$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: laMi9YxitjFa3P+eUQeqrXCPCy1OwzVy0o8IuNv1C/s= Subject key identifier: F5:50:CB:E1:3F:AF:B5:1A:DB:91:C3:DC:22:94:8B:0B:59:61:CF:E0 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 01C0 Signing time: Thu 07 Aug 2025 03:27:29 +0000 Manifest this update: Thu 07 Aug 2025 03:27:29 +0000 Manifest next update: Thu 14 Aug 2025 03:27:28 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: 0sgNfJid+hFbpww2Ckazf35AGTeU2RJDiO8D/k11hq8=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: /+RFC3ph8TBdVcE4Ho9sjOY2q50Lm+IUGN0ewBHECtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Aug 7 03:27:29 2025 GMT Not After : Aug 14 03:27:28 2025 GMT Subject: CN=68941d21-c203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:69:53:57:90:ab:10:83:39:42:5e:21:8b: 4c:ff:11:8e:e4:e5:1e:ac:01:34:fa:76:04:23:a0: 15:ec:56:fa:55:04:0e:34:a9:65:54:bf:92:4c:b5: 7e:20:8e:b6:8c:2b:cd:36:2b:c2:61:3f:b9:44:a7: 5d:e9:c4:9b:64:9c:f5:eb:d9:93:69:dc:23:5a:01: 84:0b:5c:5e:83:ac:b5:8b:e0:5c:bf:24:0c:15:4f: 02:72:05:de:e2:66:01:e3:f5:02:fc:d4:e4:7c:b1: 2f:7c:ec:1d:ca:2c:d9:94:2a:5a:fe:f7:88:4b:25: 5e:04:4f:32:9a:73:97:b0:95:9a:fa:f8:c0:73:ee: 1b:bf:f6:59:4f:dc:d7:ec:a6:fb:d5:65:93:6f:c1: b8:24:04:67:11:83:15:05:c8:ae:89:bf:2c:c0:bd: 80:4c:e5:5e:1b:84:a9:67:01:68:92:b1:e6:d0:09: 4b:c6:1c:a3:09:e6:7d:aa:9f:94:7c:f3:da:74:bc: 49:e0:18:55:49:d7:26:75:39:24:2d:60:9d:e4:e1: cf:84:6a:5d:fb:38:9f:0b:95:fe:40:70:70:3a:2d: 89:0b:e2:f5:a3:77:01:93:0e:af:3f:65:88:e9:87: eb:45:fd:26:f4:c5:9f:49:eb:cc:2b:78:4c:c6:48: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:50:CB:E1:3F:AF:B5:1A:DB:91:C3:DC:22:94:8B:0B:59:61:CF:E0 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9d:ad:6e:c0:79:da:47:08:ec:12:cd:3d:00:c5:4c:00:4e: cb:c1:5b:f8:8f:e5:bd:02:4a:69:91:ea:5c:b0:8a:da:9b:ba: ca:ba:9a:58:e6:8f:90:fc:de:a3:db:ca:25:98:27:94:59:c5: 9c:a2:ab:c1:c1:69:13:0f:c5:4b:93:36:e1:52:3f:b6:46:bc: 13:e2:58:76:10:3a:6b:aa:a5:34:14:a7:c8:e3:cb:c2:15:99: 8b:a8:63:8b:01:7d:14:08:c2:96:9e:a2:5f:12:4e:b3:59:51: 38:96:61:87:44:54:87:9f:cc:92:7f:44:47:27:84:c6:53:b5: a2:ea:a6:8f:fd:90:cb:17:5f:ac:2f:bc:8e:61:f9:c6:7e:4d: ec:5d:ca:e7:36:ac:ff:87:29:45:6b:8f:e8:d3:a0:3e:13:3c: b2:d8:7a:c6:c1:62:2b:28:b8:d2:d7:ab:9f:41:44:9d:36:0e: 60:67:8d:eb:85:14:0b:3f:ce:0b:3e:11:73:01:9c:0e:48:a3: 86:5a:4c:2e:f8:51:78:ba:7c:7d:77:3a:e4:a3:77:e7:ae:83: 25:73:c0:f6:2b:65:95:71:38:2e:43:51:9b:e4:f8:e3:88:aa: d5:fb:00:9e:9c:d4:d7:43:30:96:68:a5:4d:89:8f:52:7a:c0: 9c:35:80:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjUwODA3MDMyNzI5WhcNMjUwODE0MDMyNzI4WjAYMRYwFAYD VQQDEw02ODk0MWQyMS1jMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GJpU1eQqxCDOUJeIYtM/xGO5OUerAE0+nYEI6AV7Fb6VQQONKllVL+STLV+ II62jCvNNivCYT+5RKdd6cSbZJz169mTadwjWgGEC1xeg6y1i+BcvyQMFU8CcgXe 4mYB4/UC/NTkfLEvfOwdyizZlCpa/veISyVeBE8ymnOXsJWa+vjAc+4bv/ZZT9zX 7Kb71WWTb8G4JARnEYMVBciuib8swL2ATOVeG4SpZwFokrHm0AlLxhyjCeZ9qp+U fPPadLxJ4BhVSdcmdTkkLWCd5OHPhGpd+zifC5X+QHBwOi2JC+L1o3cBkw6vP2WI 6YfrRf0m9MWfSevMK3hMxkiRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVQy+E/ r7Ua25HD3CKUiwtZYc/gMB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzna1uwHnaRwjsEs09AMVMAE7LwVv4j+W9AkppkepcsIram7rKuppY 5o+Q/N6j28olmCeUWcWcoqvBwWkTD8VLkzbhUj+2RrwT4lh2EDprqqU0FKfI48vC FZmLqGOLAX0UCMKWnqJfEk6zWVE4lmGHRFSHn8ySf0RHJ4TGU7Wi6qaP/ZDLF1+s L7yOYfnGfk3sXcrnNqz/hylFa4/o06A+Ezyy2HrGwWIrKLjS16ufQUSdNg5gZ43r hRQLP84LPhFzAZwOSKOGWkwu+FF4unx9dzrko3fnroMlc8D2K2WVcTguQ1Gb5Pjj iKrV+wCenNTXQzCWaKVNiY9SesCcNYCA -----END CERTIFICATE-----Generated at Sat Aug 9 01:17:06 2025 by rpki-client