$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: 5lvZ+Q2Frwrj1OerfcARWV3vMWXRtn4YaSkuea2LG8c= Subject key identifier: 5C:CA:B5:E5:79:F2:14:DE:1C:84:0E:BF:05:D7:CF:63:D6:B2:3A:51 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 29 Signing time: Sat 09 Aug 2025 08:16:34 +0000 Manifest this update: Sat 09 Aug 2025 08:16:33 +0000 Manifest next update: Sat 16 Aug 2025 08:16:33 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: bA4kWETr6PfjWM0meRrOnFn4ludTyIqRtG6pt2/ytKI=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Aug 9 08:16:33 2025 GMT Not After : Aug 16 08:16:33 2025 GMT Subject: CN=689703e1-11f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:d9:e4:c5:2b:ed:89:1d:86:c2:af:bd:e1: 78:3c:ad:34:04:3b:73:a4:5f:96:0d:aa:e6:1c:b5: 07:96:e8:b6:3c:4a:cd:bd:bf:7a:c3:59:7c:d6:3f: 03:ee:24:09:08:41:83:6b:5a:62:6c:c6:a2:a4:90: a3:5b:d2:70:79:d4:c9:a5:52:7f:95:56:da:80:3c: 3b:7e:6f:37:fc:05:87:21:83:e1:a9:a9:a5:07:0e: 01:c0:11:24:4f:b1:35:e0:a7:dd:d2:fb:63:b4:ae: 10:2b:52:88:a8:f1:62:f4:6c:16:57:1a:83:31:24: 73:86:15:c9:f4:a5:e0:35:46:5a:b1:10:de:18:57: 1b:b8:ac:20:08:a5:ce:6e:c7:f9:04:4f:be:69:77: 54:c8:34:db:01:d0:3e:55:08:c0:e1:83:0e:69:ff: c3:9f:9b:5c:e7:94:ad:77:6f:cc:ec:94:91:24:67: af:db:0c:59:3c:0c:38:5d:f3:fe:b6:0d:80:b0:5e: 9c:a6:2b:72:8a:3e:85:18:1c:11:19:08:7c:cd:37: ab:14:69:e6:0c:32:53:a8:dd:3a:64:49:7e:34:fe: 74:02:00:c2:cd:b2:29:50:a6:45:04:3c:93:0d:a5: 10:15:27:7d:52:26:0a:10:5b:af:67:9f:5a:ed:8d: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CA:B5:E5:79:F2:14:DE:1C:84:0E:BF:05:D7:CF:63:D6:B2:3A:51 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1f:55:39:c9:e6:d6:78:fa:da:c9:2d:88:17:13:e9:9f:18: e7:1b:8c:91:89:e5:e4:bf:6c:4e:1f:36:53:e5:cc:30:a5:d7: 85:8a:fb:42:52:7d:2a:42:60:c9:30:65:85:67:d0:81:39:90: 82:93:7d:de:8a:37:0c:9a:f8:47:c4:9f:52:28:0f:66:a1:62: 6b:d2:4b:77:d8:c4:a3:00:be:62:03:33:e1:dc:4d:44:b7:ac: 24:29:85:4f:a3:5e:d0:97:76:63:bb:cf:65:e4:45:dd:28:02: 07:52:26:97:5a:6f:78:1b:06:da:80:d4:c3:4c:86:4c:b7:d4: 9a:b8:c9:a0:0c:cd:54:30:d6:0e:9f:d3:88:dd:2e:72:bd:62: 40:d0:f1:3a:fa:30:e3:7a:13:1e:70:57:60:31:ec:86:6a:35: 58:3c:90:ff:e5:b6:8b:f0:7a:03:00:b5:e3:41:5a:c5:ff:78: e0:12:72:ff:90:4b:aa:76:36:9d:db:f0:ed:49:ea:cc:1e:d4: e8:40:83:c0:e2:e5:06:86:d0:bd:fc:ed:36:50:94:f9:2b:46: 94:56:7d:c1:6b:e5:fb:dd:0b:a0:34:f1:6b:15:78:d1:1d:1c: 79:f6:1e:ab:af:6e:18:cb:0b:2f:8c:d5:cd:c4:60:44:ac:1f: 80:0a:bc:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA4MDkwODE2MzNaFw0yNTA4MTYwODE2MzNaMBgxFjAUBgNV BAMTDTY4OTcwM2UxLTExZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzl9nkxSvtiR2Gwq+94Xg8rTQEO3OkX5YNquYctQeW6LY8Ss29v3rDWXzWPwPu JAkIQYNrWmJsxqKkkKNb0nB51MmlUn+VVtqAPDt+bzf8BYchg+GpqaUHDgHAESRP sTXgp93S+2O0rhArUoio8WL0bBZXGoMxJHOGFcn0peA1RlqxEN4YVxu4rCAIpc5u x/kET75pd1TINNsB0D5VCMDhgw5p/8Ofm1znlK13b8zslJEkZ6/bDFk8DDhd8/62 DYCwXpymK3KKPoUYHBEZCHzNN6sUaeYMMlOo3TpkSX40/nQCAMLNsilQpkUEPJMN pRAVJ31SJgoQW69nn1rtjXMnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXMq15Xny FN4chA6/BdfPY9ayOlEwHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKsfVTnJ5tZ4+trJLYgXE+mfGOcbjJGJ5eS/bE4fNlPlzDCl14WK+0JS fSpCYMkwZYVn0IE5kIKTfd6KNwya+EfEn1IoD2ahYmvSS3fYxKMAvmIDM+HcTUS3 rCQphU+jXtCXdmO7z2XkRd0oAgdSJpdab3gbBtqA1MNMhky31Jq4yaAMzVQw1g6f 04jdLnK9YkDQ8Tr6MON6Ex5wV2Ax7IZqNVg8kP/ltovwegMAteNBWsX/eOAScv+Q S6p2Np3b8O1J6swe1OhAg8Di5QaG0L387TZQlPkrRpRWfcFr5fvdC6A08WsVeNEd HHn2HquvbhjLCy+M1c3EYESsH4AKvPI= -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:07 2025 by rpki-client