$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: NzRkLNtNYv6zVIL4jXuQEoVKr55cBa4oA2i9JfvIe14= Subject key identifier: E6:D0:D4:66:B4:5F:A5:BD:73:D6:32:27:96:C3:C5:1B:F9:E8:01:7A Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0AF8 Signing time: Fri 22 Aug 2025 19:30:45 +0000 Manifest this update: Fri 22 Aug 2025 19:30:45 +0000 Manifest next update: Fri 29 Aug 2025 19:30:45 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: cEyhEwSUpC9Ncf4n7JpkgC1WsEC2SWbpAv5JCv6FlUA=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Aug 22 19:30:45 2025 GMT Not After : Aug 29 19:30:45 2025 GMT Subject: CN=68a8c565-88b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:92:3b:4e:e7:b4:29:61:b9:8d:be:f7:ad: f8:13:7c:49:9a:06:21:be:24:92:38:bd:51:7b:38: b6:00:9e:35:49:cc:ff:ba:d6:f6:6f:02:76:5c:5d: d8:09:81:f0:3f:88:80:dd:cf:0e:c9:d1:68:c2:85: c8:9e:5a:57:cc:09:c6:c3:39:e0:51:80:6e:11:6b: ad:36:1c:fa:da:9a:7d:0f:bb:bf:2b:d3:b2:22:b0: 0b:01:c0:f9:2e:32:21:64:8f:bf:b1:6b:d7:ea:b1: 98:40:f2:e5:3e:ff:6c:82:54:ad:a9:92:5a:21:b5: db:12:48:0f:5a:97:70:71:e4:c0:8c:bc:e8:ec:80: cd:14:b6:8f:95:00:69:fb:c8:a4:0e:a6:79:35:b8: e0:94:85:6e:54:6f:c2:82:02:f5:4f:c3:c3:d3:b9: 3a:0d:27:28:c5:ff:8a:9f:96:5d:9a:78:13:61:3f: 1c:6e:cd:7f:66:a5:2a:ed:cc:e2:0e:a3:4c:6b:69: c7:eb:82:20:43:b8:ce:6f:cc:82:ba:23:b3:87:e1: 40:e3:93:d7:78:99:96:82:ad:0c:2a:d0:3c:02:8d: b5:8d:31:ee:b9:2c:73:35:1e:b5:75:df:a4:60:66: 22:9e:af:3d:f9:d3:39:b3:4b:9a:18:0c:d0:bb:b0: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D0:D4:66:B4:5F:A5:BD:73:D6:32:27:96:C3:C5:1B:F9:E8:01:7A X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b1:cb:1d:d4:d8:dd:a9:dd:9e:07:d4:b2:d1:a1:d4:9b:f0: bc:0c:ee:84:e4:12:84:f6:ba:48:24:7a:08:1b:bd:1c:b8:90: e1:7e:fd:4f:13:16:50:40:6c:f0:f7:b0:19:f7:64:2f:3a:7a: a4:3b:27:4a:40:f8:3a:3f:a5:19:d4:3f:a3:b9:f3:e9:fe:c3: b9:2c:f6:3d:43:03:c8:fd:d6:bc:78:ba:9f:48:d1:70:44:84: aa:8c:e3:8d:65:e6:14:35:f9:ca:00:36:6d:ad:54:01:c7:d7: f0:a7:98:df:9c:0e:87:df:3c:17:53:8a:8b:47:48:6b:36:0e: 88:ff:68:8e:13:58:ae:a2:38:06:e2:ba:01:7c:56:fc:54:28: 39:33:8e:8c:62:31:db:c2:18:b7:03:f8:05:3d:d2:75:1a:4d: de:64:50:a3:cd:e3:86:0e:2e:3a:0f:8f:fd:d5:e7:da:43:10: 79:a8:db:ce:c4:28:a0:38:ad:f5:ce:36:4a:d0:f0:cf:dd:30: 0d:23:ba:0d:9d:ce:47:cd:ad:e1:ed:81:38:7f:65:1e:a4:77: f0:03:3f:e7:f2:00:93:59:4e:b2:e6:ac:2b:54:c7:78:03:33: 95:27:55:d3:e6:a9:01:5e:14:48:c0:af:ee:91:25:5f:42:5a: d8:f3:29:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwODIyMTkzMDQ1WhcNMjUwODI5MTkzMDQ1WjAYMRYwFAYD VQQDEw02OGE4YzU2NS04OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p6SO07ntClhuY2+9634E3xJmgYhviSSOL1Rezi2AJ41Scz/utb2bwJ2XF3Y CYHwP4iA3c8OydFowoXInlpXzAnGwzngUYBuEWutNhz62pp9D7u/K9OyIrALAcD5 LjIhZI+/sWvX6rGYQPLlPv9sglStqZJaIbXbEkgPWpdwceTAjLzo7IDNFLaPlQBp +8ikDqZ5NbjglIVuVG/CggL1T8PD07k6DScoxf+Kn5ZdmngTYT8cbs1/ZqUq7czi DqNMa2nH64IgQ7jOb8yCuiOzh+FA45PXeJmWgq0MKtA8Ao21jTHuuSxzNR61dd+k YGYinq89+dM5s0uaGAzQu7DMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObQ1Ga0 X6W9c9YyJ5bDxRv56AF6MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwscsd1Njdqd2eB9Sy0aHUm/C8DO6E5BKE9rpIJHoIG70cuJDhfv1P ExZQQGzw97AZ92QvOnqkOydKQPg6P6UZ1D+jufPp/sO5LPY9QwPI/da8eLqfSNFw RISqjOONZeYUNfnKADZtrVQBx9fwp5jfnA6H3zwXU4qLR0hrNg6I/2iOE1iuojgG 4roBfFb8VCg5M46MYjHbwhi3A/gFPdJ1Gk3eZFCjzeOGDi46D4/91efaQxB5qNvO xCigOK31zjZK0PDP3TANI7oNnc5Hza3h7YE4f2UepHfwAz/n8gCTWU6y5qwrVMd4 AzOVJ1XT5qkBXhRIwK/ukSVfQlrY8ynb -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:15 2025 by rpki-client