$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft File: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft (raw, json) Hash identifier: QjbQTVpBriBordchR+YUz9euBgNmVaPYCcPzW1caWXU= Subject key identifier: F9:3E:86:C1:33:91:25:14:35:94:A7:04:66:93:17:00:F1:ED:27:E8 Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft Manifest number: 0128 Signing time: Mon 11 Aug 2025 04:49:19 +0000 Manifest this update: Mon 11 Aug 2025 04:49:18 +0000 Manifest next update: Mon 18 Aug 2025 04:49:18 +0000 Files and hashes: 1: 2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl (hash: ZrM9JQ15tPT576JTTFv776cECkdeD+HjcDE+fOJm/F8=) 2: 2DCC0688B57211EEBB68526DC4F9AE02.roa (hash: L3OPo6FNjWVCJWGluVhn9/6yPLkzSPOBxPP5CvzXBok=) 3: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (hash: ts4WGvWXbehIETpY/5rVi501BJx/RXMywvh969jSOgc=) 4: 6F5F30B8B56111EE91C72951C4F9AE02.roa (hash: qU2HEK0KuHPcd+bkaqKMrT7d6Vs+VdewAZ/yYmeUM7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Aug 11 04:49:18 2025 GMT Not After : Aug 18 04:49:18 2025 GMT Subject: CN=6899764e-928d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:83:76:fa:69:36:20:0d:19:17:5f:6b:ea:9d: 2f:e3:04:8a:81:72:89:6a:b6:52:fb:86:49:e8:b9: f8:de:2a:e2:e1:dc:65:4d:e9:38:e7:ab:dc:d6:ce: b0:c5:65:19:e1:8c:dd:6c:4c:7f:a0:77:03:8b:56: 1d:f5:75:fc:39:84:79:c5:91:be:85:3a:4c:19:6a: d5:2f:e2:48:ca:46:10:28:15:b5:8e:15:7a:be:e9: b0:05:65:f5:bb:9d:72:0c:28:5d:1b:8a:2e:48:47: f5:a6:56:11:72:45:2a:57:94:c2:68:48:7c:c9:54: d2:43:c2:8d:56:35:f6:e9:69:ab:56:88:7c:7c:00: 07:51:bf:cc:26:53:d4:8c:e7:55:7e:94:0e:62:63: b7:64:ef:3d:2d:45:27:05:32:73:d3:63:0a:52:75: 73:59:99:e3:09:9c:39:0c:f9:3d:6f:6a:8f:7f:1a: 95:a7:95:1e:0a:26:2f:69:49:41:31:60:e1:5f:8d: 20:b4:85:f5:a3:b0:24:09:06:ac:70:4c:dd:b7:2d: fb:a0:a4:f1:64:4c:d6:b4:dd:ce:ce:a8:e7:83:9d: 67:0c:38:17:e0:bb:f9:47:8c:7e:40:bc:07:22:aa: a1:43:e5:27:e9:b4:46:ba:16:f2:ee:a3:ae:8e:76: 93:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:86:C1:33:91:25:14:35:94:A7:04:66:93:17:00:F1:ED:27:E8 X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:7b:1d:d4:ad:88:eb:29:20:6f:7e:01:2e:a1:c6:71:2f:1a: 68:83:ae:d6:75:9f:f2:53:3f:42:a7:c2:f2:f3:bc:1c:bb:1e: 7b:cb:d4:cb:6a:d8:7f:64:ee:d3:2e:fc:6e:91:50:12:85:dc: d0:e9:6c:5e:0d:2d:6e:4f:fc:9c:52:d7:9e:5b:ec:e4:51:54: 09:bd:0c:67:ab:23:a2:47:de:96:ad:98:5a:5c:22:7a:b8:07: 63:6c:e1:6d:10:66:2b:6c:96:57:c8:79:e8:f3:c6:92:7e:a9: ea:f6:9f:6e:b6:20:08:15:78:66:f5:d9:be:e2:aa:dc:2b:7a: 64:88:1d:e9:9c:db:e7:00:e2:a3:69:ea:f2:b6:d6:be:9c:ce: 2b:66:15:05:07:92:36:eb:2b:30:09:1f:90:34:6f:e0:d5:43: cf:58:82:09:23:9c:c4:15:10:4c:61:84:9b:f3:99:5d:fc:d7: 72:f0:76:fb:86:09:67:d5:ed:b3:0f:05:a1:5c:33:c4:3e:4b: c9:c4:4c:2c:17:85:66:51:d6:bb:40:6b:9b:4e:aa:a3:4f:23: e0:9c:da:73:53:78:bf:88:81:ee:41:e3:1e:69:f8:e8:0c:40: 00:b3:a1:09:8f:eb:f6:55:49:27:fe:5a:df:f9:59:07:87:d6: 37:b3:5f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjUwODExMDQ0OTE4WhcNMjUwODE4MDQ0OTE4WjAYMRYwFAYD VQQDEw02ODk5NzY0ZS05MjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4N2+mk2IA0ZF19r6p0v4wSKgXKJarZS+4ZJ6Ln43iri4dxlTek456vc1s6w xWUZ4YzdbEx/oHcDi1Yd9XX8OYR5xZG+hTpMGWrVL+JIykYQKBW1jhV6vumwBWX1 u51yDChdG4ouSEf1plYRckUqV5TCaEh8yVTSQ8KNVjX26WmrVoh8fAAHUb/MJlPU jOdVfpQOYmO3ZO89LUUnBTJz02MKUnVzWZnjCZw5DPk9b2qPfxqVp5UeCiYvaUlB MWDhX40gtIX1o7AkCQascEzdty37oKTxZEzWtN3Ozqjng51nDDgX4Lv5R4x+QLwH IqqhQ+Un6bRGuhby7qOujnaTJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk+hsEz kSUUNZSnBGaTFwDx7SfoMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzI3Ny80M0E3RTg5NEI1NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1U Zll5eFgtT2NwZWJvX3EtcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ex3UrYjrKSBvfgEuocZxLxpog67WdZ/yUz9Cp8Ly87wcux57y9TL ath/ZO7TLvxukVAShdzQ6WxeDS1uT/ycUteeW+zkUVQJvQxnqyOiR96WrZhaXCJ6 uAdjbOFtEGYrbJZXyHno88aSfqnq9p9utiAIFXhm9dm+4qrcK3pkiB3pnNvnAOKj aerytta+nM4rZhUFB5I26yswCR+QNG/g1UPPWIIJI5zEFRBMYYSb85ld/Ndy8Hb7 hgln1e2zDwWhXDPEPkvJxEwsF4VmUda7QGubTqqjTyPgnNpzU3i/iIHuQeMeafjo DEAAs6EJj+v2VUkn/lrf+VkHh9Y3s1+V -----END CERTIFICATE-----Generated at Mon Aug 11 10:29:59 2025 by rpki-client