$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft File: 2H4ClpVGrcVaesygjK2yh5vGmck.mft (raw, json) Hash identifier: ABwcwfyGs9bRhRGNCAddebxHZu+MSj48hhyYh6x0ZWE= Subject key identifier: BE:F4:06:78:73:E9:32:D1:71:4B:D4:B9:68:22:2E:D8:D2:1D:69:7D Authority key identifier: D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 Certificate issuer: /CN=A9185B5F/serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft Manifest number: 01A8 Signing time: Mon 11 Aug 2025 03:20:59 +0000 Manifest this update: Mon 11 Aug 2025 03:20:59 +0000 Manifest next update: Mon 18 Aug 2025 03:20:59 +0000 Files and hashes: 1: 2H4ClpVGrcVaesygjK2yh5vGmck.crl (hash: LRYxvEBj3DqbXiYDTJ+vt4Gext7HVwF1fK8qYOwFJcA=) 2: A4B0D326F0A311ED99A1471CC4F9AE02.roa (hash: 0/Ic5iho+pqF4si9nqRdEW+r600hwTvuyP9trzSoxtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B5F, serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Validity Not Before: Aug 11 03:20:59 2025 GMT Not After : Aug 18 03:20:59 2025 GMT Subject: CN=6899619b-aa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:14:ce:21:d8:b7:8f:1d:dd:76:2a:78:c6: 68:d3:aa:61:49:5d:01:29:74:de:6e:64:b4:35:7f: 00:a0:90:5b:f8:41:27:77:01:8a:83:52:e0:52:26: 5a:c1:d7:60:10:fd:d6:ad:36:29:90:51:6b:d7:f3: 06:f8:83:88:d4:56:a1:dd:ae:b7:47:47:97:70:42: 68:f6:3c:5f:c9:8a:8a:df:8a:4f:04:3b:ba:bd:e3: 9b:40:f1:9d:b3:4a:d2:84:34:82:e0:5d:12:f4:14: 87:9b:0d:c4:09:4e:85:dc:a5:89:a2:0d:4d:2f:1f: 83:71:d0:02:2c:6d:17:1b:79:be:98:82:f1:5c:13: 54:c3:18:7a:e7:78:3d:bb:11:2c:dc:15:e5:2e:6f: 96:80:b0:17:80:a8:c4:de:ab:0d:aa:85:f6:95:5d: f9:3b:ea:7d:dc:90:b2:6e:58:8e:44:1f:96:24:67: 64:8c:a3:64:41:13:ea:55:61:8f:25:d7:2c:ed:d1: cc:40:33:47:72:4b:9e:6c:6f:e2:21:b6:20:76:23: bf:46:63:8c:ca:22:e7:b8:34:53:ed:f7:e7:f1:b4: ef:15:66:ce:dd:31:3c:6b:c7:a7:6f:97:31:a0:d1: 1e:73:3d:66:4f:13:da:1a:da:0f:2a:7c:ee:25:38: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:06:78:73:E9:32:D1:71:4B:D4:B9:68:22:2E:D8:D2:1D:69:7D X509v3 Authority Key Identifier: keyid:D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:46:56:c7:8c:af:28:bc:84:bc:f5:84:26:e5:e4:6a:92: 50:85:01:62:59:98:fc:c7:64:4c:8b:0a:5f:94:e2:57:dc:79: 8b:86:17:3f:9b:8b:e2:b6:bd:74:a2:89:6b:22:1b:ff:c5:c7: 8b:81:15:9e:01:9e:15:bc:90:54:aa:db:7e:fe:cb:6a:74:bc: 78:55:4d:be:ac:1c:06:c1:02:b6:df:19:d8:b3:c4:cb:fd:89: 0c:88:92:19:08:3c:87:2e:9b:1b:67:15:f9:0a:65:69:56:b0: c0:a5:60:ca:ca:6b:82:ac:4b:e1:d9:c6:eb:17:82:fd:69:13: e5:82:2d:61:48:ef:92:42:fd:79:47:aa:67:5b:2c:cd:6f:0b: 1f:22:88:a9:e7:86:ed:80:c5:09:73:a8:95:39:9e:4f:44:85: d0:67:6f:81:df:a0:0c:b3:8a:4d:ba:1f:17:37:58:b2:94:4e: 55:ae:f4:fd:52:98:04:98:9a:72:35:b9:24:30:c6:73:28:d8: 99:43:e1:b7:0a:64:6f:43:89:f8:bb:6f:16:c7:ee:7f:19:f8: f1:92:9f:cb:af:ba:e5:4f:1f:53:cb:46:54:5d:13:9d:ce:8b: e4:43:54:be:69:ac:2c:0f:87:07:cc:5a:7b:80:b4:89:72:12: 08:32:c7:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNUYxMTAvBgNVBAUTKEQ4N0UwMjk2OTU0NkFEQzU1QTdBQ0NBMDhDQURCMjg3 OUJDNjk5QzkwHhcNMjUwODExMDMyMDU5WhcNMjUwODE4MDMyMDU5WjAYMRYwFAYD VQQDEw02ODk5NjE5Yi1hYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UoUziHYt48d3XYqeMZo06phSV0BKXTebmS0NX8AoJBb+EEndwGKg1LgUiZa wddgEP3WrTYpkFFr1/MG+IOI1Fah3a63R0eXcEJo9jxfyYqK34pPBDu6veObQPGd s0rShDSC4F0S9BSHmw3ECU6F3KWJog1NLx+DcdACLG0XG3m+mILxXBNUwxh653g9 uxEs3BXlLm+WgLAXgKjE3qsNqoX2lV35O+p93JCybliORB+WJGdkjKNkQRPqVWGP Jdcs7dHMQDNHckuebG/iIbYgdiO/RmOMyiLnuDRT7ffn8bTvFWbO3TE8a8enb5cx oNEecz1mTxPaGtoPKnzuJTj6vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL70Bnhz 6TLRcUvUuWgiLtjSHWl9MB8GA1UdIwQYMBaAFNh+ApaVRq3FWnrMoIytsoebxpnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI1Ri84RTQxODAyMEYw OUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3JjVmFlc3lnaksyeWg1dkdt Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJINENscFZHcmNWYWVzeWdqSzJ5aDV2R21jay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI1Ri84RTQxODAyMEYwOUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3Jj VmFlc3lnaksyeWg1dkdtY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnokZWx4yvKLyEvPWEJuXkapJQhQFiWZj8x2RMiwpflOJX3HmLhhc/ m4vitr10oolrIhv/xceLgRWeAZ4VvJBUqtt+/stqdLx4VU2+rBwGwQK23xnYs8TL /YkMiJIZCDyHLpsbZxX5CmVpVrDApWDKymuCrEvh2cbrF4L9aRPlgi1hSO+SQv15 R6pnWyzNbwsfIoip54btgMUJc6iVOZ5PRIXQZ2+B36AMs4pNuh8XN1iylE5VrvT9 UpgEmJpyNbkkMMZzKNiZQ+G3CmRvQ4n4u28Wx+5/Gfjxkp/Lr7rlTx9Ty0ZUXROd zovkQ1S+aawsD4cHzFp7gLSJchIIMscv -----END CERTIFICATE-----Generated at Mon Aug 11 12:56:25 2025 by rpki-client