$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: WPsc3l82lF5HkRw5Dm5UKua4UAkS9qn3bw4G7fv8FT8= Subject key identifier: 87:0A:8B:D5:92:96:CC:29:33:19:4B:AF:E0:3D:72:CA:C0:C3:9B:02 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01B6 Signing time: Sat 09 Aug 2025 03:28:43 +0000 Manifest this update: Sat 09 Aug 2025 03:28:42 +0000 Manifest next update: Sat 16 Aug 2025 03:28:42 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: /AhqwGGB6wkB6WyLhTNsKu/PD9HCQk9m/sTqlsuV1bM=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Aug 9 03:28:42 2025 GMT Not After : Aug 16 03:28:42 2025 GMT Subject: CN=6896c06a-6966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:1a:ba:48:94:3f:42:09:99:2b:82:63:cc: 83:77:a3:eb:b5:70:9b:b6:4c:2a:e5:5b:c8:e5:8a: b4:8a:03:3e:8f:15:6a:2b:8f:d7:c1:6a:8e:3d:84: bd:0c:44:9f:46:96:da:19:c8:04:b3:df:2e:ee:7f: c8:72:8a:ef:7e:6b:5e:96:74:1e:a6:88:b4:e6:90: fd:3d:80:9a:0d:e6:44:a9:4d:c8:19:56:02:b1:84: 5c:1b:9f:41:07:9b:02:40:d6:71:24:63:f9:ba:54: c4:26:29:70:b5:82:d2:bf:62:dc:61:80:88:36:31: 20:13:6d:06:5a:f7:0d:4d:5d:26:e6:c2:a0:4d:cb: 5f:a7:2f:c9:43:66:39:21:80:d7:85:89:98:92:39: a4:10:49:35:8c:ff:31:9a:09:56:94:4b:4b:85:e8: 6a:21:92:34:cc:50:69:93:39:0a:8d:0e:13:19:f5: 5e:d3:4c:d0:0c:44:be:6c:dc:35:a0:16:47:7a:91: cc:31:c7:d4:e5:21:22:51:83:e8:52:af:76:87:b0: 21:ca:1d:7b:73:3a:36:5b:38:0e:fb:a4:15:e9:d9: 9e:81:5c:91:c1:cb:b9:21:bb:1f:eb:a3:a1:bf:c8: a1:e7:8a:80:b0:ae:b3:6a:eb:43:34:43:78:4c:50: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0A:8B:D5:92:96:CC:29:33:19:4B:AF:E0:3D:72:CA:C0:C3:9B:02 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:bb:12:98:ac:f2:af:7c:26:4b:b1:9b:b7:ef:bb:9f:fd:06: 8b:d2:77:59:7b:12:bb:1c:e6:06:dd:fb:ab:77:fc:bc:39:2e: 47:f1:60:0a:76:63:6e:f6:f1:7f:cc:61:18:88:96:a2:41:62: 48:90:2a:05:76:e1:ae:33:d4:e5:c0:38:55:ea:96:65:56:f8: f6:33:18:22:70:5c:6f:b9:fa:f6:c9:40:6b:26:6e:fc:c5:62: aa:bf:fd:56:a3:57:7c:3e:ba:a0:08:c1:9d:8e:36:5e:f7:94: e7:b2:6a:82:95:12:7a:9a:4f:62:29:79:e5:5d:41:3e:0a:6f: 60:be:42:9b:d6:45:91:a4:7a:19:be:f1:3e:07:ca:e4:02:71: 49:68:7a:6d:42:7a:04:77:6f:bc:62:d0:54:76:48:14:96:c4: ec:c0:42:48:2a:69:f7:18:05:33:ac:25:c7:18:3c:9d:38:ec: ff:d2:f7:81:06:d0:91:e5:2d:d1:72:a4:47:da:bf:19:cb:76: 1f:d2:5b:95:79:1f:4a:40:06:e1:7b:f3:98:71:7c:9d:4c:e7: bc:0f:72:76:bc:1b:a9:08:02:eb:c1:c9:09:fd:fb:67:f8:dd: b6:ff:da:83:c3:c7:da:e0:da:80:b3:29:aa:5d:07:9a:86:b8: 6c:6c:c4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwODA5MDMyODQyWhcNMjUwODE2MDMyODQyWjAYMRYwFAYD VQQDEw02ODk2YzA2YS02OTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkoaukiUP0IJmSuCY8yDd6PrtXCbtkwq5VvI5Yq0igM+jxVqK4/XwWqOPYS9 DESfRpbaGcgEs98u7n/IcorvfmtelnQepoi05pD9PYCaDeZEqU3IGVYCsYRcG59B B5sCQNZxJGP5ulTEJilwtYLSv2LcYYCINjEgE20GWvcNTV0m5sKgTctfpy/JQ2Y5 IYDXhYmYkjmkEEk1jP8xmglWlEtLhehqIZI0zFBpkzkKjQ4TGfVe00zQDES+bNw1 oBZHepHMMcfU5SEiUYPoUq92h7Ahyh17czo2WzgO+6QV6dmegVyRwcu5Ibsf66Oh v8ih54qAsK6zautDNEN4TFDanwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcKi9WS lswpMxlLr+A9csrAw5sCMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2uxKYrPKvfCZLsZu377uf/QaL0ndZexK7HOYG3furd/y8OS5H8WAK dmNu9vF/zGEYiJaiQWJIkCoFduGuM9TlwDhV6pZlVvj2MxgicFxvufr2yUBrJm78 xWKqv/1Wo1d8PrqgCMGdjjZe95TnsmqClRJ6mk9iKXnlXUE+Cm9gvkKb1kWRpHoZ vvE+B8rkAnFJaHptQnoEd2+8YtBUdkgUlsTswEJIKmn3GAUzrCXHGDydOOz/0veB BtCR5S3RcqRH2r8Zy3Yf0luVeR9KQAbhe/OYcXydTOe8D3J2vBupCALrwckJ/ftn +N22/9qDw8fa4NqAsymqXQeahrhsbMRp -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:37 2025 by rpki-client