$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: tmJTxjSVE+NMhtwlPAVoAJ8kAxnXpnL78bP2iIEG0tI= Subject key identifier: B6:3F:BC:05:CA:B5:BC:5C:44:C4:94:47:77:9C:F3:D3:C6:A9:33:D0 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E1C Signing time: Fri 22 Aug 2025 17:57:26 +0000 Manifest this update: Fri 22 Aug 2025 17:57:25 +0000 Manifest next update: Fri 29 Aug 2025 17:57:25 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: VF/atGpTWYyO1gWnxdmGSWwBV+mUOmzxG0OLfuyevXQ=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3637 (0xe35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Aug 22 17:57:25 2025 GMT Not After : Aug 29 17:57:25 2025 GMT Subject: CN=68a8af85-a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:ec:bf:7e:2d:ed:35:c8:13:f5:63:89:e5: ac:7d:3e:0e:30:8f:c3:42:82:c1:12:70:3a:8c:4e: 5b:16:b3:85:d0:32:bd:1e:df:75:88:5d:01:13:d9: 74:68:a1:ea:0d:d6:51:3a:98:14:0f:4b:ae:cc:e4: 7a:95:6c:9f:f5:60:f7:5c:b2:de:8a:41:42:1d:9a: a1:ac:9c:c0:54:18:5e:69:17:e3:46:db:06:2a:fe: 8c:fc:48:40:91:22:0e:cc:9d:1a:82:19:23:9e:32: 75:dd:28:01:82:f9:e6:6c:13:7f:94:ea:2e:e6:44: c1:1c:1f:f0:a7:0a:87:6c:dc:1a:40:56:ea:3b:1c: 25:c5:bb:85:c9:8f:4b:1b:b7:6c:0e:1c:5e:fe:4f: c9:2d:2e:34:05:ec:11:4f:b6:51:29:ad:79:a3:34: 57:8d:07:05:0a:e0:8c:cf:c1:81:bc:3b:4e:34:30: 5c:d8:4a:fc:93:e1:8c:d3:fa:59:c2:e6:5c:53:7a: 42:13:20:7c:27:12:b0:a7:c2:c4:0b:d3:0f:e3:d6: 4b:01:17:64:c4:81:10:3a:83:f3:0c:3a:7e:a6:7a: c1:ee:8e:34:64:cd:94:b9:01:e0:f6:1c:dc:bd:6c: 10:f0:3c:8a:da:b9:60:40:0a:20:7d:dc:6e:6d:a4: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:BC:05:CA:B5:BC:5C:44:C4:94:47:77:9C:F3:D3:C6:A9:33:D0 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:de:5b:34:13:df:f8:db:66:b1:48:44:29:89:8c:3a:d1:53: f1:40:b4:22:11:ab:56:c4:35:d4:68:77:fe:bf:05:ec:45:71: 94:77:47:ac:1a:9f:45:fa:e8:ce:8f:15:e8:0b:62:c4:14:d5: f1:b3:72:88:04:b7:57:8c:30:e3:95:90:f1:4c:43:4c:c8:39: b6:0c:70:50:d1:a3:a8:fd:8b:65:e7:fc:dc:bb:9c:96:43:58: 66:bd:34:32:f2:18:d4:75:9d:12:80:59:da:21:6f:9b:87:4f: 8c:07:a0:36:4d:f6:25:93:e6:46:e2:bf:0a:c9:58:ba:e2:99: 76:92:3a:80:f6:86:1e:e0:35:50:5d:8c:ae:1b:63:cc:1b:6b: 1c:7d:f9:37:29:90:ed:c7:8a:f0:a0:08:b6:a7:46:00:78:53: 72:e8:8d:7c:8c:18:c3:b1:23:09:db:40:07:64:ba:55:66:6b: 6f:73:bf:76:df:3f:bc:44:b0:1c:32:b3:0a:4c:c0:48:8f:1f: d9:92:c2:56:46:46:59:a0:55:da:91:14:a7:df:ad:60:1b:c6: 4c:56:58:3f:b1:e7:1c:e3:aa:c2:96:80:4a:be:9f:b1:39:ce: ad:9a:15:56:01:ff:59:9e:15:c3:98:a1:b8:83:83:f2:0a:f3: a8:2d:62:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUwODIyMTc1NzI1WhcNMjUwODI5MTc1NzI1WjAYMRYwFAYD VQQDEw02OGE4YWY4NS1hNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpPsv34t7TXIE/VjieWsfT4OMI/DQoLBEnA6jE5bFrOF0DK9Ht91iF0BE9l0 aKHqDdZROpgUD0uuzOR6lWyf9WD3XLLeikFCHZqhrJzAVBheaRfjRtsGKv6M/EhA kSIOzJ0aghkjnjJ13SgBgvnmbBN/lOou5kTBHB/wpwqHbNwaQFbqOxwlxbuFyY9L G7dsDhxe/k/JLS40BewRT7ZRKa15ozRXjQcFCuCMz8GBvDtONDBc2Er8k+GM0/pZ wuZcU3pCEyB8JxKwp8LEC9MP49ZLARdkxIEQOoPzDDp+pnrB7o40ZM2UuQHg9hzc vWwQ8DyK2rlgQAogfdxubaQEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY/vAXK tbxcRMSUR3ec89PGqTPQMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3ls0E9/422axSEQpiYw60VPxQLQiEatWxDXUaHf+vwXsRXGUd0es Gp9F+ujOjxXoC2LEFNXxs3KIBLdXjDDjlZDxTENMyDm2DHBQ0aOo/Ytl5/zcu5yW Q1hmvTQy8hjUdZ0SgFnaIW+bh0+MB6A2TfYlk+ZG4r8KyVi64pl2kjqA9oYe4DVQ XYyuG2PMG2scffk3KZDtx4rwoAi2p0YAeFNy6I18jBjDsSMJ20AHZLpVZmtvc792 3z+8RLAcMrMKTMBIjx/ZksJWRkZZoFXakRSn361gG8ZMVlg/secc46rCloBKvp+x Oc6tmhVWAf9ZnhXDmKG4g4PyCvOoLWLz -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:49 2025 by rpki-client