$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: WaKeJ3P+7gq9twheq2bzBlGm9FderrjLjiNP7nmLIz8= Subject key identifier: 2C:03:20:71:A3:E3:60:5D:4E:FE:9F:22:B4:A9:AC:8A:27:DD:67:E0 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 24D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24C4 Signing time: Fri 22 Aug 2025 15:49:15 +0000 Manifest this update: Fri 22 Aug 2025 15:49:15 +0000 Manifest next update: Fri 29 Aug 2025 15:49:15 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: G8D8VzU1jIypLOyXr6nMQjPBpIraUGBMd6oLwt8PxQI=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9433 (0x24d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Aug 22 15:49:15 2025 GMT Not After : Aug 29 15:49:15 2025 GMT Subject: CN=68a8917b-fe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:9e:3e:d8:e4:13:a8:83:9c:74:08:c3:38: ff:45:4a:e7:92:12:15:a1:53:3b:17:e5:08:9c:a0: 56:5a:16:2a:b2:e4:59:45:25:93:8a:be:29:50:20: 9a:a4:64:88:a5:7c:08:10:1f:52:d2:b0:39:80:7b: 28:44:b6:65:0d:f9:07:22:08:f0:51:67:01:7c:f8: 09:87:ab:b9:d9:7f:e7:da:22:52:5d:bf:c7:96:08: 0d:cd:7e:d0:6e:4f:9b:d4:5f:3f:66:09:ac:42:21: 50:6e:9c:b4:28:cb:15:b8:87:34:71:52:ee:f5:7e: b7:ec:8f:e8:a4:73:11:06:6e:a2:4c:e0:5d:b3:77: a4:5c:e1:ac:5c:99:59:23:79:9b:e1:bf:c2:01:f2: d7:e2:4c:92:e6:13:53:ca:fa:6d:d4:26:a8:b7:eb: e1:64:33:b7:90:d8:41:6d:f1:e1:fd:20:bf:c7:54: ca:4d:b6:05:8b:5e:ca:ec:ba:45:12:ad:a0:d6:13: 9a:a4:cd:d1:2f:9f:f6:9b:1a:90:e5:33:2d:73:4f: 77:b5:29:18:1d:e7:63:99:e4:2b:53:33:9c:67:26: 8b:3f:11:c9:5b:c0:9c:81:b9:3b:5a:85:e1:1f:c8: 74:0d:e7:c3:92:24:a8:bf:d2:74:c8:c4:94:ac:ae: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:20:71:A3:E3:60:5D:4E:FE:9F:22:B4:A9:AC:8A:27:DD:67:E0 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:74:33:88:10:e0:4a:87:14:2f:28:05:89:ea:d7:4b:56:bd: e4:1d:b1:b3:0b:8a:82:5c:4e:a1:74:4c:7e:bf:56:d4:a1:d8: 99:c6:04:71:94:f3:f6:b7:b8:5f:e2:11:9f:33:7b:0c:a9:ba: 05:71:10:1d:93:46:c7:63:ce:8b:27:10:7e:4e:3d:bc:26:59: 4c:a6:33:e3:0e:c9:53:f8:7d:e8:6e:61:fa:9d:48:d5:85:fb: 40:62:4e:c9:58:9f:ff:83:c3:57:72:dc:36:c8:e6:ee:e7:8b: 7c:7f:44:be:f9:bb:be:7d:66:ae:81:db:e1:24:1b:b7:c2:28: 16:80:40:68:a9:04:7d:4d:d4:84:fd:28:e0:93:ef:f0:a9:a7: f9:a2:cf:cf:f5:7b:23:03:64:c9:7f:9d:ff:cc:1a:e6:48:fb: dd:48:65:ee:05:b9:48:c2:04:43:d3:69:94:36:50:dd:64:20: dd:c0:c8:68:84:6e:12:fe:4f:8c:17:c6:6e:e3:09:17:4b:c8: 13:27:a6:1d:f5:74:ab:ea:f5:4d:51:32:42:cb:72:45:1f:41: 93:5c:52:1b:5f:3c:b3:8f:8b:b7:4a:4d:94:f0:88:dc:d0:cc: 54:aa:0b:ca:1e:07:ee:60:05:b5:fc:f2:e0:85:74:c6:8f:b0: 00:5e:8c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUwODIyMTU0OTE1WhcNMjUwODI5MTU0OTE1WjAYMRYwFAYD VQQDEw02OGE4OTE3Yi1mZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaGePtjkE6iDnHQIwzj/RUrnkhIVoVM7F+UInKBWWhYqsuRZRSWTir4pUCCa pGSIpXwIEB9S0rA5gHsoRLZlDfkHIgjwUWcBfPgJh6u52X/n2iJSXb/HlggNzX7Q bk+b1F8/ZgmsQiFQbpy0KMsVuIc0cVLu9X637I/opHMRBm6iTOBds3ekXOGsXJlZ I3mb4b/CAfLX4kyS5hNTyvpt1Caot+vhZDO3kNhBbfHh/SC/x1TKTbYFi17K7LpF Eq2g1hOapM3RL5/2mxqQ5TMtc093tSkYHedjmeQrUzOcZyaLPxHJW8Ccgbk7WoXh H8h0DefDkiSov9J0yMSUrK5I3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwDIHGj 42BdTv6fIrSprIon3WfgMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7dDOIEOBKhxQvKAWJ6tdLVr3kHbGzC4qCXE6hdEx+v1bUodiZxgRx lPP2t7hf4hGfM3sMqboFcRAdk0bHY86LJxB+Tj28JllMpjPjDslT+H3obmH6nUjV hftAYk7JWJ//g8NXctw2yObu54t8f0S++bu+fWaugdvhJBu3wigWgEBoqQR9TdSE /Sjgk+/wqaf5os/P9XsjA2TJf53/zBrmSPvdSGXuBblIwgRD02mUNlDdZCDdwMho hG4S/k+MF8Zu4wkXS8gTJ6Yd9XSr6vVNUTJCy3JFH0GTXFIbXzyzj4u3Sk2U8Ijc 0MxUqgvKHgfuYAW1/PLghXTGj7AAXoz1 -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:50 2025 by rpki-client