$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: jL/71rCxSx7Y9tJ6GBeP/Hqpjdf6wBx1eXdG0qEXtCw= Subject key identifier: 5F:8A:88:04:7F:68:B4:67:65:ED:3A:25:75:2D:41:E2:D6:99:40:21 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: F1 Signing time: Sat 09 Aug 2025 05:44:01 +0000 Manifest this update: Sat 09 Aug 2025 05:44:01 +0000 Manifest next update: Sat 16 Aug 2025 05:44:01 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: ByNUxRkUuNKX/8XtOV25MSEk5xyddE5kzGx1pUK0Gt4=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Aug 9 05:44:01 2025 GMT Not After : Aug 16 05:44:01 2025 GMT Subject: CN=6896e021-5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:99:08:e3:49:79:33:0b:4b:d8:ce:80:64: 0d:5a:13:d2:50:fb:d6:04:1f:a2:95:7d:4f:b1:cc: 27:ff:be:4b:37:de:34:21:89:66:3b:31:65:b1:61: e6:a5:51:a2:70:78:be:27:75:93:47:6e:b8:28:10: 69:b4:4b:a5:a5:48:2d:2c:9f:7f:9f:3d:32:f5:0c: 15:68:86:13:e7:2a:59:9c:92:ac:04:c2:0f:05:03: 39:6f:1b:5f:21:d7:aa:35:14:ac:eb:5c:a1:f9:ae: 64:b6:65:b0:12:17:3c:e1:38:14:e2:4f:75:2a:c3: 06:8d:4f:91:73:d8:69:93:22:ef:cc:d8:c2:85:a1: a2:3f:8c:d5:5c:8d:26:72:a8:f0:b7:65:b3:03:4d: 79:5c:5c:64:3d:0c:38:86:c9:35:ee:68:27:5f:33: c8:07:31:47:c0:92:92:21:d2:be:4b:8b:a8:f9:52: 02:95:04:d6:30:2e:2c:fe:45:44:03:4c:98:05:2b: ac:c1:3f:5e:3f:80:70:45:27:b2:37:1c:d7:00:d0: d9:96:11:af:bf:53:8a:ee:3f:b0:55:8f:8d:07:92: 33:db:c2:d5:20:9c:2b:0a:b7:90:4a:f0:c7:a9:38: 60:cc:2b:56:62:4b:32:25:86:65:0d:36:ef:49:dd: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:88:04:7F:68:B4:67:65:ED:3A:25:75:2D:41:E2:D6:99:40:21 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f3:54:4d:b1:46:f6:06:46:06:e3:60:b0:4e:be:08:18:c3: f5:e6:63:0d:6f:4b:b7:e2:89:0c:fe:1c:aa:53:a9:a7:26:9d: 15:bf:07:c4:a6:70:5c:d4:29:6d:42:84:f3:e0:a3:45:44:5b: 9d:10:b2:db:54:4d:85:ed:37:3a:31:fa:e8:a3:90:78:cc:23: 40:19:31:0e:fb:8a:e9:75:a0:97:0d:6a:fe:41:52:c1:3e:4e: cc:b0:6c:9a:9a:07:db:f9:dd:2d:69:8e:38:8f:bd:21:68:84: ed:09:d6:64:dd:16:7c:52:d9:3d:7d:0d:b9:11:33:33:ee:ec: 2a:fa:34:b6:f5:0b:8e:ff:46:84:4f:8e:16:84:54:e2:4c:e3: b6:a2:31:89:b3:bb:cb:96:7c:f6:ac:d8:f8:e5:0e:ea:44:a5: 30:9d:7e:97:da:8e:e8:b1:07:07:64:4a:2f:46:d4:62:03:2c: 4e:1b:44:a1:e7:87:60:01:8e:51:85:b5:3f:f6:03:fb:cb:39: e9:25:b4:36:05:a3:2f:30:39:70:c8:b8:ac:1d:94:d7:f7:24: 33:c1:bb:e8:78:ec:3a:f4:ef:46:0a:ef:3d:3f:b9:36:ac:64: c2:44:79:f5:f2:13:cf:ec:f5:30:a2:f3:1c:17:0e:5d:24:19: 35:cc:e7:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUwODA5MDU0NDAxWhcNMjUwODE2MDU0NDAxWjAYMRYwFAYD VQQDEw02ODk2ZTAyMS01YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZqZCONJeTMLS9jOgGQNWhPSUPvWBB+ilX1Pscwn/75LN940IYlmOzFlsWHm pVGicHi+J3WTR264KBBptEulpUgtLJ9/nz0y9QwVaIYT5ypZnJKsBMIPBQM5bxtf IdeqNRSs61yh+a5ktmWwEhc84TgU4k91KsMGjU+Rc9hpkyLvzNjChaGiP4zVXI0m cqjwt2WzA015XFxkPQw4hsk17mgnXzPIBzFHwJKSIdK+S4uo+VIClQTWMC4s/kVE A0yYBSuswT9eP4BwRSeyNxzXANDZlhGvv1OK7j+wVY+NB5Iz28LVIJwrCreQSvDH qThgzCtWYksyJYZlDTbvSd19/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+KiAR/ aLRnZe06JXUtQeLWmUAhMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM81RNsUb2BkYG42CwTr4IGMP15mMNb0u34okM/hyqU6mnJp0VvwfE pnBc1CltQoTz4KNFRFudELLbVE2F7Tc6Mfroo5B4zCNAGTEO+4rpdaCXDWr+QVLB Pk7MsGyamgfb+d0taY44j70haITtCdZk3RZ8Utk9fQ25ETMz7uwq+jS29QuO/0aE T44WhFTiTOO2ojGJs7vLlnz2rNj45Q7qRKUwnX6X2o7osQcHZEovRtRiAyxOG0Sh 54dgAY5RhbU/9gP7yznpJbQ2BaMvMDlwyLisHZTX9yQzwbvoeOw69O9GCu89P7k2 rGTCRHn18hPP7PUwovMcFw5dJBk1zOdk -----END CERTIFICATE-----Generated at Sun Aug 10 04:24:16 2025 by rpki-client