$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: Ua5v44dXfe+K1H4m2iL92Re4mrwcuw0U68RdrNN3b54= Subject key identifier: 2D:62:00:19:8E:AE:D3:42:81:57:9E:71:28:40:0E:7E:16:48:C7:81 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 80 Signing time: Sat 09 Aug 2025 07:12:08 +0000 Manifest this update: Sat 09 Aug 2025 07:12:08 +0000 Manifest next update: Sat 16 Aug 2025 07:12:08 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: tuFF0UKsPoFybIYCLdTLgWXZCMjEm82DD49fvWPSWdQ=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: 7AoMz8H6zHHdV8IPpxWlOn2xVFqVFr83q+XexoYNuOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Aug 9 07:12:08 2025 GMT Not After : Aug 16 07:12:08 2025 GMT Subject: CN=6896f4c8-bcf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:7c:3d:0f:38:7a:de:74:cc:a0:dc:f1:3a: f5:e3:85:67:4a:5b:00:04:72:25:4e:4e:ba:0b:f5: 78:f8:b9:80:20:f0:5a:2c:0f:e6:ae:f9:d7:ad:38: ea:80:93:a2:4e:85:2b:f9:d6:83:7d:a3:0a:41:c7: e1:2f:3d:4c:93:1f:25:c6:dd:6b:80:d5:da:25:b1: e2:55:de:c2:97:a3:37:fd:dc:4e:e5:5f:97:74:25: 97:9f:61:fa:d1:5e:b7:b6:49:67:f6:6c:51:20:ec: 22:b0:c1:6b:bb:1c:77:94:b0:4d:9d:ca:15:cf:ff: 49:f6:57:40:54:32:b5:ec:d7:4b:f0:dd:7c:fc:f4: 3a:83:65:0d:52:e4:26:00:f2:c3:0d:6e:a3:53:b2: a3:ce:14:0a:48:00:33:15:fa:f4:2c:1d:83:5d:19: b7:86:52:a9:58:63:37:23:ec:0b:b7:c4:e5:91:24: 6a:f2:28:eb:31:32:31:4c:18:4f:94:6c:47:f9:5a: ef:22:55:df:c3:49:8f:c4:37:14:67:73:25:4f:96: b9:06:12:dc:c3:6e:64:1d:a0:e6:6e:56:c0:7a:2b: 51:d6:4d:b5:2f:07:b9:6c:ec:d6:c2:7b:32:45:d4: a5:73:0a:23:68:fd:eb:a8:9c:90:ad:88:ba:9f:f2: 53:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:62:00:19:8E:AE:D3:42:81:57:9E:71:28:40:0E:7E:16:48:C7:81 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b7:e3:c7:bd:70:71:df:17:e4:14:ae:82:4c:ba:24:b6:a8: 9a:01:a8:3b:70:72:72:08:3f:2b:1f:b6:4d:bd:ba:1c:57:a7: 42:69:30:08:b2:ba:90:99:27:2e:27:a8:f2:9c:54:51:e0:85: d0:62:12:14:53:86:57:8a:82:b5:e3:1c:27:1f:49:e5:5b:99: 03:58:9d:61:8a:fa:1c:e7:d7:16:06:45:a7:9b:34:b0:a9:70: 54:27:97:79:99:14:9a:2e:e2:f2:41:b1:7b:f5:ab:93:e8:b2: 24:8e:07:55:2e:3a:87:b4:e9:29:dc:8e:a0:03:8c:33:37:7a: 3d:58:3f:d4:03:8f:f2:54:27:17:e3:bc:35:e3:5d:0b:ca:6e: 5f:79:f5:c8:ee:37:a9:04:52:89:54:4b:4b:11:a8:60:c1:c7: ab:6c:d6:71:09:5e:95:59:1a:57:36:83:e5:70:ec:15:3f:7b: b9:b7:d2:7b:fd:cf:ed:83:78:27:d0:41:c7:ba:26:75:88:91: d2:44:ea:3d:32:f0:9a:9f:dd:ad:cf:26:a8:ed:c5:d1:be:13: d6:ec:67:61:5b:d4:a0:c6:ca:42:2c:af:cc:d7:c4:e7:f8:ce: b0:b8:33:6f:d0:eb:6e:e3:11:80:2b:92:30:ae:db:67:d4:6a: b7:a8:5c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC QzVFMDk5NkUwHhcNMjUwODA5MDcxMjA4WhcNMjUwODE2MDcxMjA4WjAYMRYwFAYD VQQDEw02ODk2ZjRjOC1iY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzed8PQ84et50zKDc8Tr144VnSlsABHIlTk66C/V4+LmAIPBaLA/mrvnXrTjq gJOiToUr+daDfaMKQcfhLz1Mkx8lxt1rgNXaJbHiVd7Cl6M3/dxO5V+XdCWXn2H6 0V63tkln9mxRIOwisMFruxx3lLBNncoVz/9J9ldAVDK17NdL8N18/PQ6g2UNUuQm APLDDW6jU7KjzhQKSAAzFfr0LB2DXRm3hlKpWGM3I+wLt8TlkSRq8ijrMTIxTBhP lGxH+VrvIlXfw0mPxDcUZ3MlT5a5BhLcw25kHaDmblbAeitR1k21Lwe5bOzWwnsy RdSlcwojaP3rqJyQrYi6n/JTZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1iABmO rtNCgVeecShADn4WSMeBMB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1 RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkE5Ni84QTM1MDkwQ0I1RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZN RFlSOHh0eWNyM2k4WGdtVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYt+PHvXBx3xfkFK6CTLoktqiaAag7cHJyCD8rH7ZNvbocV6dCaTAI srqQmScuJ6jynFRR4IXQYhIUU4ZXioK14xwnH0nlW5kDWJ1hivoc59cWBkWnmzSw qXBUJ5d5mRSaLuLyQbF79auT6LIkjgdVLjqHtOkp3I6gA4wzN3o9WD/UA4/yVCcX 47w1410Lym5fefXI7jepBFKJVEtLEahgwcerbNZxCV6VWRpXNoPlcOwVP3u5t9J7 /c/tg3gn0EHHuiZ1iJHSROo9MvCan92tzyao7cXRvhPW7GdhW9SgxspCLK/M18Tn +M6wuDNv0Otu4xGAK5Iwrttn1Gq3qFxT -----END CERTIFICATE-----Generated at Mon Aug 11 07:30:45 2025 by rpki-client