$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: nSh82B/jyvnMswX9IRmR9fwsIT5hdQeK502E9Bunq3g= Subject key identifier: F8:5B:14:75:6E:13:E9:63:4B:FA:C7:B8:94:11:AB:56:65:C4:C8:51 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0C28 Signing time: Fri 08 Aug 2025 18:11:06 +0000 Manifest this update: Fri 08 Aug 2025 18:11:05 +0000 Manifest next update: Fri 15 Aug 2025 18:11:05 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: QU224rxQ9UlE5HNH3196UHzPCD90vXCituLgxM332U4=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: fJj5V7B0tj2U/amxOYn7MfT1h8cR0RvRgHTxKdHbOM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Aug 8 18:11:05 2025 GMT Not After : Aug 15 18:11:05 2025 GMT Subject: CN=68963dba-46be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:81:b2:a7:ae:0b:45:88:50:81:29:63:f9:86: b3:04:cd:aa:49:5a:3b:e5:4c:09:88:fe:28:03:83: 01:94:a0:3b:08:56:e7:b3:ec:ff:17:92:92:ba:50: c0:65:74:37:1f:4a:46:b6:9e:bb:9e:4d:c4:cf:f2: 79:03:66:8f:e4:b0:40:33:9a:ba:55:e4:a9:63:65: a7:f3:67:8b:e5:0e:af:ac:fd:d9:d9:86:f6:14:0c: 58:a6:1d:6c:51:1c:e9:12:0d:71:b4:9b:22:f3:65: 79:35:a3:54:f9:8e:11:98:f9:90:ba:a2:37:ee:2a: cc:5e:26:36:91:07:5f:f8:fa:d3:7a:ca:04:6b:b1: 43:15:82:ca:bd:69:0b:17:b1:ea:95:fa:79:e2:91: 6d:fc:7c:5d:b1:12:a7:de:2c:77:36:13:a3:9a:96: 46:17:51:4d:81:d9:12:61:a7:11:66:b7:cd:78:ff: a1:10:45:41:d9:8a:74:25:0a:d1:72:83:d1:69:80: b9:e0:b3:a5:e0:32:3e:e7:26:a7:79:ff:41:45:22: 7a:99:82:c9:6f:82:8e:e4:88:00:87:3c:a0:3d:c7: 7e:b5:c9:9a:d1:41:fe:e4:d6:20:cc:5c:75:3d:e9: 90:be:d7:d6:59:c6:77:52:ab:9e:93:42:78:64:43: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5B:14:75:6E:13:E9:63:4B:FA:C7:B8:94:11:AB:56:65:C4:C8:51 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:16:a7:2c:f8:fb:64:96:34:71:ee:58:57:c7:0e:9e:8b:6f: ac:75:5e:63:9f:b8:56:06:f6:7f:0f:3b:b8:0f:b5:47:18:ef: 1d:41:af:ae:0d:39:93:7a:79:0e:cb:6a:30:88:df:3b:bb:29: 69:97:d3:b6:87:61:5a:89:ad:dd:57:a4:7f:25:9e:79:e9:34: f0:e7:58:9e:39:44:d9:c3:f6:9e:09:35:e5:1d:bd:e0:8b:0a: 0b:9a:b5:b7:d1:b3:7a:35:2e:a0:ac:a4:ed:10:90:e2:d9:05: 9e:da:c8:14:78:da:80:95:30:f7:0f:1b:31:7f:53:21:15:d8: d7:4e:26:c6:85:3d:70:04:87:fe:69:e4:8e:fd:8a:e2:e3:2d: 79:80:cd:d1:f4:93:c7:26:a5:71:d1:31:d5:e1:09:57:fe:0a: 68:c5:07:90:00:98:b9:7f:e7:64:f9:16:64:37:54:d6:a4:9c: c5:c9:9f:b2:fb:92:d0:d9:71:6b:81:af:38:aa:c0:9c:02:1e: cc:b2:ce:38:5f:8f:f6:0f:fb:3e:f6:86:21:db:a2:1d:e5:6f: c3:2e:fc:1c:c2:16:51:31:d4:16:d0:16:1c:d8:ab:6c:5a:f2: cd:3c:20:00:79:b5:00:e4:0d:ce:47:02:cd:f7:bc:38:39:85: 56:e5:0a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjUwODA4MTgxMTA1WhcNMjUwODE1MTgxMTA1WjAYMRYwFAYD VQQDEw02ODk2M2RiYS00NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04Gyp64LRYhQgSlj+YazBM2qSVo75UwJiP4oA4MBlKA7CFbns+z/F5KSulDA ZXQ3H0pGtp67nk3Ez/J5A2aP5LBAM5q6VeSpY2Wn82eL5Q6vrP3Z2Yb2FAxYph1s URzpEg1xtJsi82V5NaNU+Y4RmPmQuqI37irMXiY2kQdf+PrTesoEa7FDFYLKvWkL F7Hqlfp54pFt/HxdsRKn3ix3NhOjmpZGF1FNgdkSYacRZrfNeP+hEEVB2Yp0JQrR coPRaYC54LOl4DI+5yanef9BRSJ6mYLJb4KO5IgAhzygPcd+tcma0UH+5NYgzFx1 PemQvtfWWcZ3Uquek0J4ZEMCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhbFHVu E+ljS/rHuJQRq1ZlxMhRMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnFqcs+PtkljRx7lhXxw6ei2+sdV5jn7hWBvZ/Dzu4D7VHGO8dQa+u DTmTenkOy2owiN87uylpl9O2h2Faia3dV6R/JZ556TTw51ieOUTZw/aeCTXlHb3g iwoLmrW30bN6NS6grKTtEJDi2QWe2sgUeNqAlTD3Dxsxf1MhFdjXTibGhT1wBIf+ aeSO/Yri4y15gM3R9JPHJqVx0THV4QlX/gpoxQeQAJi5f+dk+RZkN1TWpJzFyZ+y +5LQ2XFrga84qsCcAh7Mss44X4/2D/s+9oYh26Id5W/DLvwcwhZRMdQW0BYc2Kts WvLNPCAAebUA5A3ORwLN97w4OYVW5Qpa -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:02 2025 by rpki-client