$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: zdSsK3oJGYTgsUkuFvh+x2IQOTR23Z0ejGw5bpb6DJs= Subject key identifier: 1F:9F:63:8E:86:E2:79:16:9E:3B:46:B1:50:15:51:E1:B1:BD:30:DE Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 0158 Signing time: Sat 23 Aug 2025 04:17:13 +0000 Manifest this update: Sat 23 Aug 2025 04:17:12 +0000 Manifest next update: Sat 30 Aug 2025 04:17:12 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: AB8gPlc4OeOwQUpsRkW5M6L5qM2SNCuL3d8k3SYYeq0=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Aug 23 04:17:12 2025 GMT Not After : Aug 30 04:17:12 2025 GMT Subject: CN=68a940c9-d8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:21:ba:b6:45:8e:50:61:97:ac:30:d8:98: 2e:7d:f0:3a:f7:71:1c:37:5e:0c:70:eb:db:73:72: dd:c1:40:20:27:dc:35:2a:13:e6:8e:3f:01:86:49: 8e:81:d2:e7:7e:72:05:9b:95:bf:a0:d6:77:17:b2: e2:49:81:9e:58:2a:8f:d7:08:1e:63:3e:aa:4c:58: ce:58:69:9b:4b:5e:66:02:9f:e6:52:63:bf:d7:ce: 03:2a:a6:d1:ed:3f:85:32:b3:b6:c7:49:01:e2:0c: 26:2c:7d:3d:c5:79:9d:60:3d:2d:08:3d:c7:47:f9: 5e:1d:49:a6:5f:2f:98:ee:4c:44:a2:3c:d8:4a:99: c7:ef:d1:82:7f:e4:39:3e:7e:0c:42:cd:60:3d:11: e5:5a:40:16:19:c1:65:83:dc:ca:84:f7:de:77:0a: 5c:3b:72:08:57:84:5e:b1:47:2e:16:8f:92:a9:71: bd:af:84:dd:26:8f:40:88:83:b5:81:b3:c1:cc:13: bc:28:ff:fe:c3:14:a9:e7:7a:3b:c4:e9:e8:79:91: 43:05:1d:d9:8e:07:b1:bd:26:88:0c:dc:82:f8:57: aa:28:0c:9d:95:6c:8c:1d:0f:9e:db:c7:0e:e1:f5: 64:ea:d3:5a:43:12:c1:ff:32:6e:be:c5:e8:4c:55: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:63:8E:86:E2:79:16:9E:3B:46:B1:50:15:51:E1:B1:BD:30:DE X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dd:7f:33:7c:e1:b2:c5:59:3b:a9:ae:ba:6a:79:54:89:f1: d8:34:26:b9:82:c2:b8:a6:c8:af:7d:11:25:a4:f4:c0:e2:0e: 2a:0b:01:1b:ff:fe:ed:4b:73:de:01:e9:30:8d:41:0d:08:de: 1a:bf:63:5c:04:f5:44:79:14:99:da:c5:23:08:98:3c:d9:75: 13:b2:68:59:80:af:45:37:48:05:5f:e5:9a:ae:a5:38:ce:9f: 15:4c:3d:06:a6:22:3e:cc:86:84:bb:2d:1b:14:bc:44:1d:89: 9b:d2:29:07:a2:f5:0f:14:87:36:aa:f9:d4:02:c4:0c:2f:02: 9f:1a:a8:6f:d7:ba:e6:8c:0d:3b:21:70:ae:c4:a8:c4:67:b7: 4a:19:32:3d:4a:59:1e:ff:cd:ca:b5:a6:ef:cb:c8:d6:c0:f8: eb:3b:a7:b6:62:6e:3d:55:92:4c:05:c0:77:61:08:1a:9a:a0: 16:c2:bc:81:e6:05:a5:81:0b:b9:f2:22:1d:a3:4e:e4:d3:77: 56:00:b9:2a:ce:6a:ae:86:8d:4c:1c:83:e5:4b:ff:0d:52:d9: 06:6b:c2:bc:f6:ea:20:3d:50:9b:2a:20:13:76:c6:77:68:f7: 67:0c:00:cf:7a:d7:40:7c:ff:93:e7:62:74:8a:2a:7f:9f:43: b9:6f:ca:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUwODIzMDQxNzEyWhcNMjUwODMwMDQxNzEyWjAYMRYwFAYD VQQDEw02OGE5NDBjOS1kOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfEhurZFjlBhl6ww2JguffA693EcN14McOvbc3LdwUAgJ9w1KhPmjj8BhkmO gdLnfnIFm5W/oNZ3F7LiSYGeWCqP1wgeYz6qTFjOWGmbS15mAp/mUmO/184DKqbR 7T+FMrO2x0kB4gwmLH09xXmdYD0tCD3HR/leHUmmXy+Y7kxEojzYSpnH79GCf+Q5 Pn4MQs1gPRHlWkAWGcFlg9zKhPfedwpcO3IIV4ResUcuFo+SqXG9r4TdJo9AiIO1 gbPBzBO8KP/+wxSp53o7xOnoeZFDBR3ZjgexvSaIDNyC+FeqKAydlWyMHQ+e28cO 4fVk6tNaQxLB/zJuvsXoTFWoswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+fY46G 4nkWnjtGsVAVUeGxvTDeMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3X8zfOGyxVk7qa66anlUifHYNCa5gsK4psivfRElpPTA4g4qCwEb //7tS3PeAekwjUENCN4av2NcBPVEeRSZ2sUjCJg82XUTsmhZgK9FN0gFX+WarqU4 zp8VTD0GpiI+zIaEuy0bFLxEHYmb0ikHovUPFIc2qvnUAsQMLwKfGqhv17rmjA07 IXCuxKjEZ7dKGTI9Slke/83Ktabvy8jWwPjrO6e2Ym49VZJMBcB3YQgamqAWwryB 5gWlgQu58iIdo07k03dWALkqzmquho1MHIPlS/8NUtkGa8K89uogPVCbKiATdsZ3 aPdnDADPetdAfP+T52J0iip/n0O5b8qW -----END CERTIFICATE-----Generated at Sat Aug 23 11:43:13 2025 by rpki-client