$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: X59Xck1iLBzzN0AATkTKNYfDuZdyVpqQJW+u1a7oe8M= Subject key identifier: 0C:85:EA:4E:30:92:42:6A:3E:1C:48:0E:E5:4D:CA:F8:09:03:03:13 Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 53 Signing time: Sat 23 Aug 2025 07:30:42 +0000 Manifest this update: Sat 23 Aug 2025 07:30:42 +0000 Manifest next update: Sat 30 Aug 2025 07:30:41 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: XhL157ivfI8tDzNZIHIL/AD4YwWW+XEe2J68pzVrzCY=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Aug 23 07:30:42 2025 GMT Not After : Aug 30 07:30:41 2025 GMT Subject: CN=68a96e22-d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:bd:d3:4c:df:c3:7f:5e:9f:40:84:8c:12: 1d:c4:ff:5b:9e:05:68:8e:2b:4f:ce:69:e8:ec:0e: f9:ae:52:f1:05:21:89:91:b0:e8:af:e7:40:dd:96: 88:3b:25:5b:bb:e7:68:50:67:aa:fa:b9:e0:bd:1a: 69:1b:2b:3c:f1:d7:c1:78:80:a1:53:59:b1:e2:99: 19:a7:18:3d:a2:ca:18:15:e5:d5:97:5d:8b:9a:b0: d9:b4:a3:e3:8a:e5:20:5b:90:c8:b8:4c:43:03:ee: 52:c0:97:a8:da:d0:0e:c0:15:fa:2b:f5:d2:4f:d4: cd:00:09:3b:58:92:7f:cd:5c:51:98:6d:0f:91:0f: ed:fd:dd:d8:f2:69:91:86:38:5a:aa:30:58:25:1a: 2f:8a:3c:c5:7a:7e:ba:82:38:da:72:76:08:60:df: 0b:ba:d9:eb:6c:4b:02:b9:92:4d:84:c5:14:d8:a1: d5:36:97:1e:72:df:71:16:25:29:de:d8:a7:b8:7d: 5a:e0:57:99:1d:25:e6:ba:dd:7f:e8:f1:07:20:c4: c6:41:89:f4:fe:18:e3:e6:ba:da:00:dc:e2:be:f9: eb:86:d5:e0:c5:62:b9:af:0f:b9:ec:91:6e:b0:b8: b6:50:06:c2:d7:b9:3b:f4:92:33:3e:a2:3d:89:df: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:EA:4E:30:92:42:6A:3E:1C:48:0E:E5:4D:CA:F8:09:03:03:13 X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:7e:67:a1:b7:74:31:14:ff:77:84:2a:e6:bb:5e:5a:a3:92: 18:b3:d5:1d:fd:02:cf:39:7f:02:fb:5c:ce:83:35:a6:4d:42: c8:12:e5:5a:ef:9f:c7:44:92:8f:b9:03:d0:a8:f3:a6:27:5e: 0f:25:c2:e9:5d:43:15:23:b8:9f:d3:19:84:9a:d7:6d:85:72: e4:1a:41:09:b8:a5:7c:db:67:fa:5f:f0:e7:c9:61:74:2f:bb: 48:6c:15:33:8a:d8:c1:35:93:45:ba:35:72:00:db:b4:5e:ea: e5:fc:0c:86:83:26:01:65:5a:e8:dc:c6:39:77:b9:6b:36:76: 95:cf:d4:74:06:3c:90:29:99:0c:5a:91:b7:e6:31:ce:ab:2d: 73:5b:d5:dc:08:f2:7f:cb:d9:03:91:f3:9f:49:5c:d1:9c:87: 71:21:9a:5f:19:7a:91:1c:85:2f:4c:cb:fa:6d:4f:bb:9e:82: 3a:66:68:a1:ff:a8:12:15:cf:ec:3a:79:11:6f:53:c6:58:66: e3:76:82:cc:7e:1c:76:af:7a:9f:46:c2:f8:8a:90:71:28:a2: fc:2a:b3:a6:e6:b9:10:fc:17:60:42:1d:85:dd:68:b0:59:4d: 93:58:91:74:f0:f9:ed:56:22:92:9d:25:e4:a5:d8:6c:ed:e8: 4d:bb:91:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTA4MjMwNzMwNDJaFw0yNTA4MzAwNzMwNDFaMBgxFjAUBgNV BAMTDTY4YTk2ZTIyLWQ1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDmL3TTN/Df16fQISMEh3E/1ueBWiOK0/OaejsDvmuUvEFIYmRsOiv50Ddlog7 JVu752hQZ6r6ueC9GmkbKzzx18F4gKFTWbHimRmnGD2iyhgV5dWXXYuasNm0o+OK 5SBbkMi4TEMD7lLAl6ja0A7AFfor9dJP1M0ACTtYkn/NXFGYbQ+RD+393djyaZGG OFqqMFglGi+KPMV6frqCONpydghg3wu62etsSwK5kk2ExRTYodU2lx5y33EWJSne 2Ke4fVrgV5kdJea63X/o8QcgxMZBifT+GOPmutoA3OK++euG1eDFYrmvD7nskW6w uLZQBsLXuTv0kjM+oj2J34nZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDIXqTjCS Qmo+HEgO5U3K+AkDAxMwHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1+Z6G3dDEU/3eEKua7Xlqjkhiz1R39As85fwL7XM6DNaZNQsgS5Vrv n8dEko+5A9Co86YnXg8lwuldQxUjuJ/TGYSa122FcuQaQQm4pXzbZ/pf8OfJYXQv u0hsFTOK2ME1k0W6NXIA27Re6uX8DIaDJgFlWujcxjl3uWs2dpXP1HQGPJApmQxa kbfmMc6rLXNb1dwI8n/L2QOR859JXNGch3Ehml8ZepEchS9My/ptT7uegjpmaKH/ qBIVz+w6eRFvU8ZYZuN2gsx+HHavep9GwviKkHEoovwqs6bmuRD8F2BCHYXdaLBZ TZNYkXTw+e1WIpKdJeSl2Gzt6E27kdg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:28 2025 by rpki-client