$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: qRJSoHiEAh1eI5D1tUKARsP+bpvS5E0pcckoFs9jasI= Subject key identifier: 5E:03:37:F9:71:B8:65:19:B5:17:E6:8D:B6:26:83:36:56:B6:AC:9C Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 01FD Signing time: Sat 09 Aug 2025 01:21:31 +0000 Manifest this update: Sat 09 Aug 2025 01:21:31 +0000 Manifest next update: Sat 16 Aug 2025 01:21:31 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: 8bsgKQl2V5LEUYVndQEGPbfDaktoH6QUVmKRXAKwnqg=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: MTvQaAV2j4a15rRSTpoB41scqYTwrnry9bJaizx2K5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Aug 9 01:21:31 2025 GMT Not After : Aug 16 01:21:31 2025 GMT Subject: CN=6896a29b-f82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:5a:d7:3c:a8:92:f8:c9:8b:5d:f7:58:30: 16:c6:95:92:89:dd:cb:ab:76:4c:5b:58:28:b8:8e: eb:d4:af:c5:6e:41:33:5e:af:51:21:88:c5:66:86: dc:54:b8:24:09:f6:46:46:5a:b8:07:d6:cb:ea:9a: 09:47:13:ba:14:8f:a8:6b:ae:c8:25:45:d3:49:f3: eb:a3:0d:10:3c:90:d1:2c:b7:d6:a8:96:34:3e:10: f2:71:8a:6a:78:03:75:82:1b:be:4b:a7:e0:df:99: c7:65:57:dd:6e:72:b3:3b:c4:77:2f:41:53:b3:83: 01:9e:96:4e:34:8e:d3:60:6b:ed:93:ef:86:5d:04: 8e:93:79:b5:20:a4:d5:34:ac:49:3d:4a:ee:3e:23: b8:37:00:63:9e:8c:78:0b:06:a1:a1:99:60:0d:1f: 33:14:6d:aa:9e:04:5c:84:26:36:c7:f7:92:ea:c8: 1d:d2:d6:40:ba:2d:55:56:61:a2:2f:e4:fc:72:e8: 05:5d:94:aa:f5:6e:b8:e4:d3:f6:d4:98:9b:45:d8: 1d:28:63:16:35:df:d7:80:aa:f2:fb:06:5c:78:3a: 07:21:4c:9d:41:9e:84:40:a3:e7:1c:e6:06:8b:fe: f3:6c:06:f4:65:83:fa:9e:cd:63:c4:b6:d8:78:f4: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:37:F9:71:B8:65:19:B5:17:E6:8D:B6:26:83:36:56:B6:AC:9C X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:03:43:f4:9d:da:7e:b0:3b:bd:5b:bf:3e:3b:90:04:74:d9: f8:55:fa:ce:f3:70:99:0e:7d:17:5c:8a:87:dc:0b:fe:09:b4: f9:61:a7:48:94:39:56:4a:8b:d4:d8:ff:99:ea:be:c3:2b:dc: 0d:ae:30:a2:55:97:fe:a7:d0:a2:6f:df:aa:fb:ef:70:3e:87: 31:f7:c8:74:23:a3:9c:86:33:87:d6:a9:76:ae:e5:71:c7:f6: 64:af:fc:7a:ff:22:00:43:17:d6:b8:8d:44:0e:8e:c7:c6:a1: a3:3d:df:74:05:e4:7f:00:ef:3b:21:94:5c:37:ff:6b:25:09: 66:56:e1:94:3a:3f:b5:72:3d:c7:7f:f2:d6:73:ac:48:93:93: e4:6e:a9:6d:e4:d2:0c:1f:86:4a:d0:38:33:71:d1:97:47:7c: 8c:f4:c2:9f:91:6d:64:89:a9:fe:a6:e8:e3:7e:b8:fb:26:21: 56:96:da:51:15:c3:6c:d1:12:c7:4f:1d:1a:e1:ed:92:6e:74: 9d:49:46:a3:c0:4f:73:13:8f:88:ae:85:d0:10:e7:d5:75:dd: d1:5b:e6:2b:a6:ae:59:ca:d4:e1:d1:d4:03:a1:2d:55:c2:79: c1:e9:11:56:72:a3:93:df:7e:67:36:0a:87:3c:d4:61:09:5c: 32:e5:e7:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUwODA5MDEyMTMxWhcNMjUwODE2MDEyMTMxWjAYMRYwFAYD VQQDEw02ODk2YTI5Yi1mODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC5a1zyokvjJi133WDAWxpWSid3Lq3ZMW1gouI7r1K/FbkEzXq9RIYjFZobc VLgkCfZGRlq4B9bL6poJRxO6FI+oa67IJUXTSfProw0QPJDRLLfWqJY0PhDycYpq eAN1ghu+S6fg35nHZVfdbnKzO8R3L0FTs4MBnpZONI7TYGvtk++GXQSOk3m1IKTV NKxJPUruPiO4NwBjnox4CwahoZlgDR8zFG2qngRchCY2x/eS6sgd0tZAui1VVmGi L+T8cugFXZSq9W645NP21JibRdgdKGMWNd/XgKry+wZceDoHIUydQZ6EQKPnHOYG i/7zbAb0ZYP6ns1jxLbYePQX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4DN/lx uGUZtRfmjbYmgzZWtqycMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYA0P0ndp+sDu9W78+O5AEdNn4VfrO83CZDn0XXIqH3Av+CbT5YadI lDlWSovU2P+Z6r7DK9wNrjCiVZf+p9Cib9+q++9wPocx98h0I6OchjOH1ql2ruVx x/Zkr/x6/yIAQxfWuI1EDo7HxqGjPd90BeR/AO87IZRcN/9rJQlmVuGUOj+1cj3H f/LWc6xIk5Pkbqlt5NIMH4ZK0DgzcdGXR3yM9MKfkW1kian+pujjfrj7JiFWltpR FcNs0RLHTx0a4e2SbnSdSUajwE9zE4+IroXQEOfVdd3RW+Yrpq5ZytTh0dQDoS1V wnnB6RFWcqOT335nNgqHPNRhCVwy5efX -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:06 2025 by rpki-client