$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft File: RDE2OBW8XQu3pCth2SMLTa4ixTw.mft (raw, json) Hash identifier: B25YlQ1KdegdY8fjMOlEOHS+32iDOW/+WgHAZGV7OFU= Subject key identifier: 7F:39:AE:5E:72:56:79:6D:C3:86:71:AE:72:8B:5C:6E:30:76:7E:5A Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft Manifest number: 0121 Signing time: Sat 23 Aug 2025 04:54:21 +0000 Manifest this update: Sat 23 Aug 2025 04:54:21 +0000 Manifest next update: Sat 30 Aug 2025 04:54:21 +0000 Files and hashes: 1: RDE2OBW8XQu3pCth2SMLTa4ixTw.crl (hash: nJusHNd7N0PbzG8ldSBixbEBKs2eulHM/e7+oUk6q/8=) 2: ADCDA1F83A0F11EFAB312630C4F9AE02.roa (hash: 8SYA3R8gtlu3Yfmt/OFb7lvOOBmgG2rmJfQokI/04ZM=) 3: FDDFE12EC78C11EE911F1A30C4F9AE02.roa (hash: XDvJ7OAZIZH9Y1m5zAYI1aNVQygP0iZogi7EtsDf/ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C Validity Not Before: Aug 23 04:54:21 2025 GMT Not After : Aug 30 04:54:21 2025 GMT Subject: CN=68a9497d-053b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:63:0b:35:79:a9:a8:79:79:c3:12:68:01: b9:90:78:ce:9d:f8:ea:2b:dd:d7:6d:3b:c9:ad:7c: d0:29:9b:d3:8d:87:88:f3:c2:d4:ca:2b:2b:75:bb: d4:20:cc:75:fa:59:2f:a5:ef:74:12:33:c5:a6:6c: f8:d4:50:55:0d:a8:7f:31:43:42:22:28:48:4c:84: c9:be:d1:a6:42:2a:a6:5d:9a:a2:3a:08:52:f5:32: 46:80:b8:a4:47:1c:c9:d2:95:d8:81:63:73:06:af: 04:ad:11:d7:6b:a9:c6:d1:65:08:97:2f:39:e6:11: 11:09:96:9e:3b:ba:ce:f9:c6:bf:a2:ff:7c:53:62: d6:43:39:a1:d5:1c:c1:79:76:32:3c:f3:2a:cf:e3: 89:32:b3:b7:d0:c3:15:5e:58:a4:e9:59:6b:62:99: 82:fe:ba:15:a2:f6:02:4f:fd:a9:a2:02:98:9f:4e: 56:6a:db:e6:4f:77:21:9a:46:36:2d:ec:2a:5f:25: b0:08:9e:73:97:89:23:d0:6e:3a:c1:25:71:15:8c: a0:cf:26:dd:52:2b:f9:8e:6d:a3:98:f4:ef:cd:b8: 2d:6c:cf:4e:46:88:c7:0c:71:42:91:de:bb:68:7a: 26:19:15:6d:f5:0f:08:91:c7:6b:b0:93:e1:18:ce: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:AE:5E:72:56:79:6D:C3:86:71:AE:72:8B:5C:6E:30:76:7E:5A X509v3 Authority Key Identifier: keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:02:03:77:e4:f6:40:df:07:bd:cf:90:60:10:72:b8:23:28: aa:3e:b9:91:08:e0:05:c6:e3:c7:52:49:b7:1e:8b:24:6a:0e: 3f:5e:bd:f9:cd:c4:a6:fd:be:68:e0:69:ee:4b:d2:a5:74:d6: f6:9a:a7:58:38:b4:9c:aa:1a:f9:a1:17:74:44:2c:be:aa:da: c8:f2:83:0c:c5:f7:66:ae:2b:3e:aa:9b:14:c7:55:0f:41:8e: 41:eb:9d:bc:81:2e:9d:d3:74:2b:4f:cd:53:67:c8:c9:06:52: 41:e6:63:6c:8e:5d:3f:dc:8b:3d:98:fa:fd:d1:ea:c3:d3:07: 22:2a:a0:d1:56:60:7c:8a:f9:2f:ea:8b:1c:74:e0:e2:3f:8d: 2d:77:a0:04:9e:61:14:15:3e:27:4d:22:ae:cc:71:b3:e4:b0: 78:a7:b8:72:9d:a4:ff:4d:55:c6:a9:11:99:aa:29:91:96:ed: 8a:9a:65:e4:61:23:70:f3:26:f6:c6:c6:a3:47:7f:10:70:bd: 82:55:49:1c:17:a9:ce:74:74:0f:97:05:4e:cb:38:09:74:db: c9:37:18:c6:ce:16:ed:f4:08:84:f4:70:d1:01:02:a8:26:05: a8:ae:49:12:c4:b4:91:30:50:87:a6:85:ca:73:ca:f7:3c:dd: 21:0a:a7:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBREIxMTAvBgNVBAUTKDQ0MzEzNjM4MTVCQzVEMEJCN0E0MkI2MUQ5MjMwQjRE QUUyMkM1M0MwHhcNMjUwODIzMDQ1NDIxWhcNMjUwODMwMDQ1NDIxWjAYMRYwFAYD VQQDEw02OGE5NDk3ZC0wNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCtjCzV5qah5ecMSaAG5kHjOnfjqK93XbTvJrXzQKZvTjYeI88LUyisrdbvU IMx1+lkvpe90EjPFpmz41FBVDah/MUNCIihITITJvtGmQiqmXZqiOghS9TJGgLik RxzJ0pXYgWNzBq8ErRHXa6nG0WUIly855hERCZaeO7rO+ca/ov98U2LWQzmh1RzB eXYyPPMqz+OJMrO30MMVXlik6VlrYpmC/roVovYCT/2pogKYn05WatvmT3chmkY2 LewqXyWwCJ5zl4kj0G46wSVxFYygzybdUiv5jm2jmPTvzbgtbM9ORojHDHFCkd67 aHomGRVt9Q8IkcdrsJPhGM4FOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH85rl5y Vnltw4ZxrnKLXG4wdn5aMB8GA1UdIwQYMBaAFEQxNjgVvF0Lt6QrYdkjC02uIsU8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUFEQi84MUYzODg4NkM3 OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhRdTNwQ3RoMlNNTFRhNGl4 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JERTJPQlc4WFF1M3BDdGgyU01MVGE0aXhUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFEQi84MUYzODg4NkM3OEMxMUVFOTdFNDM4MkZDNEY5QUUwMi9SREUyT0JXOFhR dTNwQ3RoMlNNTFRhNGl4VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMAgN35PZA3we9z5BgEHK4IyiqPrmRCOAFxuPHUkm3Hoskag4/Xr35 zcSm/b5o4GnuS9KldNb2mqdYOLScqhr5oRd0RCy+qtrI8oMMxfdmris+qpsUx1UP QY5B6528gS6d03QrT81TZ8jJBlJB5mNsjl0/3Is9mPr90erD0wciKqDRVmB8ivkv 6oscdODiP40td6AEnmEUFT4nTSKuzHGz5LB4p7hynaT/TVXGqRGZqimRlu2KmmXk YSNw8yb2xsajR38QcL2CVUkcF6nOdHQPlwVOyzgJdNvJNxjGzhbt9AiE9HDRAQKo JgWorkkSxLSRMFCHpoXKc8r3PN0hCqfY -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:05 2025 by rpki-client