$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json) Hash identifier: B9GS42wzzas8auLhyf0bDDiyfp8g67wsur0wGIQmpQo= Subject key identifier: 69:E0:1F:0F:38:7E:19:E4:B4:1D:A1:DE:AF:6A:EE:C4:9D:14:62:10 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 10DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft Manifest number: 10CE Signing time: Sun 10 Aug 2025 17:18:50 +0000 Manifest this update: Sun 10 Aug 2025 17:18:50 +0000 Manifest next update: Sun 17 Aug 2025 17:18:50 +0000 Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: 4Wl29ox6omq5AvilqoAThdlpD6pSP9SfdJ1V67u7yA8=) 2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: ibzIHQiS71/cKL/AN17g76C8mULHtazMynL8XoJHu8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4317 (0x10dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Aug 10 17:18:50 2025 GMT Not After : Aug 17 17:18:50 2025 GMT Subject: CN=6898d47a-8455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:24:07:64:5b:d6:93:d4:73:f9:a9:78:1f: 0f:7e:cb:fa:25:b3:c0:64:d1:dd:59:d4:c4:93:b8: c2:b4:6c:0f:d2:15:90:67:de:17:b4:f6:29:a8:4f: d0:d4:a2:f8:cf:df:11:30:a2:22:60:ad:45:56:ce: 1a:c9:8d:f0:d2:d3:40:6f:ec:78:c9:71:5e:51:f0: 26:d0:fb:f5:db:db:6d:a8:43:27:b1:e7:57:a1:50: dc:32:eb:7f:8d:7d:77:26:ae:02:8a:b9:b0:a7:78: 27:e1:34:13:a4:41:ce:a9:7a:d9:0e:f4:1e:47:36: a6:48:fd:4b:55:c3:a3:b3:07:97:99:02:09:11:c5: 03:23:c4:66:91:6b:b6:0d:d5:08:4e:fb:34:d4:8c: 7b:48:7d:a4:7a:a6:d6:ee:63:a4:c8:06:00:e7:71: a3:26:4e:08:db:75:88:af:61:c5:13:2a:b7:d0:32: f2:d7:39:c7:ef:35:34:ba:59:ca:d9:e8:18:5d:3a: 51:bd:38:11:cc:00:78:d0:97:e3:00:40:68:e2:8f: 39:68:2b:37:71:7a:43:e7:90:a4:91:ad:1c:63:87: 0d:71:03:b6:d0:3f:c9:02:1a:4a:43:46:bf:5c:59: 03:53:41:29:69:3c:4f:a3:ef:e8:14:e4:0c:b1:ef: 70:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E0:1F:0F:38:7E:19:E4:B4:1D:A1:DE:AF:6A:EE:C4:9D:14:62:10 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:99:56:9b:91:4a:88:67:68:24:cd:a6:75:73:ea:97:19:fb: a1:c1:b8:0e:a5:fd:64:ac:05:94:1c:75:da:b2:8b:d5:42:55: 97:79:ce:56:e0:1e:ab:67:3d:02:ca:de:9b:10:a2:1d:fb:2e: 50:3b:f1:d9:35:50:8c:86:31:d3:38:40:6c:01:bc:75:9e:dc: e5:b6:ed:e5:bf:61:6a:97:de:5b:95:fc:d7:f1:e0:dc:12:93: d9:20:88:67:8b:2e:d0:b8:88:9d:ea:51:66:6b:4e:82:e5:13: 1d:22:37:09:db:af:08:d7:37:65:10:4d:cb:1d:9b:cc:07:d8: 73:7e:0f:df:4e:8f:21:e0:72:ff:20:bb:08:77:de:5f:3c:1a: 60:05:f9:3f:fb:a7:0c:38:ac:17:ff:e8:1b:e0:ae:4d:b5:7f: 18:25:5e:78:27:50:3f:96:de:49:43:b9:da:86:bf:e6:3b:12: 13:db:53:12:d0:42:93:35:5f:30:d3:65:06:92:e4:75:8b:17: f8:9f:ff:05:10:76:e4:38:b5:47:9f:7b:89:4e:fb:7d:7e:03: 7b:b0:0b:86:52:1b:0b:08:29:07:31:49:ca:14:39:ae:8d:6d: 83:61:9a:29:19:43:23:57:8a:c4:ef:b6:58:d8:f6:a8:72:bc: fd:79:16:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjUwODEwMTcxODUwWhcNMjUwODE3MTcxODUwWjAYMRYwFAYD VQQDEw02ODk4ZDQ3YS04NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtMkB2Rb1pPUc/mpeB8Pfsv6JbPAZNHdWdTEk7jCtGwP0hWQZ94XtPYpqE/Q 1KL4z98RMKIiYK1FVs4ayY3w0tNAb+x4yXFeUfAm0Pv129ttqEMnsedXoVDcMut/ jX13Jq4Cirmwp3gn4TQTpEHOqXrZDvQeRzamSP1LVcOjsweXmQIJEcUDI8RmkWu2 DdUITvs01Ix7SH2keqbW7mOkyAYA53GjJk4I23WIr2HFEyq30DLy1znH7zU0ulnK 2egYXTpRvTgRzAB40JfjAEBo4o85aCs3cXpD55Ckka0cY4cNcQO20D/JAhpKQ0a/ XFkDU0EpaTxPo+/oFOQMse9wjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGngHw84 fhnktB2h3q9q7sSdFGIQMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBImVabkUqIZ2gkzaZ1c+qXGfuhwbgOpf1krAWUHHXasovVQlWXec5W 4B6rZz0Cyt6bEKId+y5QO/HZNVCMhjHTOEBsAbx1ntzltu3lv2Fql95blfzX8eDc EpPZIIhniy7QuIid6lFma06C5RMdIjcJ268I1zdlEE3LHZvMB9hzfg/fTo8h4HL/ ILsId95fPBpgBfk/+6cMOKwX/+gb4K5NtX8YJV54J1A/lt5JQ7nahr/mOxIT21MS 0EKTNV8w02UGkuR1ixf4n/8FEHbkOLVHn3uJTvt9fgN7sAuGUhsLCCkHMUnKFDmu jW2DYZopGUMjV4rE77ZY2Paocrz9eRZS -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:31 2025 by rpki-client