$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: IsOwHs8VKC3mDGB/3ytX2RhsblpFsCRJbYM3faMMQ04= Subject key identifier: 4C:2F:73:90:9A:A8:02:9C:84:D5:47:A2:C3:03:34:81:A1:40:A0:1D Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0994 Signing time: Fri 08 Aug 2025 20:25:39 +0000 Manifest this update: Fri 08 Aug 2025 20:25:38 +0000 Manifest next update: Fri 15 Aug 2025 20:25:38 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: n/zrUh9gWHFEZE34bLkrAuMta+zKm9HlvsqIc1ULtzk=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Aug 8 20:25:38 2025 GMT Not After : Aug 15 20:25:38 2025 GMT Subject: CN=68965d42-19bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:0b:f1:c9:51:46:cd:0f:35:b2:84:08:63: 22:dd:74:04:1e:ff:91:54:15:75:1d:3f:34:64:ca: 88:f2:46:da:dd:f1:9f:f7:d4:1b:0e:17:ac:79:7e: 9c:e2:d5:d3:d8:cc:53:18:8b:b7:59:68:85:65:e3: 49:a6:d4:0b:42:8d:2a:cf:b5:c4:b0:4c:44:6e:61: 8b:c9:c4:8a:5f:e0:31:08:4c:1c:e7:96:49:e8:d3: 47:51:94:6c:a2:5c:ef:50:73:66:15:07:15:87:f5: 4b:d0:c0:26:50:35:6d:85:a8:b2:37:37:9f:f7:57: 57:4e:aa:d1:4f:81:78:6c:3d:24:13:17:4a:e4:93: 71:3f:28:3c:d2:c9:47:13:1b:00:45:5c:85:c5:fb: 19:23:48:64:87:c6:b8:f7:7d:bf:c7:bd:a4:91:e3: 6d:14:55:f4:5e:ea:c6:99:83:43:65:41:81:91:57: 21:0f:45:24:e6:a8:30:71:29:29:0e:d8:0f:01:d7: f9:28:d3:27:30:40:c7:e5:1c:9d:0f:b6:76:90:f4: 19:92:44:63:ac:12:a9:8c:4b:80:b9:89:17:31:ea: f6:54:65:70:cb:15:f4:23:2e:a9:b7:ad:a9:c0:49: bf:cb:d3:75:62:2b:2f:2f:99:5e:0a:c5:6a:8d:27: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:73:90:9A:A8:02:9C:84:D5:47:A2:C3:03:34:81:A1:40:A0:1D X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:eb:2b:44:a7:a3:9e:ef:4d:3f:b4:c9:4b:4b:57:77:85:a5: 84:86:39:f7:28:cb:04:c6:f9:2f:82:e7:80:c8:dc:24:2f:e0: b8:5f:32:4f:6a:e7:2e:10:5d:53:b7:16:fe:31:5b:aa:19:5f: d2:55:63:1f:3e:5d:95:f0:ce:da:5c:da:a3:1f:27:02:36:d0: 58:89:04:b7:d7:a6:bf:55:8d:a6:d0:be:a6:0d:9e:4c:a6:1b: 71:61:3c:0d:f1:d6:d0:2c:38:7c:df:6c:b5:05:d7:fc:e7:1a: 49:17:b4:ad:4b:0f:61:9a:be:6e:af:5a:30:10:8a:8b:17:95: 36:1a:f9:7c:57:59:4c:2c:1b:e5:29:cb:29:d9:4d:14:aa:96: 1d:64:78:a0:0e:4c:af:d0:67:11:85:66:d2:a1:1e:22:3b:2f: c6:08:3a:00:54:0d:35:c1:22:b5:65:fd:d4:c7:2e:86:c4:f1: 45:3a:f1:0a:60:34:18:68:7a:d9:a2:2a:8c:1c:cd:49:45:4c: e7:a0:14:2c:96:5e:dd:ae:74:fc:04:d3:65:d0:a1:b9:fc:33: a1:31:68:ab:1a:9b:5f:0b:e1:58:06:19:5f:a8:24:0f:fb:b6: 05:ad:25:36:52:b5:42:eb:84:68:6c:93:c3:9b:a6:0a:66:a7: 17:59:85:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwODA4MjAyNTM4WhcNMjUwODE1MjAyNTM4WjAYMRYwFAYD VQQDEw02ODk2NWQ0Mi0xOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i0L8clRRs0PNbKECGMi3XQEHv+RVBV1HT80ZMqI8kba3fGf99QbDheseX6c 4tXT2MxTGIu3WWiFZeNJptQLQo0qz7XEsExEbmGLycSKX+AxCEwc55ZJ6NNHUZRs olzvUHNmFQcVh/VL0MAmUDVthaiyNzef91dXTqrRT4F4bD0kExdK5JNxPyg80slH ExsARVyFxfsZI0hkh8a4932/x72kkeNtFFX0XurGmYNDZUGBkVchD0Uk5qgwcSkp DtgPAdf5KNMnMEDH5RydD7Z2kPQZkkRjrBKpjEuAuYkXMer2VGVwyxX0Iy6pt62p wEm/y9N1YisvL5leCsVqjSdwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwvc5Ca qAKchNVHosMDNIGhQKAdMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA6ytEp6Oe700/tMlLS1d3haWEhjn3KMsExvkvgueAyNwkL+C4XzJP aucuEF1Ttxb+MVuqGV/SVWMfPl2V8M7aXNqjHycCNtBYiQS316a/VY2m0L6mDZ5M phtxYTwN8dbQLDh832y1Bdf85xpJF7StSw9hmr5ur1owEIqLF5U2Gvl8V1lMLBvl Kcsp2U0UqpYdZHigDkyv0GcRhWbSoR4iOy/GCDoAVA01wSK1Zf3Uxy6GxPFFOvEK YDQYaHrZoiqMHM1JRUznoBQsll7drnT8BNNl0KG5/DOhMWirGptfC+FYBhlfqCQP +7YFrSU2UrVC64RobJPDm6YKZqcXWYXk -----END CERTIFICATE-----Generated at Sun Aug 10 05:00:16 2025 by rpki-client