$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: DGF+Z0ghmBxqp6usxbn/CQnrsEXKobYuoZAm/iBVr8s= Subject key identifier: 10:0B:8B:A1:05:B5:88:06:37:B3:B5:84:B0:04:9E:40:6D:D8:E3:D0 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0CAA Signing time: Fri 22 Aug 2025 18:22:46 +0000 Manifest this update: Fri 22 Aug 2025 18:22:46 +0000 Manifest next update: Fri 29 Aug 2025 18:22:46 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: ZNzg8C7MDCySHixe9IaWCjlB6UkZ/JqLEhXjjdThnBk=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: ntAPfFwqMwW/14nODr1Kka3t3flJTGPxOyia+rG6hsc=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Aug 22 18:22:46 2025 GMT Not After : Aug 29 18:22:46 2025 GMT Subject: CN=68a8b576-f60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:bb:3f:23:db:2b:0c:66:49:3c:00:e1:83: ff:50:a0:7f:42:4f:a0:2e:9f:98:a4:67:40:47:ae: a8:c7:9c:50:41:3f:26:55:06:87:a6:d7:f0:11:2b: 1d:71:b2:f7:c3:84:f2:dd:77:c2:de:8a:db:fd:84: 8c:8d:d5:b3:06:31:70:49:69:53:45:fb:40:04:bc: 7e:f5:8a:05:e1:e6:7a:dd:3f:64:24:7a:a4:0f:32: d7:47:4c:00:12:72:7d:c9:4c:9a:1d:1c:16:e0:99: 16:62:b4:36:3b:93:71:24:01:97:ed:bd:da:e7:6d: e9:ae:6f:d9:e2:93:b3:ec:54:f0:55:b3:32:68:83: 99:bd:fa:6c:b8:e4:54:ca:d3:d8:bc:7b:78:70:a4: 12:bb:a4:bc:70:b7:c7:33:4f:6a:39:ea:67:28:fb: c2:e1:95:1b:52:d3:f8:ee:7f:4e:46:1a:c1:40:cc: 20:68:34:85:d6:c6:32:b4:09:65:ec:f7:14:ef:98: 52:fe:71:51:dc:f5:ec:f5:bb:22:62:64:e2:81:26: ec:a6:0e:5e:e9:10:56:b4:10:5c:e9:79:ed:31:2b: 3a:1f:86:19:d4:cb:c7:45:ad:b6:d5:9f:24:ee:e7: e9:80:2d:23:21:cc:47:9f:b3:99:88:e2:49:15:d6: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:8B:A1:05:B5:88:06:37:B3:B5:84:B0:04:9E:40:6D:D8:E3:D0 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:b7:a9:38:6a:0f:17:85:21:b0:01:a8:38:3e:d2:9f:dd: 18:44:29:b8:af:d9:bf:e0:35:3b:95:ae:99:fa:57:e1:f5:d9: d9:f2:11:7e:f2:57:a6:5a:a5:e9:90:18:7e:16:96:f5:78:81: 43:67:c2:5c:07:67:f9:95:aa:8a:3d:14:62:6e:99:0c:b5:ce: f7:fb:71:69:5e:b0:7c:05:9f:db:37:b6:32:9e:45:3d:bb:3f: 5b:7a:42:68:e0:98:5e:db:48:2d:43:32:af:90:36:cb:8d:fa: de:62:13:20:3e:ff:7f:2c:1c:a4:30:8c:d5:25:15:96:b4:1e: 24:ac:30:63:92:f8:62:3b:a4:51:ad:a2:28:99:35:f8:26:a8: 8d:a1:97:94:93:f1:da:b4:c2:6d:e0:b0:a4:50:88:65:5d:49: 29:e3:87:d9:01:62:0e:c0:e2:4d:6a:19:b2:ba:2d:98:19:a6: da:7d:1e:5f:10:64:cb:73:4f:31:e0:b6:98:b2:07:56:3a:1b: a5:b3:5f:5f:1a:34:19:75:39:18:bb:f5:09:19:18:01:67:70: 6e:64:92:7f:30:00:ff:45:c3:82:5d:09:a4:c6:7e:be:62:70: 5e:48:76:a7:7c:29:6b:1e:ad:a5:95:92:b7:aa:4e:f7:e2:b8: 65:33:d4:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUwODIyMTgyMjQ2WhcNMjUwODI5MTgyMjQ2WjAYMRYwFAYD VQQDEw02OGE4YjU3Ni1mNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlK7PyPbKwxmSTwA4YP/UKB/Qk+gLp+YpGdAR66ox5xQQT8mVQaHptfwESsd cbL3w4Ty3XfC3orb/YSMjdWzBjFwSWlTRftABLx+9YoF4eZ63T9kJHqkDzLXR0wA EnJ9yUyaHRwW4JkWYrQ2O5NxJAGX7b3a523prm/Z4pOz7FTwVbMyaIOZvfpsuORU ytPYvHt4cKQSu6S8cLfHM09qOepnKPvC4ZUbUtP47n9ORhrBQMwgaDSF1sYytAll 7PcU75hS/nFR3PXs9bsiYmTigSbspg5e6RBWtBBc6XntMSs6H4YZ1MvHRa221Z8k 7ufpgC0jIcxHn7OZiOJJFdY+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBALi6EF tYgGN7O1hLAEnkBt2OPQMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTDLepOGoPF4UhsAGoOD7Sn90YRCm4r9m/4DU7la6Z+lfh9dnZ8hF+ 8lemWqXpkBh+Fpb1eIFDZ8JcB2f5laqKPRRibpkMtc73+3FpXrB8BZ/bN7YynkU9 uz9bekJo4Jhe20gtQzKvkDbLjfreYhMgPv9/LBykMIzVJRWWtB4krDBjkvhiO6RR raIomTX4JqiNoZeUk/HatMJt4LCkUIhlXUkp44fZAWIOwOJNahmyui2YGabafR5f EGTLc08x4LaYsgdWOhuls19fGjQZdTkYu/UJGRgBZ3BuZJJ/MAD/RcOCXQmkxn6+ YnBeSHanfClrHq2llZK3qk734rhlM9R8 -----END CERTIFICATE-----Generated at Sun Aug 24 01:03:15 2025 by rpki-client