$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: Ug2zri16Xixy+iNo8LauATqb0c3Ayuh0SiJB1PdAkjo= Subject key identifier: F9:17:FE:27:1D:75:4D:27:53:A4:B0:8E:11:2C:28:D0:03:27:73:07 Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 02E8 Signing time: Sat 09 Aug 2025 01:50:34 +0000 Manifest this update: Sat 09 Aug 2025 01:50:33 +0000 Manifest next update: Sat 16 Aug 2025 01:50:33 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: 1pXiKZpW7oTtOsCSXOBxCFQTQADMK7/QrSB+z7fiwGk=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 06qlKoNMAgG5qkJwM6sNlRAgtRr58eOsszFhlsT8L0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Aug 9 01:50:33 2025 GMT Not After : Aug 16 01:50:33 2025 GMT Subject: CN=6896a96a-7f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c2:39:e2:b9:2a:6f:f0:de:5f:5e:20:ea:cb: 75:2b:18:97:bc:9c:4c:16:ca:b0:50:b1:17:0f:16: 11:c5:7b:e7:6d:4b:39:68:5e:3f:c8:24:2b:9d:31: db:95:fe:2c:65:6a:17:b3:f8:00:55:40:6a:4b:b8: dc:1d:ae:5e:27:e2:e5:12:0e:21:f4:6e:89:af:c1: eb:0d:e4:51:13:5c:05:d6:61:10:99:f9:a8:aa:1b: b9:1c:69:a7:43:90:36:fa:42:b1:9b:13:af:a9:5b: 0d:9a:dd:fa:57:54:7c:87:06:ee:c6:03:ad:ab:15: 6f:09:ae:02:a1:58:f1:f9:f2:29:3e:80:1b:f6:f0: 6c:12:46:f3:31:58:30:60:78:e7:fd:fa:bd:f0:25: a0:39:ec:1d:74:6f:ed:f1:d7:60:24:84:e4:95:63: 00:9c:9d:1e:56:71:2d:a4:36:9a:bc:60:54:8a:b2: 8a:f8:6f:45:16:c6:70:86:4c:5f:45:19:9f:3f:65: 89:75:1c:ae:bd:8e:dc:2d:36:d6:a8:1e:db:2c:a6: a4:4e:cc:91:3d:4e:7f:09:0a:85:4c:6b:30:78:d3: 3d:9c:5d:ff:c2:ab:e9:ec:df:b9:04:9d:eb:ed:bf: 35:07:21:c4:1f:e3:0e:9e:55:02:b4:54:cd:68:43: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:FE:27:1D:75:4D:27:53:A4:B0:8E:11:2C:28:D0:03:27:73:07 X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:9e:24:83:77:05:c9:ba:a8:38:1d:6c:6f:cf:41:3a:b5: bb:91:d6:2a:33:26:c7:fd:a5:8b:26:86:e6:2f:7e:57:08:44: 55:0e:c1:94:38:f1:01:dc:4b:9d:8b:d4:77:d1:37:e5:93:57: 74:32:1c:64:6f:45:d0:bc:c1:06:ba:73:eb:fd:09:b2:30:ce: d2:b5:a1:8c:ba:1e:56:57:e5:e5:45:41:7f:3d:3e:85:1a:8c: e8:ff:e1:ab:50:e4:41:b3:33:fc:73:97:af:d3:a6:b3:e6:9b: d3:13:de:79:d5:0c:21:e4:c9:0b:c3:81:60:8d:63:a0:24:19: f7:96:e3:10:05:d1:6f:6d:be:61:4d:e8:d1:1c:d8:76:62:79: f2:67:fd:3e:0d:c7:ab:88:67:0f:6e:6d:ab:fc:88:9d:e5:36: 59:41:c8:4d:ce:1f:72:e5:ce:c5:02:28:de:3a:43:6e:f7:01: 0c:d9:2f:6a:fa:b0:9c:5d:59:20:ad:c5:6a:ac:b0:92:8b:29: b4:e8:a5:c9:ec:7b:5f:cf:ee:22:6e:20:bf:84:2f:f0:3c:fc: f8:4e:87:1f:ac:bc:a4:d0:95:9f:37:79:03:90:4d:24:b3:96: 8a:b1:34:a2:c1:c9:79:56:61:7a:77:b9:f2:3b:17:73:36:8a: 5b:9e:c4:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjUwODA5MDE1MDMzWhcNMjUwODE2MDE1MDMzWjAYMRYwFAYD VQQDEw02ODk2YTk2YS03ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MI54rkqb/DeX14g6st1KxiXvJxMFsqwULEXDxYRxXvnbUs5aF4/yCQrnTHb lf4sZWoXs/gAVUBqS7jcHa5eJ+LlEg4h9G6Jr8HrDeRRE1wF1mEQmfmoqhu5HGmn Q5A2+kKxmxOvqVsNmt36V1R8hwbuxgOtqxVvCa4CoVjx+fIpPoAb9vBsEkbzMVgw YHjn/fq98CWgOewddG/t8ddgJITklWMAnJ0eVnEtpDaavGBUirKK+G9FFsZwhkxf RRmfP2WJdRyuvY7cLTbWqB7bLKakTsyRPU5/CQqFTGsweNM9nF3/wqvp7N+5BJ3r 7b81ByHEH+MOnlUCtFTNaEPAxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkX/icd dU0nU6SwjhEsKNADJ3MHMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSSp4kg3cFybqoOB1sb89BOrW7kdYqMybH/aWLJobmL35XCERVDsGU OPEB3Eudi9R30Tflk1d0Mhxkb0XQvMEGunPr/QmyMM7StaGMuh5WV+XlRUF/PT6F Gozo/+GrUORBszP8c5ev06az5pvTE9551Qwh5MkLw4FgjWOgJBn3luMQBdFvbb5h TejRHNh2YnnyZ/0+DceriGcPbm2r/Iid5TZZQchNzh9y5c7FAijeOkNu9wEM2S9q +rCcXVkgrcVqrLCSiym06KXJ7Htfz+4ibiC/hC/wPPz4TocfrLyk0JWfN3kDkE0k s5aKsTSiwcl5VmF6d7nyOxdzNopbnsSe -----END CERTIFICATE-----Generated at Mon Aug 11 01:49:36 2025 by rpki-client