$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: nS/Tu8EZg/1Hbztkr09Ze0OMLptOKcx7riq/Ji2w+cU= Subject key identifier: 7F:80:D1:C6:3D:12:11:09:BE:42:D0:41:97:69:B7:EE:EF:9C:14:25 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D41 Signing time: Fri 22 Aug 2025 18:07:31 +0000 Manifest this update: Fri 22 Aug 2025 18:07:30 +0000 Manifest next update: Fri 29 Aug 2025 18:07:30 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: YVeqmy3Ix2hqMXGAlXXv8cAC0IJ4fMxtALI0ULyUJ0I=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Aug 22 18:07:30 2025 GMT Not After : Aug 29 18:07:30 2025 GMT Subject: CN=68a8b1e3-a035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:45:cf:7b:54:ba:dc:93:62:5c:1b:20:10: 57:8d:8f:ab:38:14:cf:df:85:a9:1e:37:ce:05:12: 28:e3:fc:e5:7a:5e:be:a5:f2:91:47:86:c5:6d:de: dd:d2:69:f3:2e:aa:2a:71:e9:cf:ca:be:9c:80:80: 5f:74:b6:2e:cb:31:cb:40:b8:50:04:e0:2d:6e:e9: 8f:a7:c6:93:05:60:68:cc:c6:9e:36:f3:98:5f:e9: d7:90:ed:3d:94:b7:77:eb:87:d0:fa:cf:d4:f5:34: 91:f9:ad:49:03:2b:3e:1f:35:03:33:81:b0:c3:76: 86:93:2d:f5:56:ae:33:54:4c:b7:ec:ee:32:11:64: cb:82:06:81:55:a6:7e:49:1f:87:63:09:0f:72:40: c8:20:dc:22:34:33:24:49:82:db:92:7d:a0:2d:91: 5c:2f:41:df:77:80:73:af:5c:e6:66:4d:70:5a:cc: 88:b6:d2:5f:50:c6:51:60:27:7a:b9:69:55:5e:f7: 2f:bd:fc:7f:b8:1b:a9:f2:6b:93:e4:f6:c6:96:2d: 43:ae:88:df:a8:3b:79:cd:6f:56:44:34:e5:4d:c5: 52:24:01:61:5b:06:d3:19:bd:43:67:17:a6:07:f7: 5d:0c:3c:50:18:1d:bd:b3:2f:61:63:6f:26:02:50: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:D1:C6:3D:12:11:09:BE:42:D0:41:97:69:B7:EE:EF:9C:14:25 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f8:f3:a1:cd:8a:4b:ca:b9:19:79:49:42:9d:56:1d:e9:41: 5c:3c:b8:21:9c:2a:46:50:fb:54:ab:2e:f0:cf:b0:88:bf:09: 65:b9:8c:02:b0:7a:0b:d7:97:fe:8a:69:d7:a3:4b:90:27:40: 64:7c:f0:6d:16:d7:07:0a:95:b3:68:81:03:af:c5:23:2c:49: 8b:2c:01:70:97:0b:a4:a9:0e:69:02:7d:f7:7e:9a:73:ff:9f: 7a:a8:69:e0:49:63:dd:83:33:76:22:af:28:23:f7:71:1d:4e: 81:75:20:7b:10:44:f2:bb:09:ce:17:d1:f8:a6:20:40:1b:d1: f6:aa:5f:c2:6b:1a:16:58:47:55:29:13:00:8b:8a:ed:4e:3d: 52:2a:34:f0:37:6b:24:f9:54:8f:fd:b9:ad:c1:65:54:11:c8: 8d:e9:2f:ff:43:45:03:ae:22:77:af:87:5c:8d:77:81:50:24: 9e:df:11:3a:96:6b:56:c3:7d:04:0e:a8:0b:e0:cb:8f:ff:ab: 4f:e8:be:8c:c6:20:51:e5:e2:c3:67:c7:6a:18:73:c4:0b:04: e5:20:cc:3c:6e:e7:e9:dd:6a:d2:60:f4:2c:18:50:13:db:b8: 68:2b:21:15:ed:e6:98:4d:a9:bc:0c:3e:43:e1:fe:68:75:c8: d0:c5:89:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwODIyMTgwNzMwWhcNMjUwODI5MTgwNzMwWjAYMRYwFAYD VQQDEw02OGE4YjFlMy1hMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJpFz3tUutyTYlwbIBBXjY+rOBTP34WpHjfOBRIo4/zlel6+pfKRR4bFbd7d 0mnzLqoqcenPyr6cgIBfdLYuyzHLQLhQBOAtbumPp8aTBWBozMaeNvOYX+nXkO09 lLd364fQ+s/U9TSR+a1JAys+HzUDM4Gww3aGky31Vq4zVEy37O4yEWTLggaBVaZ+ SR+HYwkPckDIINwiNDMkSYLbkn2gLZFcL0Hfd4Bzr1zmZk1wWsyIttJfUMZRYCd6 uWlVXvcvvfx/uBup8muT5PbGli1DrojfqDt5zW9WRDTlTcVSJAFhWwbTGb1DZxem B/ddDDxQGB29sy9hY28mAlB/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+A0cY9 EhEJvkLQQZdpt+7vnBQlMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj+POhzYpLyrkZeUlCnVYd6UFcPLghnCpGUPtUqy7wz7CIvwlluYwC sHoL15f+imnXo0uQJ0BkfPBtFtcHCpWzaIEDr8UjLEmLLAFwlwukqQ5pAn33fppz /596qGngSWPdgzN2Iq8oI/dxHU6BdSB7EETyuwnOF9H4piBAG9H2ql/CaxoWWEdV KRMAi4rtTj1SKjTwN2sk+VSP/bmtwWVUEciN6S//Q0UDriJ3r4dcjXeBUCSe3xE6 lmtWw30EDqgL4MuP/6tP6L6MxiBR5eLDZ8dqGHPECwTlIMw8bufp3WrSYPQsGFAT 27hoKyEV7eaYTam8DD5D4f5odcjQxYlq -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:59 2025 by rpki-client