$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: 3+idCE9sy23NFv+DbBIqWh74D5oleJ431hNrQRaaMVU= Subject key identifier: B6:59:52:E5:81:65:36:7F:35:6B:6E:96:C9:2C:23:ED:5C:0D:94:D0 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0EC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0EBC Signing time: Fri 22 Aug 2025 17:47:06 +0000 Manifest this update: Fri 22 Aug 2025 17:47:06 +0000 Manifest next update: Fri 29 Aug 2025 17:47:06 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: y/z+RlREV4c51JYTL+jPk/P+rh9egtthgwS6seJKJWk=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: KyrGSf7V5zfG9F8nLNaSQJ4n2vaZ8LBybDGS/PP9Wq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Aug 22 17:47:06 2025 GMT Not After : Aug 29 17:47:06 2025 GMT Subject: CN=68a8ad1a-8823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:33:2a:1f:cc:60:c2:a7:40:68:46:b9:a2: 68:ea:06:09:b2:40:27:02:51:74:5e:c5:a4:61:ff: 44:9a:fa:a3:dd:0d:17:1d:28:11:04:40:dc:93:7a: c8:8a:6a:19:11:d2:93:57:9f:92:30:6c:c0:6d:88: f7:f4:cb:fc:57:5b:38:a5:b0:2e:ea:eb:e8:7f:66: 61:ff:c3:78:e8:e4:e3:15:01:7b:0a:c1:1d:01:c8: 84:b3:64:bb:5a:9d:72:8b:26:e4:92:5f:ea:a3:fd: 49:38:36:e2:f3:7b:7c:28:50:80:b4:bf:ee:65:03: 98:20:27:45:24:84:62:a2:7e:7c:86:e2:ec:00:15: ad:f5:21:63:61:d3:53:5b:90:94:3f:24:44:cf:e5: 42:46:e3:08:e0:6f:d0:b8:1f:b7:b6:96:0f:12:42: 3c:c1:70:95:40:da:80:d3:30:bb:34:6a:2f:9a:e9: 7c:81:59:2b:97:6a:6a:ca:9d:1a:e5:75:0c:12:fe: 98:58:a1:81:46:93:23:b9:80:15:e7:fd:c5:d5:1f: 68:69:f6:e6:c1:d3:d6:1a:51:11:d0:d0:dc:87:72: 68:a3:ab:1a:7a:46:cb:d1:5e:44:80:bb:b2:da:02: 44:48:2d:43:7d:25:7d:3c:39:67:c1:7b:3b:c7:26: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:59:52:E5:81:65:36:7F:35:6B:6E:96:C9:2C:23:ED:5C:0D:94:D0 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c7:b2:3d:07:88:2f:93:e9:6a:5f:ac:a6:2f:bc:54:33:ae: c1:ce:95:9d:d7:51:b3:57:56:71:e2:36:90:97:c0:2d:50:75: 38:08:a3:92:ec:92:93:50:37:a1:2c:e4:67:d9:8b:05:0b:c8: 2a:eb:fd:48:68:86:d3:2d:cb:e6:ed:37:98:69:78:3e:7a:84: 67:40:6a:8b:41:ad:8c:1c:e2:be:0c:b5:19:3f:7c:e5:84:33: 6c:4b:ab:05:d7:78:bd:6e:e7:d1:ae:c0:a1:4a:53:35:fc:fe: ba:cc:a8:61:99:d0:89:51:a2:fa:27:30:ea:55:b2:d8:ef:ca: c4:9e:28:2d:90:82:0e:e5:9c:58:0f:7d:2c:0c:b7:fc:eb:06: 49:6d:1d:7f:1c:13:86:ef:5f:ac:52:e0:a3:1f:0c:be:7b:76: d1:e3:13:9b:21:1e:47:9d:27:01:53:2d:7c:90:d4:d6:75:01: eb:df:6a:13:23:a6:34:5c:be:b6:d0:5c:e5:a9:f8:be:38:77: d0:f5:f9:ea:8f:50:e6:7b:5c:c7:c9:9e:9b:cb:66:c5:7b:97: 6d:9f:63:9f:14:22:44:3c:5b:61:4b:dc:91:b3:f6:e9:d4:f2: 2f:2f:c4:69:c3:25:86:c2:f7:17:fa:eb:2c:11:6f:af:ac:dd: df:cc:42:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUwODIyMTc0NzA2WhcNMjUwODI5MTc0NzA2WjAYMRYwFAYD VQQDEw02OGE4YWQxYS04ODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxkzKh/MYMKnQGhGuaJo6gYJskAnAlF0XsWkYf9Emvqj3Q0XHSgRBEDck3rI imoZEdKTV5+SMGzAbYj39Mv8V1s4pbAu6uvof2Zh/8N46OTjFQF7CsEdAciEs2S7 Wp1yiybkkl/qo/1JODbi83t8KFCAtL/uZQOYICdFJIRion58huLsABWt9SFjYdNT W5CUPyREz+VCRuMI4G/QuB+3tpYPEkI8wXCVQNqA0zC7NGovmul8gVkrl2pqyp0a 5XUMEv6YWKGBRpMjuYAV5/3F1R9oafbmwdPWGlER0NDch3Joo6saekbL0V5EgLuy 2gJESC1DfSV9PDlnwXs7xyb5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZZUuWB ZTZ/NWtulsksI+1cDZTQMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIx7I9B4gvk+lqX6ymL7xUM67BzpWd11GzV1Zx4jaQl8AtUHU4CKOS 7JKTUDehLORn2YsFC8gq6/1IaIbTLcvm7TeYaXg+eoRnQGqLQa2MHOK+DLUZP3zl hDNsS6sF13i9bufRrsChSlM1/P66zKhhmdCJUaL6JzDqVbLY78rEnigtkIIO5ZxY D30sDLf86wZJbR1/HBOG71+sUuCjHwy+e3bR4xObIR5HnScBUy18kNTWdQHr32oT I6Y0XL620Fzlqfi+OHfQ9fnqj1Dme1zHyZ6by2bFe5dtn2OfFCJEPFthS9yRs/bp 1PIvL8RpwyWGwvcX+ussEW+vrN3fzEK4 -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:55 2025 by rpki-client