$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json) Hash identifier: +XIrhZ5JisKIEeGo1qmlxUTNGf3O32YzmAySxIrDaOA= Subject key identifier: D2:8D:7C:70:3D:86:AD:A4:FF:74:8D:ED:50:C3:74:70:20:5B:0F:E3 Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft Manifest number: 03D8 Signing time: Wed 13 Aug 2025 01:06:43 +0000 Manifest this update: Wed 13 Aug 2025 01:06:43 +0000 Manifest next update: Wed 20 Aug 2025 01:06:43 +0000 Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: 7YtZEadkPktprq7XNdNpnYGFjQaHxeYobMAToFrs2GQ=) 2: 97D35382924311EC927C972FC4F9AE02.roa (hash: F5cT4m4LGvhZopgIl7MS1o33/eaQaKX2bSwBB1GnJYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Validity Not Before: Aug 13 01:06:43 2025 GMT Not After : Aug 20 01:06:43 2025 GMT Subject: CN=689be523-a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:d2:bf:31:25:bb:cb:99:01:b6:b2:54:c9: 6d:bc:5b:7f:1f:6f:bd:d9:ba:38:25:ba:ff:4c:40: fc:75:db:81:bd:04:0f:5a:73:e7:ab:0b:d5:2a:d3: fb:5d:15:bc:25:66:b6:28:a9:0f:70:fa:52:74:c0: 2a:95:18:d9:c4:9b:01:dc:01:b4:14:4a:64:67:ef: 8b:40:f7:7d:20:32:11:c5:ce:8f:40:4f:87:8b:ea: 69:c1:9e:8f:ea:5a:eb:6d:ab:01:47:36:b1:e3:4e: cf:2c:e8:19:9b:19:ec:bf:18:c5:9e:41:1b:80:eb: 48:6b:e3:86:98:53:f7:2a:a6:8f:a1:dd:c3:46:e4: 7d:cd:c3:f2:d0:06:df:e6:c2:36:56:a1:0c:6c:26: d0:e4:cd:95:c1:ee:86:f2:e0:02:c9:2f:be:36:29: f7:49:c4:71:4a:4b:43:15:87:ac:d0:fa:11:d8:09: 68:c2:19:67:37:4c:c8:c0:7c:ac:c6:de:f8:e0:44: 34:77:f4:67:59:05:ef:75:8e:d4:69:54:07:39:83: ba:fb:fd:93:00:d5:54:fa:e3:26:7b:7d:5c:b3:86: fa:d9:7f:63:e6:ea:1e:33:74:0b:9d:f6:bb:aa:34: 4c:8d:17:8f:f6:b4:6e:06:6b:85:c0:31:b9:2b:51: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8D:7C:70:3D:86:AD:A4:FF:74:8D:ED:50:C3:74:70:20:5B:0F:E3 X509v3 Authority Key Identifier: keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5f:28:8f:11:d3:33:4b:86:99:6e:ae:f8:2c:fd:d9:17:59: 81:51:ea:12:86:dc:d8:fc:ab:bd:f9:79:8f:f0:2b:fe:a5:61: 11:ae:65:97:53:36:f6:27:03:5b:ff:10:d4:7a:30:4f:00:32: e8:37:48:80:72:07:23:0d:8d:b5:e5:d1:2f:69:87:81:e4:4a: d9:3f:4f:ca:4d:f1:c2:44:4b:6c:e5:25:1d:80:1f:97:fa:e5: 24:50:5b:1d:82:44:78:5f:d4:22:44:fe:5c:ea:04:6d:1f:35: 65:ac:55:eb:b8:a8:9f:c3:56:a6:45:e8:09:a0:8f:66:df:a7: d9:b7:f9:52:10:6e:24:f1:b3:38:ce:98:3f:af:c9:d2:10:58: 1e:c5:99:20:9b:30:75:d9:b9:df:aa:cf:6b:0e:fc:cc:bf:ac: e0:65:54:b9:d4:2d:db:d5:c6:aa:83:15:37:f3:13:d3:2e:23: 09:e3:b5:17:1a:a2:e8:70:93:76:09:d5:bd:32:4b:46:81:5a: 6c:a0:cf:04:12:f2:ae:8b:f4:0f:c9:ee:c5:73:7c:18:fb:f0: b7:1d:b1:31:f4:71:62:26:38:21:fb:f4:22:91:28:e3:7e:d8: ad:c5:cb:ca:4d:e3:8b:d6:81:34:0f:22:c3:0a:d6:85:74:48: 8a:50:6d:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew NjlEMDRENTkwHhcNMjUwODEzMDEwNjQzWhcNMjUwODIwMDEwNjQzWjAYMRYwFAYD VQQDEw02ODliZTUyMy1hNzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BnSvzElu8uZAbayVMltvFt/H2+92bo4Jbr/TED8dduBvQQPWnPnqwvVKtP7 XRW8JWa2KKkPcPpSdMAqlRjZxJsB3AG0FEpkZ++LQPd9IDIRxc6PQE+Hi+ppwZ6P 6lrrbasBRzax407PLOgZmxnsvxjFnkEbgOtIa+OGmFP3KqaPod3DRuR9zcPy0Abf 5sI2VqEMbCbQ5M2Vwe6G8uACyS++Nin3ScRxSktDFYes0PoR2AlowhlnN0zIwHys xt744EQ0d/RnWQXvdY7UaVQHOYO6+/2TANVU+uMme31cs4b62X9j5uoeM3QLnfa7 qjRMjReP9rRuBmuFwDG5K1FVLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKNfHA9 hq2k/3SN7VDDdHAgWw/jMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ ZksxWHlPZW5SOG9HblFUVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzXyiPEdMzS4aZbq74LP3ZF1mBUeoShtzY/Ku9+XmP8Cv+pWERrmWX Uzb2JwNb/xDUejBPADLoN0iAcgcjDY215dEvaYeB5ErZP0/KTfHCREts5SUdgB+X +uUkUFsdgkR4X9QiRP5c6gRtHzVlrFXruKifw1amRegJoI9m36fZt/lSEG4k8bM4 zpg/r8nSEFgexZkgmzB12bnfqs9rDvzMv6zgZVS51C3b1caqgxU38xPTLiMJ47UX GqLocJN2CdW9MktGgVpsoM8EEvKui/QPye7Fc3wY+/C3HbEx9HFiJjgh+/QikSjj ftitxcvKTeOL1oE0DyLDCtaFdEiKUG3H -----END CERTIFICATE-----Generated at Wed Aug 13 05:29:13 2025 by rpki-client