:a2:d8:f1:70:cf:13:db:8c:6f:6e:d2:f7:fd:d4:77: 5e:a6:19:3a:db:88:d3:fc:c1:a5:27:0f:f3:fe:dd:6e:61:fd: c4:1e:ae:db:76:3b:f5:82:c9:32:b7:9d:4e:8d:85:47:25:3e: b4:7f:8f:01:e8:4f:d2:97:9e:94:64:c0:f1:5b:75:18:f9:f0: 5e:58:01:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjUwODIyMjAyOTU3WhcNMjUwODI5MjAyOTU3WjAYMRYwFAYD VQQDEw02OGE4ZDM0NS02Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuLHIly7Z2bPVlOF6cYwexgSLYpfcy+Sh8DxPyk9luFqLJG+EtLGAmS+DB7/ GGRNgcp2NeK1UR3aaaBsyhqT5dr6ubpmAhKH9PP6y9IiyUw7TlVNyR9mTloUsJkA Y1DRGUFGDAcvRHGBzSVHoJYZPpy29kHVmYUvPksG7ym4BlCRxYkpYBVvxZTwwq7i Xr8SUCQgrDzFNWEbDHbZgoBEwmHP6bTw9IJI24ztC23MBX6m+COe5gCuUYKmf18O spZZw2/HFvFO1SDwzuiArlRpWlr77uPNsLx/xYtNJ/JENGdDzsiF3H1eWADBQDL9 ZomNHSBZmgoXjz/MF4KMXCqL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3xmFOB OuDfMMD995g4jZNA+oXNMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMj94KdXXYcylQUOM53klJG5HRwT2tE1fAMOHMFhvhK7kOF2GFiSp/ 4waq3MeZtESGrDXWE2pzNeS3AWVA+l+YQKCsLbutodWdCR80zvrqL+qsZuL2iKJP NTiZtxcwvaIgJ9d8wpJP9+7wCTNG0JfwLeE7DdE3nl6zLVQd0IVqk1XxpzcDCfPv ULc3FUcVFlueETGsdxevyK2ZYDALK6JPdCHSC1CR1iVugl9RdaFhN9C5FNUD+LOi 2PFwzxPbjG9u0vf91Hdephk624jT/MGlJw/z/t1uYf3EHq7bdjv1gskyt51OjYVH JT60f48B6E/Sl56UZMDxW3UY+fBeWAH+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:44 2025 by rpki-client