$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: y9foStlEviaL9XrWLtZaLvSUNz2M/5XXM/0cFM76wuI= Subject key identifier: 20:6F:7A:79:1F:EA:51:EC:A7:12:8B:F5:D8:6C:CC:16:A9:CE:62:2A Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 099B Signing time: Fri 22 Aug 2025 20:13:23 +0000 Manifest this update: Fri 22 Aug 2025 20:13:23 +0000 Manifest next update: Fri 29 Aug 2025 20:13:23 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: lxpmBxIEaP53oB+EGx7WTufUU5j0sWi05SzayPOQYls=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Aug 22 20:13:23 2025 GMT Not After : Aug 29 20:13:23 2025 GMT Subject: CN=68a8cf63-8c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:dc:86:e8:9b:5d:12:3b:71:29:00:34:a5: 7b:0d:c4:d1:3b:99:36:0f:67:3d:6c:41:a8:f0:88: ed:83:ac:1b:07:7a:40:ea:1e:b7:c5:de:d0:73:e8: dc:51:00:af:09:20:d7:e4:a3:1e:1b:d9:1c:d8:77: 11:87:1d:88:56:97:a0:18:21:c6:a0:0a:05:54:1a: 10:81:6c:8a:11:85:57:0d:be:a9:22:d7:3c:c4:5b: 98:1a:d3:e2:fd:f7:05:91:71:ef:0b:0e:e7:dd:04: d4:a3:4c:fd:01:14:37:98:be:8f:37:b9:46:1d:78: 7a:29:7c:99:11:ae:e2:85:21:75:0f:fb:a1:d9:55: 4a:ff:bf:6e:22:6b:65:6c:54:90:8b:e5:12:93:39: 90:60:64:35:a8:76:f4:40:25:3a:a7:76:ff:5c:41: cb:d0:41:20:ff:8e:49:08:78:7f:d0:d8:1b:87:0c: 35:d3:9e:a2:60:85:fa:ac:76:29:1b:6a:0a:5e:e1: 18:a9:d7:16:8c:4e:35:b6:24:dc:a7:be:77:35:6c: 16:09:3c:f0:17:c7:ae:0d:4b:82:a6:94:14:f5:0f: c2:fc:21:79:4c:b3:5c:e3:88:5d:49:c4:a6:6e:b4: 87:cb:66:50:6c:c0:43:6c:0a:c3:7d:a9:ca:69:8b: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6F:7A:79:1F:EA:51:EC:A7:12:8B:F5:D8:6C:CC:16:A9:CE:62:2A X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4c:99:ae:36:f9:0f:67:52:02:f6:62:f4:8a:f3:fa:92:55: ae:27:5d:f6:b5:b2:68:1f:c7:4f:11:3c:39:17:48:86:6b:57: 7d:58:b9:bd:45:b3:28:ca:25:ea:5e:d0:e2:c9:21:d9:76:99: 16:07:cb:e2:51:f4:02:b9:8f:64:1d:3e:da:2a:e0:d7:fc:6a: 46:99:87:7d:10:70:28:6a:d8:1e:1f:6c:34:0c:59:36:69:82: b7:94:c5:42:da:7e:48:7e:da:2e:0e:71:f7:01:35:90:77:65: 16:cd:5d:2d:e1:ad:37:05:e6:4f:8e:ab:b4:c8:c1:ab:c1:31: 24:0a:6e:c3:e8:ac:bb:74:27:b0:1b:30:f4:8c:1c:83:b4:5e: 47:b0:6a:d7:09:48:6f:8f:e2:32:8f:23:97:34:c7:6c:89:21: ac:e9:0e:c3:eb:81:ea:22:cf:00:12:e6:fe:7e:7c:db:34:d6: 01:d7:ce:44:01:c8:83:14:a7:48:11:1c:a4:39:7c:29:11:24: cd:d0:7a:91:ee:ae:9e:5a:ee:23:16:60:30:37:fb:89:59:22: 55:98:bf:30:77:af:4a:2c:f1:12:70:64:36:b2:26:ed:c9:c0: d2:ea:4a:c6:51:8d:86:52:c3:26:33:40:71:a6:d7:79:73:5d: ed:05:0e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwODIyMjAxMzIzWhcNMjUwODI5MjAxMzIzWjAYMRYwFAYD VQQDEw02OGE4Y2Y2My04YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08TchuibXRI7cSkANKV7DcTRO5k2D2c9bEGo8Ijtg6wbB3pA6h63xd7Qc+jc UQCvCSDX5KMeG9kc2HcRhx2IVpegGCHGoAoFVBoQgWyKEYVXDb6pItc8xFuYGtPi /fcFkXHvCw7n3QTUo0z9ARQ3mL6PN7lGHXh6KXyZEa7ihSF1D/uh2VVK/79uImtl bFSQi+USkzmQYGQ1qHb0QCU6p3b/XEHL0EEg/45JCHh/0Ngbhww1056iYIX6rHYp G2oKXuEYqdcWjE41tiTcp753NWwWCTzwF8euDUuCppQU9Q/C/CF5TLNc44hdScSm brSHy2ZQbMBDbArDfanKaYuevQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBvenkf 6lHspxKL9dhszBapzmIqMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxTJmuNvkPZ1IC9mL0ivP6klWuJ132tbJoH8dPETw5F0iGa1d9WLm9 RbMoyiXqXtDiySHZdpkWB8viUfQCuY9kHT7aKuDX/GpGmYd9EHAoatgeH2w0DFk2 aYK3lMVC2n5IftouDnH3ATWQd2UWzV0t4a03BeZPjqu0yMGrwTEkCm7D6Ky7dCew GzD0jByDtF5HsGrXCUhvj+IyjyOXNMdsiSGs6Q7D64HqIs8AEub+fnzbNNYB185E AciDFKdIERykOXwpESTN0HqR7q6eWu4jFmAwN/uJWSJVmL8wd69KLPEScGQ2sibt ycDS6krGUY2GUsMmM0Bxptd5c13tBQ59 -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:23 2025 by rpki-client