$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: BzV6ez5ABc4GwIY8z4MQNZJTaC+QpNhUERTcPpeo+Nw= Subject key identifier: 25:B4:49:D6:FA:F5:B6:2A:E1:2C:48:8E:0A:49:48:E3:76:E0:14:FC Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 01C5 Signing time: Sat 23 Aug 2025 03:15:40 +0000 Manifest this update: Sat 23 Aug 2025 03:15:39 +0000 Manifest next update: Sat 30 Aug 2025 03:15:39 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: LYGb7/oHXMtBryf7uS+XISZp2YIyU6smzzupUJjzsJs=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: eTkk2If6zpml/RuCza+brdDkrA2sYBq8cWe9+X2do9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Aug 23 03:15:39 2025 GMT Not After : Aug 30 03:15:39 2025 GMT Subject: CN=68a9325b-fd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d3:ad:86:49:c1:a2:f7:5b:7a:f8:ab:01:54: d5:b2:e6:2d:07:71:f1:b4:23:fe:32:4a:dd:97:38: 1c:89:43:ea:b3:37:8b:3c:08:a6:2e:cc:74:a6:67: 50:25:16:7a:34:9b:b2:a2:40:fa:8f:e7:19:75:32: 91:fb:e4:5d:8c:ef:65:5e:64:20:b6:58:dc:51:1b: b4:27:80:84:b0:e9:1b:2f:b4:b8:65:4d:e0:40:78: e0:61:ef:97:a0:22:28:46:91:70:a0:40:22:2d:3b: b5:81:f9:ff:0d:74:a2:b3:c3:68:34:48:59:1d:e8: 3a:c1:a8:3d:be:8a:06:5f:b9:8e:0f:d5:f5:0e:ac: b9:8b:6b:af:b5:0f:c3:a9:3f:70:3b:88:24:a3:3e: 8e:4b:ac:dc:21:39:4d:b0:68:97:a9:28:6c:0b:68: fc:54:ce:53:fc:e0:8d:98:c1:67:5b:05:d2:10:fa: 80:03:7e:46:3f:31:3d:02:a3:1a:d6:fc:48:ce:dd: 63:c3:78:9d:dc:7b:06:93:67:72:70:49:29:38:87: e0:de:e5:a3:39:e0:89:77:2c:8e:4a:8d:fb:a2:b7: 17:4b:84:24:bd:db:e9:bc:c1:49:25:fd:45:ae:14: e4:4b:26:25:8a:8e:32:0b:94:a5:11:fe:32:f9:77: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B4:49:D6:FA:F5:B6:2A:E1:2C:48:8E:0A:49:48:E3:76:E0:14:FC X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:57:da:32:9b:45:46:31:20:93:9b:e9:84:13:c5:3f:49:0b: d2:e2:2c:21:93:e7:55:96:38:22:64:55:66:1a:e3:0e:6a:58: 24:23:1d:8b:54:90:98:6a:8d:e8:87:d9:c2:dd:85:ed:3a:4a: b1:d5:53:25:79:8d:66:f8:a4:a7:35:2c:74:48:18:36:00:b3: b4:b7:a7:dc:2d:5f:03:04:b6:9a:20:24:3e:44:23:22:4f:35: 16:48:9d:f5:90:10:43:18:15:98:b1:32:11:bc:e8:98:00:e7: 01:96:d6:90:e1:bc:cc:e9:56:22:32:6e:e5:2b:57:1d:b2:8f: bc:21:93:be:c9:f9:b5:17:69:25:41:e2:0f:89:42:95:37:4d: a0:ab:09:1e:4d:97:16:74:05:2d:8b:46:47:c2:97:89:30:97: f2:06:c3:03:e6:bb:25:36:4b:d4:85:f3:34:ab:d2:50:11:31: 2f:32:2c:90:6b:11:69:93:d5:f4:06:54:48:5c:12:67:5d:25: 22:74:39:cc:b6:11:ff:93:aa:75:34:d5:a8:b4:84:d3:a1:bd: 8c:91:ba:f1:a4:6d:42:4d:b9:ca:2d:0e:25:63:d3:67:9e:bf: 30:b4:b0:48:ee:fa:5e:35:9c:d7:ef:16:02:e1:2c:0c:50:05: 12:1f:58:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUwODIzMDMxNTM5WhcNMjUwODMwMDMxNTM5WjAYMRYwFAYD VQQDEw02OGE5MzI1Yi1mZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69OthknBovdbevirAVTVsuYtB3HxtCP+MkrdlzgciUPqszeLPAimLsx0pmdQ JRZ6NJuyokD6j+cZdTKR++RdjO9lXmQgtljcURu0J4CEsOkbL7S4ZU3gQHjgYe+X oCIoRpFwoEAiLTu1gfn/DXSis8NoNEhZHeg6wag9vooGX7mOD9X1Dqy5i2uvtQ/D qT9wO4gkoz6OS6zcITlNsGiXqShsC2j8VM5T/OCNmMFnWwXSEPqAA35GPzE9AqMa 1vxIzt1jw3id3HsGk2dycEkpOIfg3uWjOeCJdyyOSo37orcXS4QkvdvpvMFJJf1F rhTkSyYlio4yC5SlEf4y+XfL/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW0Sdb6 9bYq4SxIjgpJSON24BT8MB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuV9oym0VGMSCTm+mEE8U/SQvS4iwhk+dVljgiZFVmGuMOalgkIx2L VJCYao3oh9nC3YXtOkqx1VMleY1m+KSnNSx0SBg2ALO0t6fcLV8DBLaaICQ+RCMi TzUWSJ31kBBDGBWYsTIRvOiYAOcBltaQ4bzM6VYiMm7lK1cdso+8IZO+yfm1F2kl QeIPiUKVN02gqwkeTZcWdAUti0ZHwpeJMJfyBsMD5rslNkvUhfM0q9JQETEvMiyQ axFpk9X0BlRIXBJnXSUidDnMthH/k6p1NNWotITTob2MkbrxpG1CTbnKLQ4lY9Nn nr8wtLBI7vpeNZzX7xYC4SwMUAUSH1gI -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:31 2025 by rpki-client