$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: dXrD2p24MLfxyDiDbWnB6bGmGg6HsFz4blULAsJmoLk= Subject key identifier: 0C:4E:99:C4:F3:BF:29:B7:B1:9B:A1:3E:8B:FB:B2:C8:38:BF:EF:AE Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 013E Signing time: Tue 05 Aug 2025 04:51:00 +0000 Manifest this update: Tue 05 Aug 2025 04:50:59 +0000 Manifest next update: Tue 12 Aug 2025 04:50:59 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: BbPOkViAtI9emBc45nNAhumOGG4MwtTi8+OffFnrASw=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Aug 5 04:50:59 2025 GMT Not After : Aug 12 04:50:59 2025 GMT Subject: CN=68918db4-2344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:36:4a:a1:54:7b:0f:43:ef:b0:c7:54:7e: 21:c1:59:9a:14:f2:92:7d:02:07:f6:ee:6d:3f:16: a8:95:03:27:3c:aa:19:99:ef:6d:49:94:b7:5c:2e: 04:92:8b:f4:cb:cb:34:9c:98:10:e6:7b:ff:e9:e8: 7d:d0:98:9e:02:74:18:cd:d9:e5:0b:f1:76:29:92: 62:aa:5b:a3:09:9e:f9:5e:5f:ad:a2:de:3e:16:66: fe:a6:9e:19:23:94:cc:07:10:bb:93:12:70:77:f0: 51:f5:c7:df:67:a3:d1:96:ca:9b:b3:87:73:eb:dc: c1:ea:35:69:35:00:29:ec:27:d1:75:11:ac:c1:6d: e9:16:71:13:b7:4d:ce:45:7f:13:a4:73:38:9a:87: 28:82:04:e4:46:33:ab:fb:13:01:01:5a:93:30:a3: 60:90:ab:f0:d9:9f:bb:80:c3:de:14:26:ca:4d:97: b1:0f:70:07:c7:00:37:d1:dc:d7:98:54:5d:ff:3a: 72:db:e0:97:df:4c:47:9f:d5:0d:3b:fa:41:f3:2a: 08:8f:f3:7a:a8:2d:84:8b:65:d8:57:65:e5:91:12: c9:1e:2c:7b:99:6e:8d:eb:5c:39:2f:ea:34:60:1a: 99:7c:e1:17:b5:75:07:32:06:6b:be:26:3e:cd:9b: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:99:C4:F3:BF:29:B7:B1:9B:A1:3E:8B:FB:B2:C8:38:BF:EF:AE X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:3f:25:ad:b5:22:4e:3e:2f:5a:65:c2:e5:a8:83:0d:63:5c: 5b:1d:8a:a6:bb:4b:42:74:c3:bb:b8:ac:0d:c0:c3:f9:2f:7d: 05:ea:6c:c4:91:57:83:87:fb:c9:bd:58:b1:15:86:8e:08:76: bc:5e:59:b3:f1:14:c2:5c:32:64:f4:06:16:cb:4d:ff:ce:37: 01:bd:0b:90:c8:67:9a:52:84:ad:2e:19:2d:78:87:6c:51:d6: 9b:d8:5b:41:0f:ef:6b:a1:29:c7:c2:45:3f:af:6a:43:2e:40: 46:91:be:fc:09:d2:c5:c0:9a:a5:a7:6f:a8:bd:18:1b:5d:ad: f9:cc:51:3f:50:e9:26:44:05:c8:de:f2:65:41:20:3a:11:b1: ab:50:c1:27:82:ea:ab:4a:41:0f:31:03:26:70:f7:0d:5f:6b: 84:00:f6:72:d7:a4:11:69:e8:f4:7e:0f:e5:2b:42:20:2f:c9: c4:78:0a:0e:3b:00:a5:47:6f:84:1d:80:5a:95:69:be:c0:8a: c9:0e:cb:46:53:c1:63:7c:cc:6f:a6:73:92:7f:82:13:8f:3b: 93:35:1b:03:ee:49:9e:5f:e9:ca:99:98:ed:87:04:25:ed:ca: fd:7f:03:db:11:31:74:f3:5e:82:7e:53:15:83:6b:57:1a:21: 73:74:08:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwODA1MDQ1MDU5WhcNMjUwODEyMDQ1MDU5WjAYMRYwFAYD VQQDEw02ODkxOGRiNC0yMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Vg2SqFUew9D77DHVH4hwVmaFPKSfQIH9u5tPxaolQMnPKoZme9tSZS3XC4E kov0y8s0nJgQ5nv/6eh90JieAnQYzdnlC/F2KZJiqlujCZ75Xl+tot4+Fmb+pp4Z I5TMBxC7kxJwd/BR9cffZ6PRlsqbs4dz69zB6jVpNQAp7CfRdRGswW3pFnETt03O RX8TpHM4mocoggTkRjOr+xMBAVqTMKNgkKvw2Z+7gMPeFCbKTZexD3AHxwA30dzX mFRd/zpy2+CX30xHn9UNO/pB8yoIj/N6qC2Ei2XYV2XlkRLJHix7mW6N61w5L+o0 YBqZfOEXtXUHMgZrviY+zZvRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxOmcTz vym3sZuhPov7ssg4v++uMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhPyWttSJOPi9aZcLlqIMNY1xbHYqmu0tCdMO7uKwNwMP5L30F6mzE kVeDh/vJvVixFYaOCHa8Xlmz8RTCXDJk9AYWy03/zjcBvQuQyGeaUoStLhkteIds Udab2FtBD+9roSnHwkU/r2pDLkBGkb78CdLFwJqlp2+ovRgbXa35zFE/UOkmRAXI 3vJlQSA6EbGrUMEnguqrSkEPMQMmcPcNX2uEAPZy16QRaej0fg/lK0IgL8nEeAoO OwClR2+EHYBalWm+wIrJDstGU8FjfMxvpnOSf4ITjzuTNRsD7kmeX+nKmZjthwQl 7cr9fwPbETF0816CflMVg2tXGiFzdAg0 -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:06 2025 by rpki-client