$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: TO0U/nH7DzZdmdWsSPCnfxuxKsni8EnYlzmYYUE4M+A= Subject key identifier: E5:9F:29:27:24:BC:62:1E:AD:6F:18:74:97:03:BD:8D:F4:59:4F:95 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: E9 Signing time: Sat 23 Aug 2025 05:35:07 +0000 Manifest this update: Sat 23 Aug 2025 05:35:07 +0000 Manifest next update: Sat 30 Aug 2025 05:35:07 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: jvRa1ym458VjgwUxHwpgsSUerf8o4dnD+Z1OquMUISA=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Aug 23 05:35:07 2025 GMT Not After : Aug 30 05:35:07 2025 GMT Subject: CN=68a9530b-1e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:af:78:eb:6f:f3:70:d8:16:95:f9:91:da: d7:55:3b:85:39:6e:9b:49:d4:f0:37:45:66:42:f0: 5a:00:a5:dc:8c:18:1d:df:3d:69:da:09:43:47:1f: 6d:a7:92:cd:0e:fb:40:b8:07:c0:8d:96:31:ae:84: 32:75:4a:21:36:30:d3:46:9a:aa:86:4f:5c:1b:8e: 1c:77:38:4f:85:9a:24:24:04:1a:20:33:ee:73:64: b2:02:59:07:a9:eb:81:71:b0:3e:e4:fe:92:b3:c2: d1:b3:45:69:48:30:b1:5a:af:35:95:c9:7f:dd:76: 6b:38:72:29:b2:bd:43:19:54:25:86:03:7b:00:a0: f5:21:15:15:88:e8:70:c6:b1:d4:13:be:a7:26:7e: 2c:7e:8a:fb:32:92:2c:57:07:b7:3d:80:08:9a:91: c2:95:2d:65:55:16:e1:6f:22:95:30:70:1c:d3:00: ee:4c:54:d4:ae:d4:de:7b:7f:17:de:29:1b:96:d2: ee:ea:8f:ec:b9:7c:eb:5c:d6:ad:1e:0a:46:5d:c4: 44:e7:0e:de:33:13:18:b7:82:41:81:e0:24:5b:0d: 1c:6a:72:1a:ba:ce:b4:06:52:58:22:1d:ac:15:03: 89:6b:d3:1a:ef:2c:02:52:db:70:34:f0:22:d1:c2: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:29:27:24:BC:62:1E:AD:6F:18:74:97:03:BD:8D:F4:59:4F:95 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a9:a8:dd:47:10:b4:24:66:ee:30:29:37:d1:a2:dd:32:e5: 4e:05:f1:a7:32:eb:de:45:71:ec:21:a7:a7:ff:bd:40:04:9a: 0f:a2:5a:59:aa:d5:44:61:38:aa:a7:4c:4e:cd:43:54:cb:87: 34:12:e4:22:a3:b7:4a:55:8a:20:49:93:1e:68:63:6e:1e:cd: 91:ad:e2:15:d2:ef:2c:5f:e0:92:60:6d:68:f8:62:d7:0f:1f: 2e:79:dc:5a:d9:30:6d:7d:7e:2e:16:84:25:bf:41:4c:9e:a4: bd:ac:28:7d:19:cb:46:ca:a7:f8:d1:e8:16:b9:81:1a:fd:5a: 84:00:a1:71:e8:7a:c4:7e:61:56:f6:e4:d7:64:21:ee:ca:d4: 55:5c:24:3e:62:f9:53:82:ab:6b:86:7a:d3:17:4a:2f:cb:92: f8:2c:24:bd:45:ee:c6:39:54:bb:8e:fe:64:d5:39:1f:24:7d: 7e:b9:59:4d:01:ee:c8:50:0d:9e:b3:0e:b5:c9:02:9b:e1:4b: 93:b9:8e:f8:1f:f6:74:fb:86:fe:cb:91:09:6d:6d:97:ab:e3: c1:53:3d:ca:4b:c7:67:bf:09:ef:e9:d9:91:5a:27:a7:6d:36: d2:2f:5a:ba:ad:91:2c:8f:45:df:4b:e7:85:3f:18:c0:1d:71: 38:4e:b6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwODIzMDUzNTA3WhcNMjUwODMwMDUzNTA3WjAYMRYwFAYD VQQDEw02OGE5NTMwYi0xZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2duveOtv83DYFpX5kdrXVTuFOW6bSdTwN0VmQvBaAKXcjBgd3z1p2glDRx9t p5LNDvtAuAfAjZYxroQydUohNjDTRpqqhk9cG44cdzhPhZokJAQaIDPuc2SyAlkH qeuBcbA+5P6Ss8LRs0VpSDCxWq81lcl/3XZrOHIpsr1DGVQlhgN7AKD1IRUViOhw xrHUE76nJn4sfor7MpIsVwe3PYAImpHClS1lVRbhbyKVMHAc0wDuTFTUrtTee38X 3ikbltLu6o/suXzrXNatHgpGXcRE5w7eMxMYt4JBgeAkWw0canIaus60BlJYIh2s FQOJa9Ma7ywCUttwNPAi0cJ+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWfKSck vGIerW8YdJcDvY30WU+VMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWqajdRxC0JGbuMCk30aLdMuVOBfGnMuveRXHsIaen/71ABJoPolpZ qtVEYTiqp0xOzUNUy4c0EuQio7dKVYogSZMeaGNuHs2RreIV0u8sX+CSYG1o+GLX Dx8uedxa2TBtfX4uFoQlv0FMnqS9rCh9GctGyqf40egWuYEa/VqEAKFx6HrEfmFW 9uTXZCHuytRVXCQ+YvlTgqtrhnrTF0ovy5L4LCS9Re7GOVS7jv5k1TkfJH1+uVlN Ae7IUA2esw61yQKb4UuTuY74H/Z0+4b+y5EJbW2Xq+PBUz3KS8dnvwnv6dmRWien bTbSL1q6rZEsj0XfS+eFPxjAHXE4TraY -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:07 2025 by rpki-client