$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json) Hash identifier: W+Zvy1YrGIs1LviyM/+vE4dLsNmG5m0s/NeAv/CKYTo= Subject key identifier: FB:E5:4A:34:0D:DC:03:CE:6B:18:C8:CA:1A:17:C6:A1:1E:B4:84:C4 Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft Manifest number: 0625 Signing time: Fri 22 Aug 2025 22:58:21 +0000 Manifest this update: Fri 22 Aug 2025 22:58:20 +0000 Manifest next update: Fri 29 Aug 2025 22:58:20 +0000 Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: bZJuklDsk9qioV18MJCVrT8B/KbOghF+hzE6cwRFV/U=) 2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: gAuID1Fe/PtlP9DGBoTnnUFK6n2WVQEEJLwbWlhbFaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03 Validity Not Before: Aug 22 22:58:20 2025 GMT Not After : Aug 29 22:58:20 2025 GMT Subject: CN=68a8f60c-e2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:4c:0d:7e:ff:c6:53:9b:6b:07:87:28:f8: 42:fd:16:a4:f7:28:09:25:37:7d:83:55:e1:6a:14: 3e:75:ea:7b:94:68:f9:be:57:1b:75:12:1f:bc:69: 11:c5:5b:b9:3d:f1:ed:ca:60:2d:12:f7:46:e7:90: 95:73:e5:68:a8:1c:78:e3:50:b6:1b:da:63:8e:fa: e6:d0:44:97:30:2a:de:e2:f8:83:46:b0:2d:67:95: 47:dc:f3:39:f9:6f:b5:23:4f:28:6f:83:49:ee:84: fa:16:83:60:6b:6e:9a:18:1d:9c:e0:7f:0e:1d:44: 48:9f:36:ce:f5:b8:2f:2a:9e:45:dc:c0:24:83:44: 8e:fd:20:3f:05:7e:0c:90:2a:8d:18:57:53:d4:f0: a3:65:26:d9:47:9d:84:5b:32:ff:83:97:86:2a:e4: 77:c5:38:0c:48:bd:4f:12:a2:9a:9c:0b:9c:ff:0f: ed:cc:49:4d:5a:92:5e:bd:2b:83:33:7e:75:e3:15: 10:96:db:67:a2:e7:95:d3:5b:e6:34:c8:d6:58:7c: e7:9b:80:eb:81:b4:0c:6f:51:a0:c7:75:e7:a9:72: d0:22:2f:73:40:8e:64:f8:34:e3:9d:a2:2d:d5:3c: 23:62:32:fc:6e:b7:d2:d3:a9:96:c7:b9:eb:40:01: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:4A:34:0D:DC:03:CE:6B:18:C8:CA:1A:17:C6:A1:1E:B4:84:C4 X509v3 Authority Key Identifier: keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:24:57:d8:77:40:7d:d9:40:9a:cf:80:f4:8d:f1:dd:c1: a1:21:08:66:04:e1:3a:84:56:d7:26:43:67:8f:67:68:3a:cf: 19:21:fc:bb:39:e4:06:1d:ab:c7:98:6c:2f:38:56:42:88:74: 34:fb:8d:df:7a:49:3a:af:a0:16:82:70:82:aa:8d:12:be:9e: 35:65:9b:0e:b9:50:c5:f0:8f:55:6f:2e:90:09:9c:05:6c:c6: 0c:f5:32:2f:6a:7d:fa:9d:e3:c1:c1:e7:ba:65:bc:00:66:68: 2e:84:c3:a1:c9:5b:c2:0b:5f:79:96:d7:a4:8b:10:08:26:4e: d7:c2:1c:4c:d2:1f:48:ff:9c:a6:5d:65:8e:13:5c:24:c4:b9: ba:06:46:a7:7b:48:26:16:6a:33:7d:80:39:24:51:8f:2c:f7: 33:80:77:d7:b7:2e:e5:8e:e3:07:0e:d3:fe:b5:a7:7a:22:c7: d2:40:30:a8:61:40:fb:cd:48:8b:64:6f:02:bc:e0:60:5b:27: b9:73:b8:ce:09:f9:7b:27:51:fc:33:4b:bc:4c:36:e6:e8:5e: b5:59:25:41:26:71:b3:a1:b3:9e:e4:14:7b:91:e7:a8:25:a5: ff:67:9f:7e:64:8e:87:43:df:ac:1e:16:35:11:60:a7:98:c7: 4d:83:2c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy NzY1ODBGMDMwHhcNMjUwODIyMjI1ODIwWhcNMjUwODI5MjI1ODIwWjAYMRYwFAYD VQQDEw02OGE4ZjYwYy1lMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcFMDX7/xlObaweHKPhC/Rak9ygJJTd9g1XhahQ+dep7lGj5vlcbdRIfvGkR xVu5PfHtymAtEvdG55CVc+VoqBx441C2G9pjjvrm0ESXMCre4viDRrAtZ5VH3PM5 +W+1I08ob4NJ7oT6FoNga26aGB2c4H8OHURInzbO9bgvKp5F3MAkg0SO/SA/BX4M kCqNGFdT1PCjZSbZR52EWzL/g5eGKuR3xTgMSL1PEqKanAuc/w/tzElNWpJevSuD M3514xUQlttnoueV01vmNMjWWHznm4DrgbQMb1Ggx3XnqXLQIi9zQI5k+DTjnaIt 1TwjYjL8brfS06mWx7nrQAHGDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvlSjQN 3APOaxjIyhoXxqEetITEMB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4 Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK7CRX2HdAfdlAms+A9I3x3cGhIQhmBOE6hFbXJkNnj2doOs8ZIfy7 OeQGHavHmGwvOFZCiHQ0+43fekk6r6AWgnCCqo0Svp41ZZsOuVDF8I9Vby6QCZwF bMYM9TIvan36nePBwee6ZbwAZmguhMOhyVvCC195ltekixAIJk7XwhxM0h9I/5ym XWWOE1wkxLm6Bkane0gmFmozfYA5JFGPLPczgHfXty7ljuMHDtP+tad6IsfSQDCo YUD7zUiLZG8CvOBgWye5c7jOCfl7J1H8M0u8TDbm6F61WSVBJnGzobOe5BR7keeo JaX/Z59+ZI6HQ9+sHhY1EWCnmMdNgywR -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:38 2025 by rpki-client