$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft File: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json) Hash identifier: fzIsduGYtjHWIfDa3UjiRqu7VgQgmCZv0OJvDkYHFCY= Subject key identifier: 92:CB:D3:18:B2:4F:77:23:2A:62:B7:DD:6A:5B:F5:2F:05:AC:41:7C Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:21:23 +0000 Manifest this update: Sat 23 Aug 2025 08:21:22 +0000 Manifest next update: Sat 30 Aug 2025 08:21:22 +0000 Files and hashes: 1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: fNQYxsMju+XpO5EA4oXIYWwq1NnS4pm1iZC3hA38Ipg=) 2: C13BBA7472CE11F08EC1A954C4F9AE02.roa (hash: Z5wKN86h43WnhaCcXnSDpddiCRId/k2KmWdqONanrqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F Validity Not Before: Aug 23 08:21:22 2025 GMT Not After : Aug 30 08:21:22 2025 GMT Subject: CN=68a97a03-902e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:7c:b5:ef:2a:a3:13:7b:ca:31:60:0d:98: e9:d0:89:e5:10:bf:cb:31:61:ca:01:52:6d:15:9b: 6d:f6:d6:62:7e:ba:ff:cb:f2:3d:8d:07:34:94:b2: 55:cc:2f:91:07:42:a3:fc:6b:b1:fc:b1:d0:c6:77: 53:ef:6c:c7:4d:4d:4d:14:c6:ed:35:8d:86:1e:15: d0:88:4e:37:a6:65:cd:dc:df:8b:60:21:92:4b:7e: 8a:a7:1c:cd:de:01:31:92:59:4c:2a:76:01:93:9f: 15:ab:2e:2c:cc:15:6b:cd:c0:b5:03:8a:f0:01:0d: dc:e5:f1:80:98:0b:90:45:38:88:6f:83:9d:0f:89: d4:84:fc:9d:ba:ee:e6:37:ec:53:a5:00:4b:29:5c: 53:ad:2a:1b:a1:a1:46:7b:5b:12:de:19:f9:75:01: d8:87:89:dd:43:8b:1e:c7:48:a2:23:71:0a:28:81: d9:23:fa:4a:33:94:5c:92:be:60:4d:9a:8e:fe:9d: f7:c7:af:25:e3:ee:f0:c7:d9:96:cc:9b:d5:23:e5: 1d:70:dc:a2:22:7f:08:4f:87:22:88:da:5b:f3:a4: 53:a0:eb:53:e6:db:91:e0:61:f1:05:aa:07:a5:49: 53:af:29:62:1d:a9:41:2e:e1:cf:a4:04:64:58:66: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:D3:18:B2:4F:77:23:2A:62:B7:DD:6A:5B:F5:2F:05:AC:41:7C X509v3 Authority Key Identifier: keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:95:88:d0:66:7b:6b:2d:87:8a:17:5f:94:7a:f4:d4:b1: 04:26:80:2c:70:6f:9d:a4:30:53:a6:30:74:45:a3:16:42:12: 7b:4c:b5:a8:ad:3b:04:09:22:8d:39:fe:62:95:18:4e:ec:05: 54:95:74:a7:9c:d0:2f:f7:ff:0b:7c:28:59:b5:ad:17:57:a6: 20:4a:bc:a1:38:e8:c2:42:18:ad:3e:a3:48:e1:4a:63:12:2f: f5:fe:55:0b:ca:70:26:98:5b:e9:c0:30:91:2d:ba:09:53:58: 20:f1:34:fc:2e:20:23:db:78:54:a7:68:1c:78:b6:26:19:d7: 40:b9:57:5d:6f:a5:91:8b:87:88:3b:19:eb:2c:f6:80:fe:f9: f3:25:da:f4:b9:67:8f:db:4b:fd:5e:ae:e3:cf:d3:c4:3c:ac: ad:77:86:52:8f:4d:52:f8:8a:fb:7f:b0:7c:4b:4f:52:57:fd: 96:24:d7:ec:ab:15:7f:22:d8:cd:61:a0:0b:32:61:e8:71:24: 5e:31:77:50:5f:a1:58:22:a3:48:b3:2d:25:a4:ad:14:66:9b: 6e:1a:70:46:71:6a:ba:d9:f1:66:61:a2:4d:6a:a3:84:55:89: fa:ef:c0:10:c5:2b:be:8e:59:48:97:77:71:11:e0:f6:95:1f: f6:bd:d6:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QUNFMjExMC8GA1UEBRMoREFFMUNFMEFEQTY3QjQ0NzEzQzYxQjFGQUVDNEY1RDRE NjdBMTU5RjAeFw0yNTA4MjMwODIxMjJaFw0yNTA4MzAwODIxMjJaMBgxFjAUBgNV BAMTDTY4YTk3YTAzLTkwMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCncHy17yqjE3vKMWANmOnQieUQv8sxYcoBUm0Vm2321mJ+uv/L8j2NBzSUslXM L5EHQqP8a7H8sdDGd1PvbMdNTU0Uxu01jYYeFdCITjemZc3c34tgIZJLfoqnHM3e ATGSWUwqdgGTnxWrLizMFWvNwLUDivABDdzl8YCYC5BFOIhvg50PidSE/J267uY3 7FOlAEspXFOtKhuhoUZ7WxLeGfl1AdiHid1Dix7HSKIjcQoogdkj+kozlFySvmBN mo7+nffHryXj7vDH2ZbMm9Uj5R1w3KIifwhPhyKI2lvzpFOg61Pm25HgYfEFqgel SVOvKWIdqUEu4c+kBGRYZgKfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUksvTGLJP dyMqYrfdalv1LwWsQXwwHwYDVR0jBBgwFoAU2uHOCtpntEcTxhsfrsT11NZ6FZ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQ0UyLzUxQ0Q3RkJBNzJD RTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZa OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnVIT0N0cG50RWNUeGhzZnJzVDExTlo2Rlo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB Q0UyLzUxQ0Q3RkJBNzJDRTExRjA4NDIxQUE0OEM0RjlBRTAyLzJ1SE9DdHBudEVj VHhoc2Zyc1QxMU5aNkZaOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrylYjQZntrLYeKF1+UevTUsQQmgCxwb52kMFOmMHRFoxZCEntMtait OwQJIo05/mKVGE7sBVSVdKec0C/3/wt8KFm1rRdXpiBKvKE46MJCGK0+o0jhSmMS L/X+VQvKcCaYW+nAMJEtuglTWCDxNPwuICPbeFSnaBx4tiYZ10C5V11vpZGLh4g7 Gess9oD++fMl2vS5Z4/bS/1eruPP08Q8rK13hlKPTVL4ivt/sHxLT1JX/ZYk1+yr FX8i2M1hoAsyYehxJF4xd1BfoVgio0izLSWkrRRmm24acEZxarrZ8WZhok1qo4RV ifrvwBDFK76OWUiXd3ER4PaVH/a91js= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:26 2025 by rpki-client