$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: QfgObhNaEJ7jm4RV0G5AJNld5CwISMVQkhy06SAnUX4= Subject key identifier: 29:70:6D:D8:EB:D5:56:8D:50:11:56:64:61:E1:84:6C:5C:1E:A7:9B Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01BD Signing time: Sat 23 Aug 2025 03:09:37 +0000 Manifest this update: Sat 23 Aug 2025 03:09:37 +0000 Manifest next update: Sat 30 Aug 2025 03:09:37 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: RDgaLHDth5TU6OVg6tf2GpQkkEZOYxMqM6UrFbyZuqU=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Aug 23 03:09:37 2025 GMT Not After : Aug 30 03:09:37 2025 GMT Subject: CN=68a930f1-6b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:0e:71:ff:65:e2:ac:c4:2b:ab:c4:10:2b: a3:46:42:7d:28:84:dd:0c:34:c8:47:9a:60:3a:e8: 8a:d2:13:d6:5e:95:a4:75:38:0a:cb:b9:95:4a:a7: a9:0c:69:0b:79:cd:ce:28:a7:eb:84:62:6f:2d:5c: d0:f8:a1:07:60:45:e8:4d:92:c7:ad:99:7a:d3:d9: 54:86:65:de:b6:f9:b8:0d:34:c0:f4:31:3b:94:f8: 50:37:7d:d3:e4:f2:da:f0:b4:c9:ab:81:91:93:d5: 46:5c:8c:0c:d6:6d:d8:fe:7c:fa:ec:19:6b:76:78: 37:0b:b6:3b:0f:53:e2:08:ab:43:90:ca:71:c8:81: 35:6d:0e:3d:5c:7b:87:e2:b4:16:e9:20:37:a5:f7: e3:9f:dc:29:ed:d6:76:ea:d5:97:d2:23:d1:84:82: 4c:55:1a:a4:82:9a:f3:00:80:cb:d2:47:c1:52:ad: b5:ed:b2:54:ae:ef:df:73:89:31:1e:e4:c3:66:cf: d6:cd:c0:40:72:94:20:6b:3b:8a:e4:10:f8:60:97: 06:aa:e3:25:98:ea:34:45:9d:b9:58:d8:cf:28:dd: 9e:a7:cc:fa:1f:35:a1:76:4f:f2:ab:c8:3a:8d:a3: e8:e2:16:8d:a6:c2:45:98:a1:9b:db:c7:cb:7c:91: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:6D:D8:EB:D5:56:8D:50:11:56:64:61:E1:84:6C:5C:1E:A7:9B X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:0c:b1:a2:62:d2:aa:5c:45:c0:7f:0a:4e:c6:b1:23:bc:ca: bf:ab:5e:8f:f7:95:65:d8:93:ec:8f:dd:fa:cd:9c:44:96:7f: 56:93:e8:7a:24:bd:6d:3e:e4:95:8b:cc:11:fa:81:0c:f8:89: a4:3c:1b:92:87:69:3b:d0:38:98:00:7e:32:e0:e0:68:10:97: be:78:75:85:50:db:8e:2c:f1:1f:6c:9c:4d:c7:73:1b:fd:13: 1d:b8:46:d0:47:9b:dd:1c:93:64:c6:7c:54:6f:35:4e:70:11: a1:d9:be:3c:c8:ea:9e:40:ad:f3:90:55:ca:7b:54:cb:6c:8b: 47:e2:af:b2:8a:b3:d7:d8:a2:87:22:2e:66:28:80:a1:3e:90: 05:3e:1d:cb:5e:75:75:8e:a6:48:35:02:bc:ed:7a:00:8f:a0: f4:20:49:4f:47:3e:b5:22:e8:9a:07:27:46:3d:75:4f:c5:49: e6:7c:19:0f:32:b7:27:08:e6:ca:f1:8c:93:0c:a6:eb:0c:17: 5c:93:97:3d:ce:91:e6:9e:ba:ab:eb:4e:6c:ec:84:e9:dd:6f: 29:3a:31:c4:7d:b4:8c:68:bc:09:4b:10:8e:43:fb:df:51:95: 2f:25:0a:e3:13:00:b2:6f:41:89:fd:64:fc:93:9d:63:14:dd: d3:96:9b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwODIzMDMwOTM3WhcNMjUwODMwMDMwOTM3WjAYMRYwFAYD VQQDEw02OGE5MzBmMS02YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZYOcf9l4qzEK6vEECujRkJ9KITdDDTIR5pgOuiK0hPWXpWkdTgKy7mVSqep DGkLec3OKKfrhGJvLVzQ+KEHYEXoTZLHrZl609lUhmXetvm4DTTA9DE7lPhQN33T 5PLa8LTJq4GRk9VGXIwM1m3Y/nz67Blrdng3C7Y7D1PiCKtDkMpxyIE1bQ49XHuH 4rQW6SA3pffjn9wp7dZ26tWX0iPRhIJMVRqkgprzAIDL0kfBUq217bJUru/fc4kx HuTDZs/WzcBAcpQgazuK5BD4YJcGquMlmOo0RZ25WNjPKN2ep8z6HzWhdk/yq8g6 jaPo4haNpsJFmKGb28fLfJHlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClwbdjr 1VaNUBFWZGHhhGxcHqebMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFDLGiYtKqXEXAfwpOxrEjvMq/q16P95Vl2JPsj936zZxEln9Wk+h6 JL1tPuSVi8wR+oEM+ImkPBuSh2k70DiYAH4y4OBoEJe+eHWFUNuOLPEfbJxNx3Mb /RMduEbQR5vdHJNkxnxUbzVOcBGh2b48yOqeQK3zkFXKe1TLbItH4q+yirPX2KKH Ii5mKIChPpAFPh3LXnV1jqZINQK87XoAj6D0IElPRz61IuiaBydGPXVPxUnmfBkP MrcnCObK8YyTDKbrDBdck5c9zpHmnrqr605s7ITp3W8pOjHEfbSMaLwJSxCOQ/vf UZUvJQrjEwCyb0GJ/WT8k51jFN3TlpsY -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:54 2025 by rpki-client