$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: ZiHqCBUNXxAjpxdkiA7EWeeTWoM1nI0GcQrHhW+dTbo= Subject key identifier: CA:0E:60:28:15:D6:02:2B:F8:2C:31:80:98:6B:9B:76:06:30:2B:3F Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 09EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 09E3 Signing time: Fri 22 Aug 2025 20:03:27 +0000 Manifest this update: Fri 22 Aug 2025 20:03:26 +0000 Manifest next update: Fri 29 Aug 2025 20:03:26 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: HJyEiKG/yjHKpcd2gNVcxYuZHvYDhw9DZphQA5RFR+A=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: qAQSazWUf2FePmcHd1Qj+eRlLm7Ky5QuPvw10+7M0lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2539 (0x9eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Aug 22 20:03:26 2025 GMT Not After : Aug 29 20:03:26 2025 GMT Subject: CN=68a8cd0f-cb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:56:a4:76:cf:ea:f6:1a:ac:d0:92:ce:5a: ff:90:3c:d4:56:03:a6:eb:20:1e:b4:4d:13:25:89: 9a:1a:34:92:b6:8a:44:36:1c:ea:5f:f0:14:9f:99: 37:9f:5b:2a:78:b0:15:4b:ff:9e:ad:63:54:d1:39: 90:91:97:4e:92:8d:00:0a:ed:d3:29:cc:97:1a:85: 9a:95:a1:02:89:2c:cf:1c:29:5d:8a:88:6f:ca:dd: 31:4c:4e:cc:19:27:d7:7a:f8:03:a1:e7:67:9c:1e: f0:e6:b6:51:1e:89:49:7c:16:88:10:3e:10:65:d3: 12:aa:fa:9f:9a:12:4a:7b:05:77:42:71:7b:d1:7b: 4f:54:81:0f:f9:f2:c7:4f:3b:07:5a:25:f7:81:d1: fd:85:ad:a4:8c:87:b3:6b:e6:bf:59:ec:64:a9:d5: 7b:b7:9d:ad:bb:d9:01:0e:4d:62:fb:9a:1b:45:49: da:17:9b:d2:de:41:40:76:54:59:dc:3b:be:95:f1: 66:d0:e8:cb:92:99:69:e9:3e:7e:b3:2e:36:cc:c1: 90:db:cf:ff:ff:43:67:56:91:62:eb:90:ac:8d:0a: 4a:5d:07:f7:95:b8:01:c7:e4:f6:68:84:97:25:6c: 22:68:bd:32:82:4a:31:03:11:48:92:3e:92:bb:10: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0E:60:28:15:D6:02:2B:F8:2C:31:80:98:6B:9B:76:06:30:2B:3F X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ec:e2:0a:b5:61:91:a0:ea:e7:ec:47:37:7a:24:06:05:b4: 04:c3:31:76:67:bc:36:fd:b3:d0:f7:a5:83:1e:e2:d9:e1:b6: 59:c6:24:0f:5a:a4:1b:47:36:5c:e4:1e:2d:78:01:f0:7a:e7: 2f:ba:d4:69:af:10:fc:91:36:25:c1:94:ec:1d:af:37:48:c6: 25:03:8b:1d:14:95:20:42:0f:4f:6b:2b:39:d0:1c:62:b7:c4: c8:7a:02:75:51:8b:84:56:09:e1:26:65:b8:2a:b3:0c:c5:b9: 83:21:8e:ef:9e:b5:28:00:72:3b:99:cc:99:50:b1:4e:e7:cc: 26:c4:3a:4f:d6:3f:9f:b7:db:c0:6f:1a:df:b6:ee:ea:7c:40: cd:e0:b3:87:25:b7:65:25:d9:48:ea:4c:01:f1:0c:2e:6c:b0: 8b:21:a2:c3:6b:04:b1:51:ca:b3:2d:64:a5:21:09:4c:df:30: b5:6e:55:7d:e2:7d:48:e3:b9:48:45:f8:cb:69:2b:00:f0:07: be:08:d7:23:e8:02:5f:5f:18:16:f0:6c:f7:80:03:bb:2d:88: b5:57:11:32:25:66:e0:73:4e:c8:30:67:4b:16:30:bf:7d:43: 8f:8e:5a:f7:84:7f:0f:df:03:5d:3a:78:0c:85:6e:07:a2:57: 5e:e2:44:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUwODIyMjAwMzI2WhcNMjUwODI5MjAwMzI2WjAYMRYwFAYD VQQDEw02OGE4Y2QwZi1jYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hRWpHbP6vYarNCSzlr/kDzUVgOm6yAetE0TJYmaGjSStopENhzqX/AUn5k3 n1sqeLAVS/+erWNU0TmQkZdOko0ACu3TKcyXGoWalaECiSzPHCldiohvyt0xTE7M GSfXevgDoednnB7w5rZRHolJfBaIED4QZdMSqvqfmhJKewV3QnF70XtPVIEP+fLH TzsHWiX3gdH9ha2kjIeza+a/WexkqdV7t52tu9kBDk1i+5obRUnaF5vS3kFAdlRZ 3Du+lfFm0OjLkplp6T5+sy42zMGQ28///0NnVpFi65CsjQpKXQf3lbgBx+T2aISX JWwiaL0ygkoxAxFIkj6SuxBEiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoOYCgV 1gIr+CwxgJhrm3YGMCs/MB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn7OIKtWGRoOrn7Ec3eiQGBbQEwzF2Z7w2/bPQ96WDHuLZ4bZZxiQP WqQbRzZc5B4teAHweucvutRprxD8kTYlwZTsHa83SMYlA4sdFJUgQg9Pays50Bxi t8TIegJ1UYuEVgnhJmW4KrMMxbmDIY7vnrUoAHI7mcyZULFO58wmxDpP1j+ft9vA bxrftu7qfEDN4LOHJbdlJdlI6kwB8QwubLCLIaLDawSxUcqzLWSlIQlM3zC1blV9 4n1I47lIRfjLaSsA8Ae+CNcj6AJfXxgW8Gz3gAO7LYi1VxEyJWbgc07IMGdLFjC/ fUOPjlr3hH8P3wNdOngMhW4Holde4kTi -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:44 2025 by rpki-client