$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: 82hR9KMmyAM3MFjsSPnapf7VbQUUsmiBmf92SIk6UFQ= Subject key identifier: 18:9F:5A:E4:E4:39:1B:1C:8D:95:7E:7D:DB:DC:30:CB:32:64:F7:85 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0805 Signing time: Fri 08 Aug 2025 21:16:55 +0000 Manifest this update: Fri 08 Aug 2025 21:16:55 +0000 Manifest next update: Fri 15 Aug 2025 21:16:55 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: Nqalgqs0reHCHI2pePk1CzK5C7T7T+ugFm3hqyEJ5Fo=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Aug 8 21:16:55 2025 GMT Not After : Aug 15 21:16:55 2025 GMT Subject: CN=68966947-9407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:72:d1:1f:0b:54:5a:3e:d1:01:6d:b7:1a: 95:69:50:4d:40:27:b1:2f:50:21:b3:7c:c1:45:96: b9:a9:8b:48:7a:a6:cf:1b:d6:8d:b1:52:7a:b2:60: 69:3a:fc:1f:5d:24:1d:e3:83:1b:92:6c:c1:d9:e3: d4:24:31:3d:d8:27:53:d0:fe:8d:01:14:fd:0e:24: 08:3a:18:2e:c9:89:9c:a5:f0:b5:e7:80:12:ad:88: 8f:ca:32:57:cd:78:9f:e6:ed:35:85:b0:3f:b5:d7: bd:11:41:64:72:8f:37:ed:63:55:a3:28:cd:df:91: 4b:7e:20:5d:d5:de:06:51:07:61:74:47:bc:0e:29: 9c:5c:c0:5f:ea:32:6a:f8:9d:84:42:bf:eb:2b:ad: cc:f7:84:47:a5:9f:d7:12:64:4b:b6:ca:4a:90:03: 52:5e:c0:b6:a8:25:b9:3e:41:22:03:87:d1:4d:f1: 4e:19:bb:37:0d:bf:3b:cf:ea:65:47:4d:38:84:2c: 61:ee:88:d8:55:8e:35:a4:4f:df:7f:c5:ca:5d:72: 87:e4:53:a8:ea:41:e9:f3:ab:34:46:1b:5e:fe:56: d0:bf:93:0c:77:c1:5e:b3:98:f3:77:0f:e3:4d:da: ef:e0:8e:53:e5:5a:f1:81:74:65:e6:c0:02:08:ca: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9F:5A:E4:E4:39:1B:1C:8D:95:7E:7D:DB:DC:30:CB:32:64:F7:85 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:08:35:8f:eb:9b:0a:c6:a3:b2:a5:c4:c9:3b:e8:46:13:b8: 99:bb:28:ae:78:02:e6:fd:ee:0e:95:6e:c3:f9:52:77:81:7a: a7:c5:69:d5:9c:a5:05:17:17:2f:0d:19:37:d1:86:b7:2f:d3: 41:5d:17:8d:12:3e:90:26:16:2c:a0:aa:78:e1:03:8a:5a:55: a4:e4:ee:07:72:cd:76:4c:fc:11:51:5b:c1:44:c7:d1:c3:fb: 21:1b:08:42:fb:d7:4d:bc:d7:57:49:59:38:19:34:e0:52:56: b5:fd:cf:7a:39:dd:73:f4:76:22:93:24:b2:bd:d5:c4:ba:b5: 64:b6:72:60:8a:42:a1:4e:d8:01:bc:5a:3a:c0:83:90:fd:1d: f5:c1:58:19:ec:03:ec:4d:9e:e4:db:a0:f1:67:5e:3c:94:af: 65:3c:10:72:14:d2:11:54:dd:7f:cd:ee:ff:56:62:16:d8:eb: 4f:c7:0e:6c:b3:f0:85:48:37:f3:73:88:1a:bf:6b:92:9a:a9: 3f:78:7e:77:0d:c5:86:9e:e2:04:40:bf:11:3d:be:6a:66:b2: 49:13:f5:55:de:60:be:82:91:9a:1e:fd:fa:59:e6:86:53:2e: 65:8c:88:88:c6:88:9e:0b:0a:df:81:8d:ae:77:7c:8c:8d:17: f8:64:0d:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwODA4MjExNjU1WhcNMjUwODE1MjExNjU1WjAYMRYwFAYD VQQDEw02ODk2Njk0Ny05NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGhy0R8LVFo+0QFttxqVaVBNQCexL1Ahs3zBRZa5qYtIeqbPG9aNsVJ6smBp OvwfXSQd44MbkmzB2ePUJDE92CdT0P6NART9DiQIOhguyYmcpfC154ASrYiPyjJX zXif5u01hbA/tde9EUFkco837WNVoyjN35FLfiBd1d4GUQdhdEe8DimcXMBf6jJq +J2EQr/rK63M94RHpZ/XEmRLtspKkANSXsC2qCW5PkEiA4fRTfFOGbs3Db87z+pl R004hCxh7ojYVY41pE/ff8XKXXKH5FOo6kHp86s0Rhte/lbQv5MMd8Fes5jzdw/j Tdrv4I5T5VrxgXRl5sACCMpRhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBifWuTk ORscjZV+fdvcMMsyZPeFMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPCDWP65sKxqOypcTJO+hGE7iZuyiueALm/e4OlW7D+VJ3gXqnxWnV nKUFFxcvDRk30Ya3L9NBXReNEj6QJhYsoKp44QOKWlWk5O4Hcs12TPwRUVvBRMfR w/shGwhC+9dNvNdXSVk4GTTgUla1/c96Od1z9HYikySyvdXEurVktnJgikKhTtgB vFo6wIOQ/R31wVgZ7APsTZ7k26DxZ148lK9lPBByFNIRVN1/ze7/VmIW2OtPxw5s s/CFSDfzc4gav2uSmqk/eH53DcWGnuIEQL8RPb5qZrJJE/VV3mC+gpGaHv36WeaG Uy5ljIiIxoieCwrfgY2ud3yMjRf4ZA1+ -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:15 2025 by rpki-client