$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: Ia1uXA6iAs3At2BPd6rusULMK8+JtO6O3DoLKqqlcus= Subject key identifier: A0:41:84:0A:E8:54:C2:5E:1B:8D:A7:0F:A7:4C:4C:2C:20:18:18:24 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01C5 Signing time: Tue 09 Sep 2025 03:01:56 +0000 Manifest this update: Tue 09 Sep 2025 03:01:56 +0000 Manifest next update: Tue 16 Sep 2025 03:01:56 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: HhYrn0IbIuh15Gs2kPuJdUkeGGzMKYPKdKW8v1gEAoM=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Sep 9 03:01:56 2025 GMT Not After : Sep 16 03:01:56 2025 GMT Subject: CN=68bf98a4-ec03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:9d:c1:33:2f:17:ae:08:5f:9e:9e:42:91: 65:f4:4e:c0:f2:dd:f1:a0:ea:00:c9:2c:d8:34:d9: b4:22:e0:bd:16:6b:35:6e:57:a9:5b:2f:d5:f3:25: 02:da:f6:60:d3:87:32:2a:f6:0c:8e:7a:85:18:ca: 0f:e6:b0:5c:3e:84:9f:2e:20:60:8d:26:34:e0:fe: 56:37:39:46:7c:08:c2:dc:be:35:a0:59:51:9b:9f: f4:57:1f:58:e3:02:c9:22:f9:48:55:66:32:69:45: c9:9d:27:91:b7:73:18:70:1b:09:94:0d:60:27:6e: 60:c6:7d:32:82:4a:8b:2d:8c:3b:8d:e8:68:5c:71: a2:b3:2c:99:1f:5f:25:d6:b8:31:e9:5d:a5:3c:95: 35:3c:ec:cc:55:9c:5a:bd:ba:f6:f4:ad:72:a1:c8: ef:a7:1e:f9:de:92:b0:0d:c4:49:d0:a5:bf:9d:f7: 5b:03:4e:57:d9:78:97:ae:70:db:46:c6:bd:dd:66: 1a:e1:e5:41:54:42:2c:3d:fd:bf:cb:be:34:01:f9: 56:3b:dc:7a:22:08:b0:17:1f:84:29:4f:14:93:12: 52:35:c4:39:b3:4d:fb:f3:ca:f3:7e:73:73:57:66: 37:99:56:db:58:2b:ec:09:be:8e:58:10:72:cd:04: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:84:0A:E8:54:C2:5E:1B:8D:A7:0F:A7:4C:4C:2C:20:18:18:24 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8f:cc:67:ff:f2:7e:d4:e5:1c:c1:55:24:cc:92:9b:71:9c: a0:75:3d:7f:e1:f9:bf:4f:ba:e0:06:fa:4a:de:2b:8c:71:ac: 32:ca:17:77:50:a3:3e:f8:0e:85:e7:47:05:a1:fb:f0:67:ca: f5:b6:a7:42:1a:a4:50:02:34:62:c7:5d:ec:9a:a5:be:9d:b7: b5:1d:c5:ac:77:1e:64:38:4f:c3:8d:b0:68:99:2a:06:4b:4b: f9:d6:70:f7:ad:be:7c:70:05:6c:a6:c4:60:5d:f7:ef:38:64: f9:56:5a:40:45:b3:30:f9:18:e4:08:a2:04:58:23:ec:a2:8d: c8:e8:3d:99:bb:6c:e8:6e:65:84:da:62:50:b9:ce:54:0f:d9: 77:71:89:8d:e2:ad:3f:56:81:b9:ef:bb:93:16:20:93:9e:8d: 12:52:1d:b0:35:90:ce:21:8d:74:00:8e:9a:f0:80:1e:a3:4a: e6:fe:bc:94:17:60:76:d7:9b:76:55:5e:61:17:7b:76:44:43: 61:18:43:be:02:69:86:17:d1:d6:70:b0:e9:c7:40:32:34:66: c7:f6:2a:c6:3e:c1:5b:dd:13:ea:07:3a:b6:ca:4d:4e:75:b4: bc:5e:4d:fc:cd:9f:10:3b:ba:1e:1f:52:45:c3:d5:ef:ae:09: bd:08:4b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwOTA5MDMwMTU2WhcNMjUwOTE2MDMwMTU2WjAYMRYwFAYD VQQDEw02OGJmOThhNC1lYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08KdwTMvF64IX56eQpFl9E7A8t3xoOoAySzYNNm0IuC9Fms1blepWy/V8yUC 2vZg04cyKvYMjnqFGMoP5rBcPoSfLiBgjSY04P5WNzlGfAjC3L41oFlRm5/0Vx9Y 4wLJIvlIVWYyaUXJnSeRt3MYcBsJlA1gJ25gxn0ygkqLLYw7jehoXHGisyyZH18l 1rgx6V2lPJU1POzMVZxavbr29K1yocjvpx753pKwDcRJ0KW/nfdbA05X2XiXrnDb Rsa93WYa4eVBVEIsPf2/y740AflWO9x6IgiwFx+EKU8UkxJSNcQ5s03788rzfnNz V2Y3mVbbWCvsCb6OWBByzQQqmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBBhAro VMJeG42nD6dMTCwgGBgkMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMj8xn//J+1OUcwVUkzJKbcZygdT1/4fm/T7rgBvpK3iuMcawyyhd3 UKM++A6F50cFofvwZ8r1tqdCGqRQAjRix13smqW+nbe1HcWsdx5kOE/DjbBomSoG S0v51nD3rb58cAVspsRgXffvOGT5VlpARbMw+RjkCKIEWCPsoo3I6D2Zu2zobmWE 2mJQuc5UD9l3cYmN4q0/VoG577uTFiCTno0SUh2wNZDOIY10AI6a8IAeo0rm/ryU F2B215t2VV5hF3t2RENhGEO+AmmGF9HWcLDpx0AyNGbH9irGPsFb3RPqBzq2yk1O dbS8Xk38zZ8QO7oeH1JFw9Xvrgm9CEsy -----END CERTIFICATE-----Generated at Tue Sep 9 13:07:32 2025 by rpki-client