$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: dKpDh4mVTHkFyAaJaz5tP5SzDv4EfoqWnUaAgFrjE+U= Subject key identifier: A3:84:3D:0E:DB:DF:4B:26:91:9F:D0:BD:96:F9:24:63:3E:24:80:10 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 04E1 Signing time: Fri 22 Aug 2025 23:56:33 +0000 Manifest this update: Fri 22 Aug 2025 23:56:33 +0000 Manifest next update: Fri 29 Aug 2025 23:56:33 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: tY0EfUoQZhYKzNoHmh5W4op/RnsmgoK6TLPOyV2fd2U=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: Pxv8dePi1EpNPNL4ZdJ0nYxVU1Z8dZuP+ncTQy+eHOw=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: Qsapn7T7BSoVN2a752N9muKYuA54q3bOkNtfwyaphBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Aug 22 23:56:33 2025 GMT Not After : Aug 29 23:56:33 2025 GMT Subject: CN=68a903b1-9dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:7b:e9:5a:be:2f:ff:bc:51:c7:ea:cb:2b: 85:42:00:d0:d9:68:f1:3e:58:b1:eb:ee:21:62:0a: c5:97:9b:f7:c9:f0:65:6d:3c:57:06:1a:f1:eb:ed: ea:c3:75:93:c1:e1:08:36:09:78:a9:ae:42:f6:eb: d7:18:93:17:6c:ef:08:e6:35:6e:7e:e2:68:1e:fa: da:48:f9:b5:35:99:72:64:0c:1b:71:e2:5a:67:61: df:d8:66:1f:da:30:07:43:be:c6:59:db:fa:3f:ad: 65:ed:49:d5:af:60:f8:8e:b3:e8:d6:50:84:a8:51: c5:81:90:db:a5:72:97:d5:e1:b4:4b:5d:3c:c4:77: 12:2b:01:ae:aa:5c:26:be:9e:ba:90:45:77:32:c0: 50:9c:16:1f:54:28:6b:b0:8d:64:26:f6:bb:63:66: e7:ae:5a:3c:79:e3:cb:dc:34:ea:bf:b5:1d:fd:22: 34:84:9f:24:1d:aa:2b:6a:3d:9e:5f:b4:fd:9a:48: e5:a9:ef:f1:b9:ea:a8:db:01:7c:8a:95:ab:3d:63: 51:f4:52:d2:c6:c4:f3:0d:70:e9:32:4b:25:21:bf: 67:e1:71:ff:30:9f:4f:1e:08:d6:93:45:cd:d7:0c: 98:d4:2e:67:70:b3:b2:4b:03:64:6e:89:7a:22:a5: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:3D:0E:DB:DF:4B:26:91:9F:D0:BD:96:F9:24:63:3E:24:80:10 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d6:bd:cf:55:9d:71:11:af:a4:44:ec:01:f6:9c:18:0c:8a: 15:95:d9:44:05:b3:60:a6:01:b6:22:a2:ff:d3:0b:26:8a:26: 5f:99:d6:61:57:03:f6:27:0a:c3:52:08:5e:49:1b:90:0f:a8: af:3a:5e:c3:06:6b:d0:3d:21:f1:de:d3:f1:b2:e7:79:6d:dd: a5:67:ba:b9:4b:0e:50:6c:a6:c8:e0:b6:51:fd:17:ad:f6:d3: 7a:28:2b:ed:9b:93:39:41:9a:20:8c:b0:eb:74:9e:f4:88:09: e9:1c:3a:60:c1:64:b8:35:56:3a:78:69:75:be:98:dc:1f:17: aa:1a:4d:81:94:a8:14:77:84:67:52:d5:80:86:b6:ba:82:82: b6:c0:7b:37:7f:f3:5a:06:8a:7a:9c:6f:7e:21:2f:34:2d:bb: f3:ee:bb:eb:a9:3b:b5:ab:3a:f6:3c:2d:b0:5a:56:07:12:a9: cd:37:f2:9a:fe:11:4e:ea:52:da:ef:a0:20:a9:7d:aa:0a:bf: 50:40:9a:47:09:84:11:2d:12:d4:22:e6:b0:1d:b8:08:a6:a7: 6a:0d:21:32:1f:6d:78:a9:16:7f:db:c7:9a:5c:29:4d:3c:c2: a2:fa:d7:3f:5c:35:40:86:64:5c:28:08:fe:f7:c1:85:70:b5: 79:3e:3b:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjUwODIyMjM1NjMzWhcNMjUwODI5MjM1NjMzWjAYMRYwFAYD VQQDEw02OGE5MDNiMS05ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM976Vq+L/+8UcfqyyuFQgDQ2WjxPlix6+4hYgrFl5v3yfBlbTxXBhrx6+3q w3WTweEINgl4qa5C9uvXGJMXbO8I5jVufuJoHvraSPm1NZlyZAwbceJaZ2Hf2GYf 2jAHQ77GWdv6P61l7UnVr2D4jrPo1lCEqFHFgZDbpXKX1eG0S108xHcSKwGuqlwm vp66kEV3MsBQnBYfVChrsI1kJva7Y2bnrlo8eePL3DTqv7Ud/SI0hJ8kHaoraj2e X7T9mkjlqe/xueqo2wF8ipWrPWNR9FLSxsTzDXDpMkslIb9n4XH/MJ9PHgjWk0XN 1wyY1C5ncLOySwNkbol6IqUTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOEPQ7b 30smkZ/QvZb5JGM+JIAQMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC41r3PVZ1xEa+kROwB9pwYDIoVldlEBbNgpgG2IqL/0wsmiiZfmdZh VwP2JwrDUgheSRuQD6ivOl7DBmvQPSHx3tPxsud5bd2lZ7q5Sw5QbKbI4LZR/Ret 9tN6KCvtm5M5QZogjLDrdJ70iAnpHDpgwWS4NVY6eGl1vpjcHxeqGk2BlKgUd4Rn UtWAhra6goK2wHs3f/NaBop6nG9+IS80Lbvz7rvrqTu1qzr2PC2wWlYHEqnNN/Ka /hFO6lLa76AgqX2qCr9QQJpHCYQRLRLUIuawHbgIpqdqDSEyH214qRZ/28eaXClN PMKi+tc/XDVAhmRcKAj+98GFcLV5PjvZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:24 2025 by rpki-client