$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: 5XQWOARoFXhOz+OXqjVSMbctcA2NsAN7GEl5eR6GlE4= Subject key identifier: 4B:D7:D4:14:C7:F5:6E:50:02:AF:CB:2E:69:2C:71:E2:B9:D6:04:1F Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 04B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 04AE Signing time: Sat 23 Aug 2025 00:07:52 +0000 Manifest this update: Sat 23 Aug 2025 00:07:51 +0000 Manifest next update: Sat 30 Aug 2025 00:07:51 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: ctKPJptXgH19v4qGK6EX/5rXYGKuaqi1pMvscAIxG0s=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: oCq0GS/e8jzWI+qfCm+Q9EBQNv1mP52MN9gsJPInZfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: Aug 23 00:07:51 2025 GMT Not After : Aug 30 00:07:51 2025 GMT Subject: CN=68a90657-e15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:93:f5:a3:cc:66:8a:6e:c0:64:fa:b2:35: d5:92:2c:2c:0f:69:d9:0d:6e:e3:c9:84:eb:1c:ab: a4:5d:a2:81:34:1c:43:40:8c:31:25:fb:e2:82:d4: 74:3c:fa:56:80:76:0c:27:80:e3:5b:f5:83:b8:67: f8:14:fc:30:4a:9e:71:ea:b9:b0:c7:65:59:6f:e4: 82:65:ff:20:10:89:4f:0a:c6:93:34:72:55:df:51: f9:6f:e8:4f:e6:75:02:de:e4:6b:41:e3:38:2a:c3: 6d:77:e3:63:48:af:ae:99:b5:8f:b5:49:05:28:67: ce:49:20:31:10:1e:7a:d3:94:15:ef:5f:d6:66:0c: ce:d8:5d:79:5d:f8:8a:33:f3:6c:b4:0e:3b:6f:f5: 8f:38:5f:eb:af:90:73:77:75:70:4b:8d:c1:54:be: 2f:36:35:fc:93:11:7d:27:11:bc:a3:35:46:4d:a4: 19:e1:53:a6:d8:b7:c0:70:a5:6e:5c:62:20:54:cd: 2d:35:d0:75:5f:c0:72:51:08:45:e4:12:71:1d:4a: b0:85:99:05:f6:69:38:56:74:f8:cf:71:59:03:59: 7d:9a:51:7b:ec:b5:77:4b:0a:b8:90:92:0a:22:ac: 3d:97:84:b6:b7:bd:28:9e:5f:85:4d:11:fa:6f:d9: 5c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:D4:14:C7:F5:6E:50:02:AF:CB:2E:69:2C:71:E2:B9:D6:04:1F X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:76:ec:29:ca:e1:54:18:d7:d5:ea:0c:80:ba:34:db:92:56: 02:e9:d1:77:9c:47:9b:32:ff:75:88:44:a7:d6:19:e6:43:e3: 33:cd:de:a1:91:ed:9f:ee:75:17:07:25:c5:ac:05:21:52:f3: 66:60:fa:22:ba:cc:48:45:04:69:64:c3:f1:c5:f4:5f:28:db: cc:6a:7f:7a:26:1e:f0:f5:05:5b:3f:d2:c0:4d:8e:97:ff:a1: ab:73:02:53:74:ab:a2:c7:bb:3f:7c:29:74:21:16:83:ca:9e: 0a:7b:53:c9:f5:bd:c5:9d:61:a6:37:c0:63:a4:21:e5:6f:62: 38:1f:30:38:44:2e:c7:28:a2:b3:43:a9:02:54:0a:70:d8:53: 8d:6f:bd:10:ef:d8:ca:c5:73:05:d6:f7:2c:50:29:f5:51:b7: 70:86:68:b4:ef:95:fc:b4:70:9e:c4:3b:e5:1f:a6:f5:c6:de: 42:70:05:01:c1:10:99:76:4f:2d:43:b3:47:6b:bf:f6:fe:4c: ba:8d:20:ea:8a:12:53:b7:a6:66:8a:7c:a1:10:66:02:51:df: 6e:62:ea:c9:da:b8:b7:3b:9c:d1:7f:d3:d9:7d:9c:24:f7:29: 71:9f:89:17:6b:3a:df:b6:64:90:38:88:d7:78:8d:8c:8e:4f: 6a:75:a4:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjUwODIzMDAwNzUxWhcNMjUwODMwMDAwNzUxWjAYMRYwFAYD VQQDEw02OGE5MDY1Ny1lMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AWT9aPMZopuwGT6sjXVkiwsD2nZDW7jyYTrHKukXaKBNBxDQIwxJfvigtR0 PPpWgHYMJ4DjW/WDuGf4FPwwSp5x6rmwx2VZb+SCZf8gEIlPCsaTNHJV31H5b+hP 5nUC3uRrQeM4KsNtd+NjSK+umbWPtUkFKGfOSSAxEB5605QV71/WZgzO2F15XfiK M/NstA47b/WPOF/rr5Bzd3VwS43BVL4vNjX8kxF9JxG8ozVGTaQZ4VOm2LfAcKVu XGIgVM0tNdB1X8ByUQhF5BJxHUqwhZkF9mk4VnT4z3FZA1l9mlF77LV3Swq4kJIK Iqw9l4S2t70onl+FTRH6b9lcIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvX1BTH 9W5QAq/LLmksceK51gQfMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/duwpyuFUGNfV6gyAujTbklYC6dF3nEebMv91iESn1hnmQ+Mzzd6h ke2f7nUXByXFrAUhUvNmYPoiusxIRQRpZMPxxfRfKNvMan96Jh7w9QVbP9LATY6X /6GrcwJTdKuix7s/fCl0IRaDyp4Ke1PJ9b3FnWGmN8BjpCHlb2I4HzA4RC7HKKKz Q6kCVApw2FONb70Q79jKxXMF1vcsUCn1Ubdwhmi075X8tHCexDvlH6b1xt5CcAUB wRCZdk8tQ7NHa7/2/ky6jSDqihJTt6ZminyhEGYCUd9uYurJ2ri3O5zRf9PZfZwk 9ylxn4kXazrftmSQOIjXeI2Mjk9qdaRW -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:54 2025 by rpki-client