$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: EZOur5wQJ8l4+S0ocvDyXrAr7vilkkD1QE1STquEBnw= Subject key identifier: AD:7E:72:2C:87:F3:CD:32:83:10:62:9C:12:27:2D:84:C0:A2:67:3A Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:48:50 +0000 Manifest this update: Sat 23 Aug 2025 07:48:50 +0000 Manifest next update: Sat 30 Aug 2025 07:48:50 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: 8CLK7N+ULAwtqPTZ26VZMBfz4LthuQDrHYpRhUlGUp0=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Aug 23 07:48:50 2025 GMT Not After : Aug 30 07:48:50 2025 GMT Subject: CN=68a97262-a00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:9c:f7:3c:d7:43:1c:d8:dd:28:42:15:3d: fe:1a:42:c0:9f:ec:d8:6d:af:27:a7:51:4c:a9:36: 9d:04:73:49:7f:d2:4a:03:0a:e2:14:f1:6a:61:38: 61:43:45:b2:84:9a:60:fc:53:1e:b0:e3:57:03:73: 8b:4b:c2:41:4a:76:45:f3:a1:b8:95:ec:ac:cb:7d: b2:e6:0d:19:13:25:ec:93:3d:9f:89:4e:3e:87:78: b7:03:19:47:6f:34:24:67:34:97:7f:cd:cb:ae:b8: be:0f:33:f7:db:33:5a:49:b9:a1:26:ac:3d:15:f0: 3e:5e:10:07:c2:db:08:a7:89:69:82:44:72:17:46: 66:09:2f:3a:f5:d7:55:ec:c9:ff:36:07:98:d0:6a: 90:bf:97:3c:7a:88:25:02:f1:c5:cf:55:1f:39:78: 6d:65:d5:6e:8d:14:a1:37:34:aa:47:67:e8:66:27: 7b:07:e5:40:cc:cc:c3:bb:34:74:3f:89:ca:bd:c3: b4:ea:0e:8a:8e:1e:02:81:55:30:c1:fe:2a:ec:2b: 4d:f7:5d:34:96:4f:0d:7f:c7:97:05:6c:87:fe:98: e6:dd:80:12:6d:70:26:62:e6:34:79:bf:68:78:a1: b4:8b:1e:37:f8:77:8d:0e:9a:48:3e:c1:33:35:dc: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7E:72:2C:87:F3:CD:32:83:10:62:9C:12:27:2D:84:C0:A2:67:3A X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:ea:8c:fa:56:a3:9f:b0:10:72:83:54:7f:fd:88:d3:81: 26:f0:11:a4:06:14:91:0e:0f:89:a0:f0:a6:15:1b:88:69:c7: 79:56:dd:fc:b5:70:d6:d6:f6:61:ee:08:cb:c0:12:dd:dc:14: 6d:d5:7c:08:36:4a:9e:03:a7:29:1b:13:58:72:f2:4c:d3:f3: 8a:ef:d7:33:63:13:c7:e8:da:ed:34:12:1e:4d:78:8a:e5:8a: 92:93:35:f8:c9:33:2c:2a:c8:01:f6:38:56:31:9c:1e:4f:5f: 24:78:ac:4f:04:7d:78:dc:19:54:01:64:fe:61:b3:a0:e4:4f: 4b:d9:88:8b:fc:cb:b7:a5:0b:f0:0a:3b:b9:b6:ac:6b:90:88: 15:6a:1a:db:3b:01:d4:28:15:8d:ed:93:3b:1d:1f:87:d5:ae: 40:7b:ab:60:3d:0b:27:35:96:9f:b1:95:4c:cd:c8:34:a2:10: e6:59:fa:fa:c4:8a:35:6c:0d:cf:b4:2d:bd:16:c5:83:3a:34: d5:71:d0:49:6c:4e:0e:e2:c4:3d:4f:b5:3f:70:e9:89:ab:b0: 42:66:e1:75:60:50:a8:fd:f4:3a:56:56:28:3f:70:e1:ea:ff: 7c:03:d5:66:08:3d:b1:26:e1:5f:a3:6e:22:78:76:54:0e:d2: 0f:f7:4a:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTA4MjMwNzQ4NTBaFw0yNTA4MzAwNzQ4NTBaMBgxFjAUBgNV BAMTDTY4YTk3MjYyLWEwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ6Zz3PNdDHNjdKEIVPf4aQsCf7NhtryenUUypNp0Ec0l/0koDCuIU8WphOGFD RbKEmmD8Ux6w41cDc4tLwkFKdkXzobiV7KzLfbLmDRkTJeyTPZ+JTj6HeLcDGUdv NCRnNJd/zcuuuL4PM/fbM1pJuaEmrD0V8D5eEAfC2winiWmCRHIXRmYJLzr111Xs yf82B5jQapC/lzx6iCUC8cXPVR85eG1l1W6NFKE3NKpHZ+hmJ3sH5UDMzMO7NHQ/ icq9w7TqDoqOHgKBVTDB/irsK033XTSWTw1/x5cFbIf+mObdgBJtcCZi5jR5v2h4 obSLHjf4d40Omkg+wTM13LKxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrX5yLIfz zTKDEGKcEicthMCiZzowHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADi56oz6VqOfsBByg1R//YjTgSbwEaQGFJEOD4mg8KYVG4hpx3lW3fy1 cNbW9mHuCMvAEt3cFG3VfAg2Sp4DpykbE1hy8kzT84rv1zNjE8fo2u00Eh5NeIrl ipKTNfjJMywqyAH2OFYxnB5PXyR4rE8EfXjcGVQBZP5hs6DkT0vZiIv8y7elC/AK O7m2rGuQiBVqGts7AdQoFY3tkzsdH4fVrkB7q2A9Cyc1lp+xlUzNyDSiEOZZ+vrE ijVsDc+0Lb0WxYM6NNVx0ElsTg7ixD1PtT9w6YmrsEJm4XVgUKj99DpWVig/cOHq /3wD1WYIPbEm4V+jbiJ4dlQO0g/3Smc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:27 2025 by rpki-client