$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: 3SwUEAQJkRWu39pL7QcoftJryw2L8atoyGze0Mx/flg= Subject key identifier: 5E:F8:9D:9F:E7:D2:26:D7:EE:A4:8F:93:83:0B:9C:A3:31:D1:6B:11 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 05FB Signing time: Wed 20 Aug 2025 23:00:15 +0000 Manifest this update: Wed 20 Aug 2025 23:00:14 +0000 Manifest next update: Wed 27 Aug 2025 23:00:14 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: d+KGWtSmHMYbTppnKrt/5vIVNld/pwlGxwASdk+EKi0=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: JTt1lcwJJ/VlJRR1mPyJ+td5e5c2alDgtGmRBoxCA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Aug 20 23:00:14 2025 GMT Not After : Aug 27 23:00:14 2025 GMT Subject: CN=68a6537e-2c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:67:20:ab:d6:17:01:ba:e6:85:14:53:29: b3:8a:3f:3b:4e:3e:c4:2d:f7:f3:62:83:df:71:b7: fa:53:1a:b8:16:71:e8:10:9a:40:fc:ad:0f:85:21: bd:39:f9:b8:0b:ba:a8:d1:9f:04:40:b6:b7:4e:d3: 31:06:cc:7b:74:ef:d1:c0:50:f3:ad:4f:e2:63:91: ae:d1:09:86:19:0c:f0:18:bf:97:77:19:7b:d5:0a: 26:46:06:29:ee:74:1d:e6:d8:5a:89:f9:d5:bd:50: 87:aa:6f:1f:de:dd:a7:69:7b:4f:d2:5b:e1:a1:14: 1a:49:77:63:12:e7:a3:4b:d5:83:81:29:e0:d4:9b: 14:f3:ed:44:21:ee:ee:64:af:0f:be:fc:d0:c8:7c: 82:aa:34:68:e5:13:74:0a:f4:ac:0d:27:ba:c0:60: 3b:9c:3c:e7:6c:d5:63:55:5d:49:36:c9:2e:c8:44: b0:2b:f8:fd:9f:1f:7f:2a:18:ee:20:ea:c3:a8:c5: 4f:42:fd:85:5b:b1:e0:44:54:f2:3c:48:a8:d4:5b: 14:d3:61:24:6d:80:17:72:d2:40:20:dd:95:e2:bb: e2:4d:52:c4:b9:6c:78:80:c1:6c:4e:1c:06:76:fa: 9b:3f:75:45:b9:3b:1d:e8:fc:19:3c:25:48:67:b5: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F8:9D:9F:E7:D2:26:D7:EE:A4:8F:93:83:0B:9C:A3:31:D1:6B:11 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a5:f8:d8:55:40:e4:1a:43:8f:de:fa:02:07:43:cc:c9:54: 04:31:6b:86:cb:47:a8:a3:f4:26:75:f4:2b:aa:db:12:0c:44: df:db:c6:3a:d3:74:dc:4c:6e:84:c3:09:46:6c:7d:3b:9b:7f: e9:07:1d:e5:e8:7c:a1:d0:49:d8:ab:89:d4:ca:b1:54:e9:89: 6f:51:8d:a6:2f:b8:ce:7a:2b:71:94:6a:da:91:2a:61:9d:04: 0e:c2:f8:ab:f5:2d:9e:22:13:d4:58:bb:c4:7f:3c:99:17:c6: e9:e5:10:01:74:7c:08:f7:c2:70:11:ad:ec:e7:30:69:43:d5: e2:85:97:b1:41:5d:a9:fd:e0:01:85:93:71:da:59:af:96:81: 32:72:eb:79:6d:df:1e:ab:88:a2:cc:b3:26:d2:cf:34:50:fc: 31:80:a8:9b:ee:61:2a:91:b6:4e:60:f7:a8:74:1d:ad:ee:6d: 8e:11:2c:66:7f:c3:e8:d3:79:0a:89:05:1e:d5:d7:ea:8c:f0: 1e:55:59:87:e3:d7:ce:32:fe:b0:fa:1e:c8:f2:9c:bc:a9:4e: 16:9e:48:e8:81:9e:b5:bc:8b:5a:10:12:e7:e0:59:32:21:b1: 96:ec:62:76:ec:fe:c3:4c:d7:39:71:22:37:7d:d3:60:f4:be: 8c:9c:83:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjUwODIwMjMwMDE0WhcNMjUwODI3MjMwMDE0WjAYMRYwFAYD VQQDEw02OGE2NTM3ZS0yYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kdnIKvWFwG65oUUUymzij87Tj7ELffzYoPfcbf6Uxq4FnHoEJpA/K0PhSG9 Ofm4C7qo0Z8EQLa3TtMxBsx7dO/RwFDzrU/iY5Gu0QmGGQzwGL+Xdxl71QomRgYp 7nQd5thaifnVvVCHqm8f3t2naXtP0lvhoRQaSXdjEuejS9WDgSng1JsU8+1EIe7u ZK8PvvzQyHyCqjRo5RN0CvSsDSe6wGA7nDznbNVjVV1JNskuyESwK/j9nx9/Khju IOrDqMVPQv2FW7HgRFTyPEio1FsU02EkbYAXctJAIN2V4rviTVLEuWx4gMFsThwG dvqbP3VFuTsd6PwZPCVIZ7VouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF74nZ/n 0ibX7qSPk4MLnKMx0WsRMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKpfjYVUDkGkOP3voCB0PMyVQEMWuGy0eoo/QmdfQrqtsSDETf28Y6 03TcTG6EwwlGbH07m3/pBx3l6Hyh0EnYq4nUyrFU6YlvUY2mL7jOeitxlGrakSph nQQOwvir9S2eIhPUWLvEfzyZF8bp5RABdHwI98JwEa3s5zBpQ9XihZexQV2p/eAB hZNx2lmvloEycut5bd8eq4iizLMm0s80UPwxgKib7mEqkbZOYPeodB2t7m2OESxm f8Po03kKiQUe1dfqjPAeVVmH49fOMv6w+h7I8py8qU4WnkjogZ61vItaEBLn4Fky IbGW7GJ27P7DTNc5cSI3fdNg9L6MnINj -----END CERTIFICATE-----Generated at Fri Aug 22 16:23:01 2025 by rpki-client