$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: DlNrliJy2ksbQ/QlcUbAVr2gV1JlA73hFAEKuWLwBDI= Subject key identifier: D0:02:A5:A3:20:55:F7:F3:62:34:D2:81:13:3D:F1:5A:B8:0E:78:75 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0AF0 Signing time: Wed 06 Aug 2025 19:39:57 +0000 Manifest this update: Wed 06 Aug 2025 19:39:56 +0000 Manifest next update: Wed 13 Aug 2025 19:39:56 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: asjh0HihD7f7DUzVmsJFWMiUbNErCXFQF+eXu5yOnHQ=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Aug 6 19:39:56 2025 GMT Not After : Aug 13 19:39:56 2025 GMT Subject: CN=6893af8c-d07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:f4:a9:c0:ae:97:2f:d0:cf:e5:62:ae:2b: cd:de:24:f5:96:fc:2e:c4:c5:e7:43:f8:08:69:26: 7f:45:cc:45:c7:48:7b:89:6e:69:88:c7:51:80:b7: 86:af:cf:92:93:85:08:2b:ee:0b:e9:a0:85:99:f3: 3c:87:fe:0a:93:15:c5:19:f9:ff:ea:9d:16:03:3d: ef:c2:27:33:01:45:72:c5:74:f0:a7:be:d0:f4:e3: 47:17:8a:3f:57:ad:d3:4a:92:a0:c2:2a:55:cb:3d: ef:65:df:18:86:ea:af:c4:c3:fb:d1:1b:5e:6c:d7: 27:04:bc:8e:61:b4:71:76:38:2d:9d:2a:dd:2a:77: 13:bc:5d:00:45:f8:f1:3d:38:95:d9:10:86:62:a5: e4:55:c9:f3:97:b1:44:c2:34:78:14:cf:f3:f5:b5: 13:f0:85:f6:d5:2d:fb:3f:16:1e:cb:44:87:b5:73: e8:be:84:df:41:91:d9:a8:ad:65:c8:84:3f:69:79: 39:81:46:0a:31:69:56:33:82:02:e8:a3:06:0c:17: 66:f0:75:9b:f0:61:e8:e2:bf:69:5f:ee:a8:c8:66: 04:39:a2:b1:46:7e:f1:b2:6f:08:dd:ce:54:44:43: 22:f0:3d:21:c4:62:1d:de:90:23:e8:13:1a:2a:13: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:02:A5:A3:20:55:F7:F3:62:34:D2:81:13:3D:F1:5A:B8:0E:78:75 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:72:bb:88:d4:07:dd:a9:b5:38:74:c9:2b:9c:b8:dd:63:79: 58:0d:d0:00:ba:f4:2d:59:20:79:0c:b3:54:c4:86:12:05:49: 29:79:b9:66:75:eb:38:8c:18:af:4b:cf:22:53:23:53:4d:9d: 5e:69:3f:1a:ee:9b:a7:fd:68:5b:01:18:2f:42:24:2e:4e:87: 5f:d0:26:95:db:35:42:21:66:95:3b:15:9d:e0:05:88:0a:b3: cb:9d:0b:25:a7:33:e4:6e:bb:f9:96:75:dc:98:39:5a:dd:83: d2:a6:b2:10:00:3f:87:67:10:e7:16:6a:85:c1:74:8e:a7:5a: 0e:f3:21:37:83:09:4b:44:f7:14:69:8b:96:53:cd:f2:9a:16: 58:f4:33:5e:77:cc:68:b2:82:15:f6:15:65:d5:39:82:c7:77: 23:00:00:f7:de:d0:92:4f:fa:52:6c:2c:05:60:d5:aa:db:fb: 8a:a4:0b:9b:d9:62:6e:48:5e:ed:4e:3d:ed:ad:6d:2f:5a:ed: ac:51:15:ea:33:24:ca:2a:98:90:ef:82:fe:0b:2e:98:0d:26: e4:ef:8a:c0:d1:7a:01:21:93:42:d9:ae:9d:c9:4b:f4:5d:6f: 37:84:60:79:c5:db:f0:7d:e0:c8:9e:44:17:7a:b8:f5:b9:fd: 48:41:96:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwODA2MTkzOTU2WhcNMjUwODEzMTkzOTU2WjAYMRYwFAYD VQQDEw02ODkzYWY4Yy1kMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLv0qcCuly/Qz+VirivN3iT1lvwuxMXnQ/gIaSZ/RcxFx0h7iW5piMdRgLeG r8+Sk4UIK+4L6aCFmfM8h/4KkxXFGfn/6p0WAz3vwiczAUVyxXTwp77Q9ONHF4o/ V63TSpKgwipVyz3vZd8YhuqvxMP70RtebNcnBLyOYbRxdjgtnSrdKncTvF0ARfjx PTiV2RCGYqXkVcnzl7FEwjR4FM/z9bUT8IX21S37PxYey0SHtXPovoTfQZHZqK1l yIQ/aXk5gUYKMWlWM4IC6KMGDBdm8HWb8GHo4r9pX+6oyGYEOaKxRn7xsm8I3c5U REMi8D0hxGId3pAj6BMaKhOaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNACpaMg VffzYjTSgRM98Vq4Dnh1MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRcruI1AfdqbU4dMkrnLjdY3lYDdAAuvQtWSB5DLNUxIYSBUkpeblm des4jBivS88iUyNTTZ1eaT8a7pun/WhbARgvQiQuTodf0CaV2zVCIWaVOxWd4AWI CrPLnQslpzPkbrv5lnXcmDla3YPSprIQAD+HZxDnFmqFwXSOp1oO8yE3gwlLRPcU aYuWU83ymhZY9DNed8xosoIV9hVl1TmCx3cjAAD33tCST/pSbCwFYNWq2/uKpAub 2WJuSF7tTj3trW0vWu2sURXqMyTKKpiQ74L+Cy6YDSbk74rA0XoBIZNC2a6dyUv0 XW83hGB5xdvwfeDInkQXerj1uf1IQZbI -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:43 2025 by rpki-client