$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: z/fzS4fOUioreIJMKatWa3Rf8oT7GF6CXPOqDJj9kFk= Subject key identifier: 28:C1:24:14:B6:10:6F:66:B9:93:70:34:CE:D6:79:53:F3:B8:10:54 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 07AF Signing time: Fri 22 Aug 2025 21:25:50 +0000 Manifest this update: Fri 22 Aug 2025 21:25:49 +0000 Manifest next update: Fri 29 Aug 2025 21:25:49 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: 1HJrtZKN97zP+ZsxTRVRifyW7IWh4YhEPyepxMN6Elw=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Aug 22 21:25:49 2025 GMT Not After : Aug 29 21:25:49 2025 GMT Subject: CN=68a8e05d-3e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:56:ee:d1:46:c6:cd:c2:64:24:09:21:51:28: 7c:70:86:37:76:39:0e:9e:b6:75:b3:dc:db:3c:37: 2c:ab:8c:d2:bc:89:73:39:ff:16:63:ef:c2:84:62: 20:f4:a5:4b:44:21:3e:67:53:be:82:f2:1b:75:29: a3:c8:9b:8e:02:d1:13:77:71:b0:f8:06:80:c0:92: 74:ef:3f:bc:89:1f:73:e1:71:36:12:e9:a5:9a:91: 6d:b2:68:b8:23:e6:e0:b3:3e:c3:dd:cf:de:72:82: 7d:79:ff:0f:64:7b:b5:3b:0b:68:b4:32:7d:2e:00: b8:08:a3:46:4b:eb:b2:de:17:d1:d2:9c:bd:de:aa: 3a:cf:01:0e:26:df:06:6c:ed:52:0f:34:bd:d8:44: 6d:f8:ff:17:52:92:f1:f2:45:e2:5f:ca:29:eb:84: 38:b3:be:2e:b7:8d:b8:89:07:51:02:33:30:75:06: 2c:5f:83:29:08:49:e7:35:ce:09:a2:da:ea:e1:94: 93:8d:55:87:7b:21:3a:71:1f:08:d3:33:88:07:02: e0:8a:31:f3:b1:57:ac:13:0c:26:af:c6:d8:a7:09: 27:d5:c2:0a:c9:70:ed:02:19:59:8e:ce:ad:62:90: 80:79:3b:d3:9d:48:8e:ef:33:3e:20:31:c0:46:3b: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C1:24:14:B6:10:6F:66:B9:93:70:34:CE:D6:79:53:F3:B8:10:54 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3f:31:33:b6:66:34:bc:58:fd:35:90:f7:88:88:2d:89:c6: 04:f2:4b:69:19:df:a5:b0:67:c6:9d:5a:a0:0d:4c:b6:ce:ca: 48:4a:7c:ab:c3:91:f0:41:14:07:4f:3d:c6:67:b8:56:5a:86: 14:e1:db:be:aa:74:63:84:30:8d:3e:d9:80:28:bf:4f:34:de: 01:34:5e:d1:19:23:e9:31:08:1d:b5:60:29:38:80:52:d5:53: 47:dd:50:71:56:0f:ed:16:e5:16:08:ab:a4:32:39:70:52:29: 58:f3:40:31:d1:22:6a:ac:ea:7a:83:2b:8a:fc:a5:b5:21:34: 0c:fa:0b:ab:8b:6c:87:49:7e:06:fd:fa:89:73:20:da:4c:f7: 37:48:e9:9f:1e:1f:5d:4f:7e:a6:3f:24:4d:d6:49:df:8f:ba: 35:a5:fe:6f:bd:f7:03:d6:52:33:cb:90:a8:a3:c7:90:53:4f: 40:90:4c:8c:17:55:55:27:03:57:20:88:8b:49:cf:ec:b4:9f: 23:d4:8a:e2:9d:27:67:f8:a4:87:db:5a:46:d2:a0:b1:d2:83: c6:8b:b2:c5:f3:70:ec:f0:8c:ef:d9:81:9a:67:2a:42:d8:4b: ff:cb:52:a1:32:e2:4c:64:75:ed:d0:79:2e:02:bd:cb:42:10: 0d:79:03:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUwODIyMjEyNTQ5WhcNMjUwODI5MjEyNTQ5WjAYMRYwFAYD VQQDEw02OGE4ZTA1ZC0zZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21bu0UbGzcJkJAkhUSh8cIY3djkOnrZ1s9zbPDcsq4zSvIlzOf8WY+/ChGIg 9KVLRCE+Z1O+gvIbdSmjyJuOAtETd3Gw+AaAwJJ07z+8iR9z4XE2EumlmpFtsmi4 I+bgsz7D3c/ecoJ9ef8PZHu1OwtotDJ9LgC4CKNGS+uy3hfR0py93qo6zwEOJt8G bO1SDzS92ERt+P8XUpLx8kXiX8op64Q4s74ut424iQdRAjMwdQYsX4MpCEnnNc4J otrq4ZSTjVWHeyE6cR8I0zOIBwLgijHzsVesEwwmr8bYpwkn1cIKyXDtAhlZjs6t YpCAeTvTnUiO7zM+IDHARjtV5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjBJBS2 EG9muZNwNM7WeVPzuBBUMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPPzEztmY0vFj9NZD3iIgticYE8ktpGd+lsGfGnVqgDUy2zspISnyr w5HwQRQHTz3GZ7hWWoYU4du+qnRjhDCNPtmAKL9PNN4BNF7RGSPpMQgdtWApOIBS 1VNH3VBxVg/tFuUWCKukMjlwUilY80Ax0SJqrOp6gyuK/KW1ITQM+guri2yHSX4G /fqJcyDaTPc3SOmfHh9dT36mPyRN1knfj7o1pf5vvfcD1lIzy5Coo8eQU09AkEyM F1VVJwNXIIiLSc/stJ8j1IrinSdn+KSH21pG0qCx0oPGi7LF83Ds8Izv2YGaZypC 2Ev/y1KhMuJMZHXt0HkuAr3LQhANeQP1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:19 2025 by rpki-client