$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: D8659glbjarYzUJvS3OCku0+TW7QmNFNYFelnoP46hM= Subject key identifier: 02:A5:2D:C4:E1:E2:EA:F2:EE:C9:13:3A:CB:D4:C2:96:77:9B:C4:72 Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 0306 Signing time: Sat 09 Aug 2025 01:50:03 +0000 Manifest this update: Sat 09 Aug 2025 01:50:03 +0000 Manifest next update: Sat 16 Aug 2025 01:50:03 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: se2mIVXJ4CCH57Pm7NLPsZuM/WK7tOpoCuMebOPQVFY=) 2: 5C236C16552611EFA2BEAC53C4F9AE02.roa (hash: iZ6c16QJfgq60QRYgFglwDZaB7UfKpWeC5/RltitIB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: Aug 9 01:50:03 2025 GMT Not After : Aug 16 01:50:03 2025 GMT Subject: CN=6896a94b-8dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:11:db:2b:3b:d4:11:8a:eb:b2:f3:a5:90: 26:40:d9:5d:30:c6:69:80:74:2f:f4:f4:6b:26:1d: 8e:33:63:f2:91:5e:79:09:0b:91:55:9f:8b:64:38: a4:b7:ac:3d:cd:0f:d6:c5:7d:96:dc:b0:88:be:cf: 90:8f:08:95:5b:dc:94:48:71:53:62:68:be:95:fd: 65:c1:93:ba:b5:38:00:ec:71:c3:ac:49:a8:c4:77: 24:0d:d6:75:74:c3:32:06:bd:8d:13:f1:46:ef:b5: 33:2e:05:d3:a4:40:1e:61:4f:35:b3:3b:11:2e:c9: 76:fc:ba:ac:f7:fe:9f:23:e9:8f:7f:9a:c1:0b:04: 60:8b:62:c5:a6:e7:56:66:3e:c9:30:f1:ca:26:0e: c7:73:71:d3:76:09:b2:bb:63:49:9a:b2:63:34:d5: 65:08:60:5a:e7:0e:e7:bd:2f:b6:2f:7b:49:c0:17: eb:84:94:a0:73:50:4b:f6:3e:40:72:27:8b:7b:24: 2e:ee:e1:2e:f7:79:e4:5e:97:69:92:3f:c9:70:89: 48:6f:f4:a4:82:6e:4e:91:f2:ad:a6:ac:f9:3e:2c: c8:6d:82:71:51:7c:cc:5d:e1:16:d7:34:fb:d5:92: 8d:0b:a7:cd:d6:bc:df:b3:01:4d:9c:2d:96:19:ee: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:2D:C4:E1:E2:EA:F2:EE:C9:13:3A:CB:D4:C2:96:77:9B:C4:72 X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:57:2d:e6:c3:4d:77:9b:0b:be:9c:05:b5:11:f6:6a:ff:70: f1:6e:1a:98:2d:29:e4:f6:f2:35:cf:78:47:8f:42:1d:7d:dd: 4d:6f:1a:0e:2a:35:05:f3:5b:2f:80:77:2b:a9:e4:d1:aa:b8: e0:f5:2b:70:f9:43:06:1d:a7:84:9b:63:1b:a9:d7:aa:04:e6: 85:d0:dc:e2:97:d5:5d:b7:cf:05:61:32:51:db:5d:b5:2e:35: f6:e2:99:79:12:48:7b:f8:10:94:53:d6:b1:3d:8d:32:05:c0: bb:12:14:86:9d:cc:c4:ce:8c:15:13:fb:9d:85:1b:62:7d:44: 7a:01:92:74:74:26:c3:82:59:7c:3a:58:20:63:da:79:9b:c7: c1:8c:cc:ed:9e:06:85:32:44:0a:6b:d6:2e:7c:63:02:15:1e: f9:ed:eb:73:c2:fb:3f:fe:0f:62:c3:20:89:8c:9e:5f:4f:77: 4f:1f:22:e2:db:ec:75:6d:53:00:64:bb:90:14:89:fa:db:84: 2f:aa:79:56:f4:dd:46:5e:3b:64:0c:ff:05:be:4f:2f:10:a8: 35:a7:e5:2d:0e:3c:72:62:41:9b:46:cb:0d:d6:bc:f1:de:ab: cc:05:89:58:ce:1b:27:3a:45:7f:01:c0:10:a5:8a:8c:11:67: d0:43:b2:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjUwODA5MDE1MDAzWhcNMjUwODE2MDE1MDAzWjAYMRYwFAYD VQQDEw02ODk2YTk0Yi04ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDwR2ys71BGK67LzpZAmQNldMMZpgHQv9PRrJh2OM2PykV55CQuRVZ+LZDik t6w9zQ/WxX2W3LCIvs+QjwiVW9yUSHFTYmi+lf1lwZO6tTgA7HHDrEmoxHckDdZ1 dMMyBr2NE/FG77UzLgXTpEAeYU81szsRLsl2/Lqs9/6fI+mPf5rBCwRgi2LFpudW Zj7JMPHKJg7Hc3HTdgmyu2NJmrJjNNVlCGBa5w7nvS+2L3tJwBfrhJSgc1BL9j5A cieLeyQu7uEu93nkXpdpkj/JcIlIb/Skgm5OkfKtpqz5PizIbYJxUXzMXeEW1zT7 1ZKNC6fN1rzfswFNnC2WGe40dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKlLcTh 4ury7skTOsvUwpZ3m8RyMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFVy3mw013mwu+nAW1EfZq/3DxbhqYLSnk9vI1z3hHj0Idfd1NbxoO KjUF81svgHcrqeTRqrjg9Stw+UMGHaeEm2MbqdeqBOaF0Nzil9Vdt88FYTJR2121 LjX24pl5Ekh7+BCUU9axPY0yBcC7EhSGnczEzowVE/udhRtifUR6AZJ0dCbDgll8 OlggY9p5m8fBjMztngaFMkQKa9YufGMCFR757etzwvs//g9iwyCJjJ5fT3dPHyLi 2+x1bVMAZLuQFIn624QvqnlW9N1GXjtkDP8Fvk8vEKg1p+UtDjxyYkGbRssN1rzx 3qvMBYlYzhsnOkV/AcAQpYqMEWfQQ7J+ -----END CERTIFICATE-----Generated at Sat Aug 9 23:20:46 2025 by rpki-client