$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: avbY/p8KmkqIht7DLpNjRmbORg+T2YpV86MNDaIsb+E= Subject key identifier: 11:F9:57:9F:86:07:68:FB:7C:E4:B0:61:12:E1:D0:4A:B3:D4:9D:7D Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 0292 Signing time: Sat 09 Aug 2025 02:10:04 +0000 Manifest this update: Sat 09 Aug 2025 02:10:04 +0000 Manifest next update: Sat 16 Aug 2025 02:10:04 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: 6+xDBEexBYEXRHfQi0ciiLpR/BVJ15Xi150NBrO2ZLg=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: frzjCs+Z/Mi4ZDgqYWFwqblODHyg9lLqa7tObDvQ7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Aug 9 02:10:04 2025 GMT Not After : Aug 16 02:10:04 2025 GMT Subject: CN=6896adfc-f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:39:e4:c6:d1:ad:bf:4e:01:ba:4b:ea:8e: 0e:c1:c6:2b:db:17:85:50:44:07:f7:37:74:41:a3: 8e:79:90:1f:d9:7b:42:6d:76:10:1d:71:60:b1:ae: 97:d0:27:63:85:b2:8c:4b:2f:20:4d:03:70:4f:d9: 86:6c:d6:d9:e7:31:25:90:d0:dc:8f:71:f4:e0:03: 83:9b:64:1e:26:70:f8:9e:f8:61:f2:97:6a:54:cd: 57:00:e1:66:c7:d2:2e:5b:31:fb:7e:16:66:10:9c: ab:aa:2f:2f:04:5b:a9:cb:ea:3b:31:5b:3d:0d:60: 41:1a:60:bd:a5:fb:28:60:02:78:33:c5:41:4a:a5: 15:10:b2:83:30:30:a1:4c:47:39:93:67:21:da:1f: 68:b4:22:2d:cc:23:a4:71:f9:45:f6:b0:ae:db:d8: c1:7a:86:56:a3:c6:39:2c:ae:9f:df:10:b5:68:8a: 82:a6:e7:94:2c:6b:7d:01:3f:7e:6f:e8:dc:67:17: 42:0a:7b:52:da:cb:f3:72:55:78:de:02:53:ab:42: c9:6c:60:ed:13:0f:f8:5d:e1:f0:a5:9f:79:6a:56: d0:a5:91:87:b3:97:8a:9c:8b:a6:5a:09:2d:bd:6b: 3c:5b:aa:66:09:43:e7:2d:9f:6f:11:87:8d:3e:ae: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:57:9F:86:07:68:FB:7C:E4:B0:61:12:E1:D0:4A:B3:D4:9D:7D X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:76:c1:da:27:bf:3e:c1:47:b9:7b:a5:b2:bf:be:db:ac:f1: fc:f8:4c:fc:fb:cd:0c:fd:0f:f6:9d:0d:26:16:49:12:08:40: b4:c7:b9:dd:4b:7e:a5:1f:ff:de:83:ce:3f:5f:bc:e2:4b:24: fc:66:66:0d:ce:64:7d:e3:25:0b:d8:08:38:79:5f:cc:92:74: cd:cf:d4:12:78:9e:82:e6:7c:10:48:11:b5:ad:a6:fa:0d:eb: 84:d8:5c:09:aa:05:5b:ac:50:95:bc:7d:9a:75:17:e1:46:15: 53:89:bd:ee:f4:47:47:1c:0f:fb:0a:a7:ad:ca:8c:52:30:e5: a7:da:bf:6f:de:90:df:b4:24:60:be:b3:73:68:88:40:29:e9: 66:2d:13:2b:c2:06:d0:d6:f3:e8:88:31:2f:93:6a:f6:b3:a5: 99:2c:9d:0f:a4:df:8e:48:13:c6:f4:e9:ad:02:a1:7f:bd:58: 91:42:58:58:e3:52:3b:84:3a:71:5e:01:d5:b2:f0:9d:53:e4: 32:f2:92:ef:75:bc:cd:89:4c:73:a4:11:a1:80:e4:4e:2b:f1: 08:21:10:71:4a:6f:18:96:11:12:8c:ea:c9:58:fd:01:ea:72: d9:50:56:42:75:8e:b1:e2:5b:d5:ad:31:66:6b:b4:0d:f8:11: b5:04:49:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUwODA5MDIxMDA0WhcNMjUwODE2MDIxMDA0WjAYMRYwFAYD VQQDEw02ODk2YWRmYy1mMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuI55MbRrb9OAbpL6o4OwcYr2xeFUEQH9zd0QaOOeZAf2XtCbXYQHXFgsa6X 0CdjhbKMSy8gTQNwT9mGbNbZ5zElkNDcj3H04AODm2QeJnD4nvhh8pdqVM1XAOFm x9IuWzH7fhZmEJyrqi8vBFupy+o7MVs9DWBBGmC9pfsoYAJ4M8VBSqUVELKDMDCh TEc5k2ch2h9otCItzCOkcflF9rCu29jBeoZWo8Y5LK6f3xC1aIqCpueULGt9AT9+ b+jcZxdCCntS2svzclV43gJTq0LJbGDtEw/4XeHwpZ95albQpZGHs5eKnIumWgkt vWs8W6pmCUPnLZ9vEYeNPq5xCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH5V5+G B2j7fOSwYRLh0Eqz1J19MB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6dsHaJ78+wUe5e6Wyv77brPH8+Ez8+80M/Q/2nQ0mFkkSCEC0x7nd S36lH//eg84/X7ziSyT8ZmYNzmR94yUL2Ag4eV/MknTNz9QSeJ6C5nwQSBG1rab6 DeuE2FwJqgVbrFCVvH2adRfhRhVTib3u9EdHHA/7CqetyoxSMOWn2r9v3pDftCRg vrNzaIhAKelmLRMrwgbQ1vPoiDEvk2r2s6WZLJ0PpN+OSBPG9OmtAqF/vViRQlhY 41I7hDpxXgHVsvCdU+Qy8pLvdbzNiUxzpBGhgOROK/EIIRBxSm8YlhESjOrJWP0B 6nLZUFZCdY6x4lvVrTFma7QN+BG1BEmb -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:08 2025 by rpki-client