$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: wZrgnNyj3vtyyWfL5Y3ASCDwhMTuM6Nl7u5ysrBdUj0= Subject key identifier: E1:71:DB:07:6D:57:0D:2E:1D:56:69:C9:8B:A1:49:2C:B3:A2:39:6E Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 4A Signing time: Tue 05 Aug 2025 07:59:51 +0000 Manifest this update: Tue 05 Aug 2025 07:59:51 +0000 Manifest next update: Tue 12 Aug 2025 07:59:50 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: OBSq54Ezy7SzDOGVcWr7Lzv06MtRn8+dYPB+4pfBTeE=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Aug 5 07:59:51 2025 GMT Not After : Aug 12 07:59:50 2025 GMT Subject: CN=6891b9f7-3f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:4f:19:5d:fb:f5:18:69:ff:75:4a:6c:2b: 17:49:24:4c:b1:ea:0c:d1:80:b4:ea:d9:bc:de:f9: 25:dc:25:b5:5b:98:ac:c0:f9:2e:96:50:63:97:68: 43:bc:01:4b:60:06:bf:b1:f7:87:54:8f:99:4d:01: 23:d3:1e:8a:88:ed:e5:96:e6:64:84:c7:6b:e0:75: 38:46:b4:3c:20:ba:5e:2c:93:7a:3c:d7:57:e4:2b: 2f:aa:e3:9c:7d:26:2b:2b:f9:c1:9a:da:e9:80:f6: ba:b2:6e:3f:17:35:ce:8f:bb:4d:ce:56:29:6a:a4: 8a:85:98:45:d3:5e:36:4d:7a:3d:de:a3:21:d4:47: 98:a8:43:70:88:95:60:c6:27:15:09:c5:46:d2:5e: 91:f9:cb:46:81:ba:4c:72:79:a3:27:3c:2f:b6:97: 94:03:29:db:e5:cb:65:6a:6f:19:32:ad:64:7c:a5: bf:91:66:83:1e:3a:93:fe:a9:50:e1:04:c2:4e:b7: 09:09:76:cd:d2:ca:7c:c8:8b:8e:2e:1b:7c:e5:30: 09:92:22:a6:a5:3b:85:73:d1:73:eb:58:96:9e:d8: e4:cc:d8:d6:cd:4d:99:8f:7e:66:ab:c6:b3:03:62: 39:a2:ea:d1:80:37:8b:5a:e8:28:af:6b:0b:a5:04: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:71:DB:07:6D:57:0D:2E:1D:56:69:C9:8B:A1:49:2C:B3:A2:39:6E X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ae:43:50:4e:9d:57:72:2c:a7:01:b7:f3:aa:d4:75:a5:16: 17:c4:af:30:dd:a6:f5:20:4b:98:da:05:9b:eb:30:88:ea:c6: 6d:e4:93:22:cd:41:31:11:9a:17:d2:ff:43:eb:8e:ae:c2:0a: 04:97:5e:fc:bd:6b:40:99:a7:28:a6:6e:0d:d7:e7:90:a5:b0: 32:a4:0b:e1:25:26:99:76:6c:9b:81:9c:e5:56:97:f1:43:a9: 88:c7:d3:fa:4c:6b:fe:51:45:3e:d5:1e:f0:93:0d:7e:df:c9: e8:05:cc:84:ac:bb:0e:be:59:ca:ed:8c:5c:13:17:cf:38:1a: eb:32:e3:7a:44:80:c5:8d:ab:a1:25:31:67:ef:40:df:91:10: 8a:41:92:cd:0c:24:75:13:37:c7:ae:b1:0e:05:97:77:73:92: 49:cf:b0:e9:f6:db:30:15:43:f8:8a:52:4b:19:70:e4:30:76: d5:01:c6:d7:7f:2d:6d:ab:6a:f1:fb:75:e2:2b:f9:ae:98:7a: 2d:31:33:75:f0:66:91:54:06:59:44:60:f2:45:82:94:24:db: 48:8e:b1:6b:0c:2d:34:7c:f7:cd:1a:a0:ed:93:c9:8a:e7:f1: 7c:a6:01:26:b3:74:6a:9d:eb:8e:a5:ff:f4:7f:26:8e:b4:29: a4:d9:f0:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTA4MDUwNzU5NTFaFw0yNTA4MTIwNzU5NTBaMBgxFjAUBgNV BAMTDTY4OTFiOWY3LTNmMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Ek8ZXfv1GGn/dUpsKxdJJEyx6gzRgLTq2bze+SXcJbVbmKzA+S6WUGOXaEO8 AUtgBr+x94dUj5lNASPTHoqI7eWW5mSEx2vgdThGtDwgul4sk3o811fkKy+q45x9 Jisr+cGa2umA9rqybj8XNc6Pu03OVilqpIqFmEXTXjZNej3eoyHUR5ioQ3CIlWDG JxUJxUbSXpH5y0aBukxyeaMnPC+2l5QDKdvly2VqbxkyrWR8pb+RZoMeOpP+qVDh BMJOtwkJds3SynzIi44uG3zlMAmSIqalO4Vz0XPrWJae2OTM2NbNTZmPfmarxrMD Yjmi6tGAN4ta6CivawulBFKbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4XHbB21X DS4dVmnJi6FJLLOiOW4wHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWuQ1BOnVdyLKcBt/Oq1HWlFhfErzDdpvUgS5jaBZvrMIjqxm3kkyLN QTERmhfS/0Prjq7CCgSXXvy9a0CZpyimbg3X55ClsDKkC+ElJpl2bJuBnOVWl/FD qYjH0/pMa/5RRT7VHvCTDX7fyegFzISsuw6+WcrtjFwTF884Gusy43pEgMWNq6El MWfvQN+REIpBks0MJHUTN8eusQ4Fl3dzkknPsOn22zAVQ/iKUksZcOQwdtUBxtd/ LW2ravH7deIr+a6Yei0xM3XwZpFUBllEYPJFgpQk20iOsWsMLTR8980aoO2TyYrn 8XymASazdGqd646l//R/Jo60KaTZ8D4= -----END CERTIFICATE-----Generated at Wed Aug 6 07:56:03 2025 by rpki-client