$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: QVwvUh4iqgU6fYh1iU9P5L08YeG46WKNniSJ2YfUebQ= Subject key identifier: F0:DC:4C:7A:30:E1:76:7D:59:13:78:8B:25:26:73:96:F9:85:AD:DE Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0956 Signing time: Fri 08 Aug 2025 20:30:48 +0000 Manifest this update: Fri 08 Aug 2025 20:30:48 +0000 Manifest next update: Fri 15 Aug 2025 20:30:48 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: EGbLeisKouUCCihxWhG5a2znVWjZcclA3bCKReR5cjo=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Aug 8 20:30:48 2025 GMT Not After : Aug 15 20:30:48 2025 GMT Subject: CN=68965e78-ebf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:be:b7:27:b3:bf:da:e2:65:a7:98:cb:dc: cc:ec:61:2a:b0:8e:e3:9e:9a:04:89:b0:56:65:4e: b1:07:80:ce:9c:95:df:46:44:54:35:ff:83:d4:e5: b4:41:50:ce:94:34:03:12:ea:d6:34:33:93:0f:16: 0f:2e:70:76:41:17:bd:a0:85:52:86:f6:25:e4:e7: 3a:d4:b3:aa:42:e7:63:14:88:17:2b:11:19:f1:09: 19:b6:f3:ca:66:57:60:df:79:45:4b:f8:fd:f7:b8: a0:a2:7a:23:61:c1:fa:41:59:20:db:b0:e6:31:2a: 2d:c9:cc:d2:33:5c:56:95:1c:f7:f6:af:d6:c9:9d: 05:7c:2a:cf:76:fd:2e:6c:ca:e7:7a:5f:83:e4:da: f5:10:99:15:f7:22:60:56:06:07:a3:68:62:8b:94: b0:b8:63:2b:dd:4d:53:98:43:be:ed:3c:93:91:da: 53:9b:93:a0:f3:43:28:da:6a:16:75:82:0b:8f:f1: f4:c1:ab:63:bc:29:44:14:d3:2a:b1:9d:cb:a5:12: 21:01:8a:f8:c2:9f:e2:03:a5:cf:8a:29:8e:7a:52: 47:bc:9f:18:d6:61:95:51:4e:b2:d5:d2:a0:a5:e6: 86:44:d1:29:b9:8b:ee:07:4c:55:86:42:62:d5:c5: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DC:4C:7A:30:E1:76:7D:59:13:78:8B:25:26:73:96:F9:85:AD:DE X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:97:ea:b9:76:a3:7a:c1:48:83:64:43:9c:5a:c9:8b:6a:85: 59:ab:e9:c6:76:a2:1d:94:9c:06:8d:97:6f:4c:53:f0:c2:75: a8:89:35:59:16:e3:64:9e:1b:ad:15:13:63:9a:8a:ef:f9:67: 45:7a:06:33:67:f9:1b:d2:2b:2f:21:63:7d:e3:be:de:c8:6f: a0:9a:b8:60:4d:bd:e3:80:5a:4c:83:a7:d4:fa:94:a5:53:62: 5a:34:35:fb:4b:c4:cf:66:e3:7d:d9:cb:15:4d:07:b7:22:cc: 03:d9:1e:0b:29:c2:cc:77:e9:ca:be:34:aa:fb:01:da:23:73: e1:fa:dd:64:de:38:e6:bb:ac:f4:3f:00:0a:e4:6f:74:31:bc: b7:18:4a:b9:5e:b3:a6:64:34:15:61:c7:06:6b:d3:e9:4c:cf: 8b:ef:28:a2:7e:6c:bc:6f:a3:bd:60:43:5c:b0:fc:fa:4d:4a: dd:80:8c:9f:8f:86:d6:a7:d8:a2:8d:dd:10:24:b7:49:c9:51: c2:c5:0e:4e:65:bc:97:28:a8:3b:cd:d5:2b:1d:75:47:91:d4: 0a:7a:29:df:61:aa:a3:6c:0b:50:45:ed:77:7a:70:54:d2:40: c6:48:88:c5:fc:c2:18:29:67:2e:64:ae:61:fb:85:e0:8c:64: 25:a7:cf:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwODA4MjAzMDQ4WhcNMjUwODE1MjAzMDQ4WjAYMRYwFAYD VQQDEw02ODk2NWU3OC1lYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqha+tyezv9riZaeYy9zM7GEqsI7jnpoEibBWZU6xB4DOnJXfRkRUNf+D1OW0 QVDOlDQDEurWNDOTDxYPLnB2QRe9oIVShvYl5Oc61LOqQudjFIgXKxEZ8QkZtvPK Zldg33lFS/j997igonojYcH6QVkg27DmMSotyczSM1xWlRz39q/WyZ0FfCrPdv0u bMrnel+D5Nr1EJkV9yJgVgYHo2hii5SwuGMr3U1TmEO+7TyTkdpTm5Og80Mo2moW dYILj/H0watjvClEFNMqsZ3LpRIhAYr4wp/iA6XPiimOelJHvJ8Y1mGVUU6y1dKg peaGRNEpuYvuB0xVhkJi1cW9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDcTHow 4XZ9WRN4iyUmc5b5ha3eMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9l+q5dqN6wUiDZEOcWsmLaoVZq+nGdqIdlJwGjZdvTFPwwnWoiTVZ FuNknhutFRNjmorv+WdFegYzZ/kb0isvIWN9477eyG+gmrhgTb3jgFpMg6fU+pSl U2JaNDX7S8TPZuN92csVTQe3IswD2R4LKcLMd+nKvjSq+wHaI3Ph+t1k3jjmu6z0 PwAK5G90Mby3GEq5XrOmZDQVYccGa9PpTM+L7yiifmy8b6O9YENcsPz6TUrdgIyf j4bWp9iijd0QJLdJyVHCxQ5OZbyXKKg7zdUrHXVHkdQKeinfYaqjbAtQRe13enBU 0kDGSIjF/MIYKWcuZK5h+4XgjGQlp89H -----END CERTIFICATE-----Generated at Sat Aug 9 22:46:09 2025 by rpki-client