$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: ggyfZzRREzZwd3Q7JcQ4fzRGTGd1vgjm8BY7XFgWRaw= Subject key identifier: 2F:22:44:D8:58:3D:97:D6:60:37:A8:4D:68:B2:A1:0D:9B:E3:FE:E3 Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 103D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 1005 Signing time: Sun 24 Aug 2025 17:28:53 +0000 Manifest this update: Sun 24 Aug 2025 17:28:53 +0000 Manifest next update: Sun 31 Aug 2025 17:28:53 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: A/LUvkgmQnDpDPhs6V6AUGm516bihCCSkgdSJ1HMDaM=) 2: 388342E06BB911F089CE7580C4F9AE02.roa (hash: rOVEHU2UU8t52B+8KBLIZbGwXL9rBVgFqwmJKW2YWdA=) 3: AA2BE0CC359B11F08F8F7E4AC4F9AE02.roa (hash: cZwW8tsmFD2xtwPfekSh582VRbEv6Jvu1sqyXeWPy+U=) 4: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4157 (0x103d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Aug 24 17:28:53 2025 GMT Not After : Aug 31 17:28:53 2025 GMT Subject: CN=68ab4bd5-5de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:e7:9a:7e:ba:e0:4f:f7:c6:d3:c1:f8:93: 01:b5:0c:ca:8e:ec:db:be:b5:00:7c:a8:d6:3c:17: 2e:27:d4:6a:9f:5a:27:d5:73:3b:d8:5e:63:ce:7d: d4:0e:1e:2c:e7:c9:f9:82:e7:c7:6a:86:3f:6e:59: a7:10:dd:a1:6e:8c:7c:c3:a5:40:9e:22:98:dd:3a: 99:68:76:0a:a7:8d:78:ed:72:96:11:76:a0:50:16: d2:a7:42:7a:98:9e:24:97:86:fd:c9:9b:cb:4d:a8: 66:5f:f1:1b:34:8f:42:7d:61:30:eb:44:02:74:06: 06:9e:48:d6:40:c9:e2:cf:62:f6:19:ec:34:7c:be: af:38:ba:41:70:bb:27:1f:e0:49:93:61:ce:d2:b4: 06:1a:b7:86:4b:e7:a9:42:af:6d:94:c1:17:bf:ad: 6b:81:c8:8c:30:b5:2c:c9:39:a1:d1:c0:4a:b8:e1: f1:43:ea:c1:e5:d5:86:c8:c5:3b:7d:86:90:20:7c: 8d:83:dd:4f:a0:02:48:ef:1f:10:44:42:77:51:a0: 77:9e:92:87:76:f2:b1:b3:6d:da:a5:fb:b9:e6:bd: d6:91:be:51:2c:c9:4b:d3:03:65:05:e2:41:50:2b: 10:dc:f5:da:af:a1:fe:91:ad:ea:18:fa:98:5b:d4: 22:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:44:D8:58:3D:97:D6:60:37:A8:4D:68:B2:A1:0D:9B:E3:FE:E3 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:3c:85:04:e3:0e:de:e4:ac:76:ea:f1:93:6d:d8:45:4d: 55:db:85:92:94:7f:d4:ba:06:80:2a:92:c3:97:3e:ba:cf:26: 20:43:e7:ec:41:a4:05:48:47:4b:84:49:fe:02:b9:6d:5f:c0: 80:a9:ea:dc:d0:ef:36:c6:30:2c:05:f4:b2:83:c6:86:eb:1d: 89:f0:99:b7:76:0d:e9:11:09:2a:ef:d8:15:d4:7f:e7:48:69: 6a:48:4f:bc:f9:4b:32:b8:e7:09:b1:95:b8:11:90:c8:bb:aa: 1b:55:96:80:f4:22:d9:63:a7:7c:27:cf:62:13:72:fc:35:71: a8:92:ab:11:c6:26:34:9d:d6:d9:35:c1:43:05:3a:43:fd:30: 76:05:39:80:a8:6b:f6:95:8e:e6:8d:aa:02:50:6b:1b:b4:f9: 7a:d2:75:96:67:22:2c:09:24:3d:7b:12:f0:24:2e:ef:0b:b2: 80:5c:4f:dd:7c:c3:65:02:47:22:4e:22:1b:a1:db:6a:65:a9: 00:21:5d:75:d3:ba:8f:65:75:2e:2f:8b:a7:00:3e:c5:34:82: 23:f7:39:a7:7e:89:44:69:3c:5b:12:0d:f9:e7:2c:e4:86:55: 58:f4:1e:91:11:26:10:c4:f0:e9:01:b9:9e:79:3a:67:32:7f: 2e:9b:cd:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICED0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwODI0MTcyODUzWhcNMjUwODMxMTcyODUzWjAYMRYwFAYD VQQDEw02OGFiNGJkNS01ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmLnmn664E/3xtPB+JMBtQzKjuzbvrUAfKjWPBcuJ9Rqn1on1XM72F5jzn3U Dh4s58n5gufHaoY/blmnEN2hbox8w6VAniKY3TqZaHYKp4147XKWEXagUBbSp0J6 mJ4kl4b9yZvLTahmX/EbNI9CfWEw60QCdAYGnkjWQMniz2L2Gew0fL6vOLpBcLsn H+BJk2HO0rQGGreGS+epQq9tlMEXv61rgciMMLUsyTmh0cBKuOHxQ+rB5dWGyMU7 fYaQIHyNg91PoAJI7x8QREJ3UaB3npKHdvKxs23apfu55r3Wkb5RLMlL0wNlBeJB UCsQ3PXar6H+ka3qGPqYW9QiGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8iRNhY PZfWYDeoTWiyoQ2b4/7jMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5DyFBOMO3uSsdurxk23YRU1V24WSlH/UugaAKpLDlz66zyYgQ+fs QaQFSEdLhEn+ArltX8CAqerc0O82xjAsBfSyg8aG6x2J8Jm3dg3pEQkq79gV1H/n SGlqSE+8+UsyuOcJsZW4EZDIu6obVZaA9CLZY6d8J89iE3L8NXGokqsRxiY0ndbZ NcFDBTpD/TB2BTmAqGv2lY7mjaoCUGsbtPl60nWWZyIsCSQ9exLwJC7vC7KAXE/d fMNlAkciTiIbodtqZakAIV1107qPZXUuL4unAD7FNIIj9zmnfolEaTxbEg355yzk hlVY9B6RESYQxPDpAbmeeTpnMn8um80H -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:34 2025 by rpki-client