$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: az4te5Dsu8nvvITWAw14GH6RZhwfIOAr7et5dLrKrpg= Subject key identifier: 2B:16:0B:0E:19:2A:A7:CC:36:F6:76:35:EB:E2:CE:01:52:61:89:9F Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 01BD Signing time: Thu 07 Aug 2025 03:42:14 +0000 Manifest this update: Thu 07 Aug 2025 03:42:14 +0000 Manifest next update: Thu 14 Aug 2025 03:42:13 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: 9f3YaN9KHjomlvX5FdGRHTP5h8aS9m1RbZQrIlvf/oA=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: eTkk2If6zpml/RuCza+brdDkrA2sYBq8cWe9+X2do9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Aug 7 03:42:14 2025 GMT Not After : Aug 14 03:42:13 2025 GMT Subject: CN=68942096-66be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:1f:3a:b0:72:6d:ed:82:3b:47:b5:7f:35: 96:36:55:18:90:92:f1:e6:e9:d2:68:43:25:3f:7c: 47:98:c9:33:53:a3:2e:43:fb:74:2b:7e:ad:9b:cc: 2a:ef:c2:e9:d0:80:97:51:53:b2:a8:6a:6b:d3:d1: ee:d5:92:89:1f:de:b5:75:57:b1:98:73:43:ac:02: 50:68:3e:38:66:c9:a4:f2:60:63:ff:a9:e8:a9:b2: c5:07:8c:a3:15:2f:59:42:bb:94:91:6d:88:1e:57: cf:9c:95:d0:3e:9d:21:7f:8f:ce:33:71:66:87:19: cb:c6:e4:6e:4c:dc:45:3d:14:57:4a:a6:2a:ee:e6: 9d:78:c6:df:46:93:47:22:41:ae:bc:de:de:33:35: a8:18:ba:56:7f:57:a2:ce:1a:5d:a2:97:5a:24:d4: a9:74:83:02:0d:98:1c:6b:04:9d:77:c7:9e:44:38: da:03:c1:cf:b3:86:b2:4c:cf:2d:42:41:76:c9:df: f2:08:ed:42:37:ea:41:ca:d1:13:ab:f6:69:1c:ba: 90:16:8c:9b:a3:fe:f8:26:c9:e0:55:6b:59:d1:de: b2:2c:45:ee:9e:11:ad:e8:ab:fc:82:87:02:c2:3b: ef:92:09:62:33:d3:b2:f5:32:e2:50:86:59:4c:32: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:16:0B:0E:19:2A:A7:CC:36:F6:76:35:EB:E2:CE:01:52:61:89:9F X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ab:4a:75:22:7d:e0:59:e7:16:76:c2:e1:2f:39:d2:f8:f2: a3:d0:d8:c3:77:69:d1:23:05:6f:7f:a8:87:78:65:9b:d0:dd: 54:7c:2f:b9:a1:27:0d:9c:c6:1f:b9:6c:28:c6:9f:14:6b:84: 4d:62:8d:7f:c9:81:a2:ae:67:56:f0:f0:e9:09:98:a8:b6:0e: 7c:07:f8:9d:78:cb:85:74:63:05:77:0f:d3:35:a8:90:07:c7: 17:7a:1e:13:1a:59:87:da:04:ab:35:dc:fa:b6:39:40:56:bd: b6:7e:a0:b8:0f:b5:02:07:1d:cd:0b:0a:2d:b6:87:27:b6:80: 85:e8:5f:d6:cb:c8:02:11:23:0b:f1:62:ad:9f:d1:38:fb:6a: 8c:ea:72:5e:0a:97:94:79:8e:d1:8a:4a:f7:c7:4d:13:3b:bf: 28:a3:75:b2:61:21:40:da:39:49:af:cc:65:11:01:f3:e7:cf: d2:f1:d4:d4:b6:75:f7:44:4c:db:e8:70:67:b8:80:07:2c:ed: dd:b2:ed:f6:f8:13:52:b7:dd:0c:98:15:fd:d0:32:8b:69:8c: 3d:e7:2e:0e:6c:1c:d8:c4:f9:bd:43:8b:9d:66:84:53:36:b9: 8c:04:2e:2c:a9:54:90:02:d4:2f:b1:65:73:e6:58:a2:e1:24: 08:4e:5b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUwODA3MDM0MjE0WhcNMjUwODE0MDM0MjEzWjAYMRYwFAYD VQQDEw02ODk0MjA5Ni02NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24ofOrBybe2CO0e1fzWWNlUYkJLx5unSaEMlP3xHmMkzU6MuQ/t0K36tm8wq 78Lp0ICXUVOyqGpr09Hu1ZKJH961dVexmHNDrAJQaD44Zsmk8mBj/6noqbLFB4yj FS9ZQruUkW2IHlfPnJXQPp0hf4/OM3FmhxnLxuRuTNxFPRRXSqYq7uadeMbfRpNH IkGuvN7eMzWoGLpWf1eizhpdopdaJNSpdIMCDZgcawSdd8eeRDjaA8HPs4ayTM8t QkF2yd/yCO1CN+pBytETq/ZpHLqQFoybo/74JsngVWtZ0d6yLEXunhGt6Kv8gocC wjvvkgliM9Oy9TLiUIZZTDLIZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsWCw4Z KqfMNvZ2NevizgFSYYmfMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZq0p1In3gWecWdsLhLznS+PKj0NjDd2nRIwVvf6iHeGWb0N1UfC+5 oScNnMYfuWwoxp8Ua4RNYo1/yYGirmdW8PDpCZiotg58B/ideMuFdGMFdw/TNaiQ B8cXeh4TGlmH2gSrNdz6tjlAVr22fqC4D7UCBx3NCwottocntoCF6F/Wy8gCESML 8WKtn9E4+2qM6nJeCpeUeY7Rikr3x00TO78oo3WyYSFA2jlJr8xlEQHz58/S8dTU tnX3REzb6HBnuIAHLO3dsu32+BNSt90MmBX90DKLaYw95y4ObBzYxPm9Q4udZoRT NrmMBC4sqVSQAtQvsWVz5lii4SQITls0 -----END CERTIFICATE-----Generated at Sat Aug 9 02:53:41 2025 by rpki-client