$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: g3G/5gv7OiNMLwztcnViDbGXvHAmPadBWywF8I0ccRA= Subject key identifier: 25:C3:B3:46:56:70:4F:D3:26:FA:85:64:41:EB:04:9D:5C:E3:C1:F4 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 30 Signing time: Sat 23 Aug 2025 07:54:48 +0000 Manifest this update: Sat 23 Aug 2025 07:54:48 +0000 Manifest next update: Sat 30 Aug 2025 07:54:48 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: YtpT2Wc57etwCZa5tnIqg1Q7el9xJDTIKqUIN/5aSwo=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Aug 23 07:54:48 2025 GMT Not After : Aug 30 07:54:48 2025 GMT Subject: CN=68a973c8-e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:37:ec:99:cb:ae:08:6d:cc:9c:9e:fa:f1: 65:02:01:de:9b:bc:e0:19:e1:c3:a7:57:cd:c8:30: 11:14:c4:7f:64:ef:92:e8:68:a4:85:85:92:27:94: e7:c4:17:72:b2:b9:09:14:b4:2b:de:be:9e:1c:4d: f5:dd:9a:1e:c8:dc:53:c8:11:91:20:51:31:8d:dc: 26:dd:be:2b:d1:2a:67:2e:2f:c3:78:23:4e:bb:9c: 66:c9:75:eb:51:1c:25:ef:d7:95:d9:5f:f1:fb:7c: c7:0c:24:fc:7a:e0:30:66:4c:79:98:12:82:61:1c: 94:ba:ee:97:8f:59:c2:13:ba:6e:f9:af:50:96:76: c0:80:3a:89:07:14:86:35:c1:f9:9b:cc:12:00:4d: 2c:46:32:a6:56:2c:51:b3:84:44:4f:59:49:f5:2d: 3f:48:44:d2:3c:c3:40:e8:3e:09:07:6d:8f:56:14: 05:f5:6a:7c:64:2f:82:0c:eb:62:1f:4d:fe:ea:f3: 9d:5e:83:c4:08:2e:82:0b:da:f8:84:d8:90:6a:e6: 48:e6:2e:6e:3b:4a:cc:42:43:fa:03:cf:7f:a4:68: a2:e0:36:50:ba:97:4c:f9:82:f6:17:4d:77:22:f3: ed:39:ad:2a:a9:02:fb:ed:be:4a:7b:27:1d:5f:2d: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:B3:46:56:70:4F:D3:26:FA:85:64:41:EB:04:9D:5C:E3:C1:F4 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:48:34:ea:25:26:62:4f:de:51:22:b5:86:56:5e:7c:f1:d5: b2:c1:73:ba:ff:bf:31:ce:5c:d3:65:62:8c:f4:6c:b7:0b:52: 79:82:c2:ba:29:b7:9f:4e:ab:75:fc:eb:83:3d:e6:a0:d9:8e: e1:8d:7b:fd:f1:3e:eb:7e:f8:ad:52:3c:62:02:76:5d:58:9b: 65:e7:4f:43:a8:e0:11:2b:69:c6:3e:17:9e:81:cf:28:f6:2f: 5e:4d:0c:e0:1e:b4:43:e1:dd:b3:79:08:f6:fc:77:21:12:aa: 38:1e:1d:4c:15:fd:68:72:df:79:fe:e9:78:e1:e7:f2:8f:75: 4d:07:9b:c0:a2:03:59:4f:21:8b:53:c1:7e:73:d2:8f:4e:9c: 8b:27:8e:a0:67:48:b9:1c:38:51:89:be:f8:cb:76:9c:99:a9: 61:d4:b9:4f:03:3f:41:60:30:86:66:23:6a:cd:52:2e:92:16: 38:ec:9c:dc:cf:ad:d2:ca:2e:af:e2:0d:4f:5d:36:ac:d5:53: ca:6f:40:25:3e:4e:2c:cd:04:98:60:3e:52:82:fd:81:cf:00: 21:48:f2:eb:59:97:c8:42:4f:49:14:df:2a:36:33:e5:bf:d2: 22:61:c4:64:c5:b3:23:f6:62:8d:07:0d:c6:5c:56:50:ea:be: 8f:db:aa:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA4MjMwNzU0NDhaFw0yNTA4MzAwNzU0NDhaMBgxFjAUBgNV BAMTDTY4YTk3M2M4LWU1NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZlzfsmcuuCG3MnJ768WUCAd6bvOAZ4cOnV83IMBEUxH9k75LoaKSFhZInlOfE F3KyuQkUtCvevp4cTfXdmh7I3FPIEZEgUTGN3CbdvivRKmcuL8N4I067nGbJdetR HCXv15XZX/H7fMcMJPx64DBmTHmYEoJhHJS67pePWcITum75r1CWdsCAOokHFIY1 wfmbzBIATSxGMqZWLFGzhERPWUn1LT9IRNI8w0DoPgkHbY9WFAX1anxkL4IM62If Tf7q851eg8QILoIL2viE2JBq5kjmLm47SsxCQ/oDz3+kaKLgNlC6l0z5gvYXTXci 8+05rSqpAvvtvkp7Jx1fLf47AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJcOzRlZw T9Mm+oVkQesEnVzjwfQwHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJINOolJmJP3lEitYZWXnzx1bLBc7r/vzHOXNNlYoz0bLcLUnmCwrop t59Oq3X864M95qDZjuGNe/3xPut++K1SPGICdl1Ym2XnT0Oo4BEracY+F56Bzyj2 L15NDOAetEPh3bN5CPb8dyESqjgeHUwV/Why33n+6Xjh5/KPdU0Hm8CiA1lPIYtT wX5z0o9OnIsnjqBnSLkcOFGJvvjLdpyZqWHUuU8DP0FgMIZmI2rNUi6SFjjsnNzP rdLKLq/iDU9dNqzVU8pvQCU+TizNBJhgPlKC/YHPACFI8utZl8hCT0kU3yo2M+W/ 0iJhxGTFsyP2Yo0HDcZcVlDqvo/bqvs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:32 2025 by rpki-client