$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: OKe4sgSsqpV8X83FEAbRYS396k2OJtaVz6WrIhdxeCM= Subject key identifier: 13:72:6A:8E:DC:86:9F:2D:C0:E0:87:41:65:4D:08:1D:59:51:F8:5E Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E26 Signing time: Wed 06 Aug 2025 17:57:15 +0000 Manifest this update: Wed 06 Aug 2025 17:57:15 +0000 Manifest next update: Wed 13 Aug 2025 17:57:15 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: I1guevMreb9h88yDW4ucvGCjVhYobKHJYy7OenuMAtU=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: SWjsz2ZRwBkKRs3lCM8x1HuP6oZ8eAnIrMziwftZzas=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: Uzh2H0WzqUhAdOejeRuGcUfDdr3mQiiZM4aNaZoNZlE=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: /6vaZiCWJmBFNJgiNOI49M1x4iJoUHYLtfB+8hNudBk=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E9L/TTXk+Px8nGO4KJnm/ouPNchL+BTaTG1X0znr2Rg=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: EwzDgqgyP+42whL7/ceKehIKyd0tgvQ5kUq+8PMWfXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3656 (0xe48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Aug 6 17:57:15 2025 GMT Not After : Aug 13 17:57:15 2025 GMT Subject: CN=6893977b-8483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:8e:95:24:1c:ab:03:4e:f9:94:b8:7d:d3: 68:6b:fe:15:76:81:c2:6c:40:fd:fc:01:e0:e1:12: 20:50:33:1e:9b:8a:7e:fa:09:7d:c2:97:91:79:8c: ca:54:46:64:4c:c2:21:88:5c:9a:e0:c7:09:ea:f2: 62:13:24:96:e0:24:00:18:fb:59:b3:e1:8b:ef:c3: e7:a3:f6:5c:dc:cb:74:b6:66:ce:b4:9d:97:cf:11: b5:e5:76:c2:f7:c0:f6:7a:b5:89:a7:d4:bc:cd:7e: ac:a6:38:7f:e7:16:4b:ad:16:59:b1:fb:d3:4d:a7: 1e:b1:5c:04:16:44:c8:02:fc:a8:c0:1a:c7:21:bf: 3c:46:5f:f3:b8:75:27:f2:05:6a:ec:8b:3c:b6:f6: ea:80:a3:86:83:38:00:eb:19:53:cc:86:5c:d8:9e: a9:ea:52:6f:7b:31:ba:f0:2f:1f:86:78:4c:c5:4a: 19:9d:19:69:58:f5:2e:8c:e8:d9:1b:f3:83:9a:7e: 2a:03:2e:30:9d:df:f4:c5:7f:a1:6c:0b:72:b3:ca: e4:fc:5a:1a:a5:d4:19:59:d2:34:54:69:bc:fb:e7: 58:ee:49:01:a3:47:8c:b0:30:fa:25:d6:70:8f:15: f6:6c:fb:07:df:e4:4f:ef:37:78:f6:bd:41:97:39: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:72:6A:8E:DC:86:9F:2D:C0:E0:87:41:65:4D:08:1D:59:51:F8:5E X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:66:6c:c2:0b:95:7e:13:42:4d:4b:93:3f:6e:25:ff:88: b6:70:d7:cf:69:39:02:93:2a:86:c6:3e:5a:23:dc:1e:73:62: a4:39:34:bc:bb:e9:2a:4f:27:35:51:14:a7:fb:2e:2a:d3:f4: 7d:c9:be:16:35:6b:e5:5f:fc:b9:43:bc:f5:3d:6e:f6:ae:15: 24:9f:8e:80:7a:4a:9b:24:82:40:ed:26:4e:c0:18:0e:f4:a6: 00:12:c1:bf:11:f7:f8:07:28:a5:22:10:1a:ce:b7:42:dc:04: d0:3c:bf:58:15:0b:90:26:ba:ea:02:40:99:97:a5:f8:27:11: 5d:0a:63:8f:a1:29:d3:d1:06:cb:98:7c:ef:68:41:da:73:36: b8:bc:e6:1c:59:9f:76:36:d0:67:f2:5f:61:69:57:51:8e:16: ca:28:70:93:c6:74:eb:ba:c9:4f:c5:87:71:24:7b:b9:c5:40: 16:a2:f9:c0:5f:ba:d6:9c:ee:22:65:b4:28:c9:75:a0:66:53: 23:58:9e:01:be:a8:72:bc:27:92:f6:ac:00:e9:1c:b9:b3:be: 2f:43:24:57:79:38:92:cd:4c:bc:f8:8f:e2:de:dc:ff:1c:08: be:05:ca:b5:a2:30:05:76:16:b8:49:16:da:34:70:c2:6b:7e: c0:4e:65:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUwODA2MTc1NzE1WhcNMjUwODEzMTc1NzE1WjAYMRYwFAYD VQQDEw02ODkzOTc3Yi04NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpSOlSQcqwNO+ZS4fdNoa/4VdoHCbED9/AHg4RIgUDMem4p++gl9wpeReYzK VEZkTMIhiFya4McJ6vJiEySW4CQAGPtZs+GL78Pno/Zc3Mt0tmbOtJ2XzxG15XbC 98D2erWJp9S8zX6spjh/5xZLrRZZsfvTTacesVwEFkTIAvyowBrHIb88Rl/zuHUn 8gVq7Is8tvbqgKOGgzgA6xlTzIZc2J6p6lJvezG68C8fhnhMxUoZnRlpWPUujOjZ G/ODmn4qAy4wnd/0xX+hbAtys8rk/FoapdQZWdI0VGm8++dY7kkBo0eMsDD6JdZw jxX2bPsH3+RP7zd49r1BlzkxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNyao7c hp8twOCHQWVNCB1ZUfheMB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSd2ZswguVfhNCTUuTP24l/4i2cNfPaTkCkyqGxj5aI9wec2KkOTS8 u+kqTyc1URSn+y4q0/R9yb4WNWvlX/y5Q7z1PW72rhUkn46AekqbJIJA7SZOwBgO 9KYAEsG/Eff4ByilIhAazrdC3ATQPL9YFQuQJrrqAkCZl6X4JxFdCmOPoSnT0QbL mHzvaEHacza4vOYcWZ92NtBn8l9haVdRjhbKKHCTxnTruslPxYdxJHu5xUAWovnA X7rWnO4iZbQoyXWgZlMjWJ4BvqhyvCeS9qwA6Ry5s74vQyRXeTiSzUy8+I/i3tz/ HAi+Bcq1ojAFdha4SRbaNHDCa37ATmUV -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:14 2025 by rpki-client