$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: Me29EQh4tJEL+tks4kQoFrF+rsdOnvJ/20Clp0jB2SM= Subject key identifier: 08:25:1A:CE:45:7A:52:E7:D2:DB:F9:EC:9B:91:64:43:59:6C:E3:41 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0C90 Signing time: Wed 20 Aug 2025 18:18:55 +0000 Manifest this update: Wed 20 Aug 2025 18:18:54 +0000 Manifest next update: Wed 27 Aug 2025 18:18:54 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: HdDh8SVRjTitUGQl81YW7XaBVIYkbr26F28nBDXj1Hw=) 2: 44FEC394589711F0B981A181C4F9AE02.roa (hash: czF1g9Ex6VYm+KxfQ/94CmFck1ccrgeMZN09KqEwv5g=) 3: C21D3A065B7E11F0A8B76B2EC4F9AE02.roa (hash: 84DuWQA+97cDdeAiob2yXUJKVlhHSu21Cq4u1ZPXmWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66, serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Aug 20 18:18:54 2025 GMT Not After : Aug 27 18:18:54 2025 GMT Subject: CN=68a6118e-3406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:ed:a5:ad:1d:3a:05:7c:98:97:77:69:60: 6d:07:e4:43:b1:d4:c4:56:84:f0:6d:27:16:d0:07: 06:df:b9:4c:05:97:cb:b9:bd:7a:7b:94:12:3c:17: 72:1d:5d:7f:94:a8:78:c0:bd:c0:62:a8:a9:42:3d: 27:83:bd:e4:61:88:9b:d3:50:72:da:28:8a:3c:f5: fd:6c:7f:46:74:b8:0f:01:78:ca:3c:ec:a4:80:d1: 5c:dd:11:28:c1:c6:91:77:5a:18:18:4a:bd:eb:32: 5c:03:2c:4b:0f:c5:ee:cb:8a:cf:90:0e:f6:b1:6d: e1:59:96:87:e7:bc:60:da:40:8e:0a:e1:27:5a:92: bc:81:4c:70:10:18:7e:4c:08:3f:5d:47:53:39:b1: 30:4b:68:49:76:01:59:e8:5d:d1:19:d6:9c:81:0f: 85:80:66:31:9e:32:e4:d3:59:c4:bd:29:40:d0:58: 40:eb:50:5a:f5:d4:ea:7c:79:f5:38:9f:0c:d9:82: db:3c:86:c8:6c:c4:81:19:84:0b:23:5b:c8:dd:62: 6a:3d:25:64:31:da:06:61:b4:ba:6b:af:7e:54:49: c8:ec:44:2f:15:89:24:c4:fe:19:c7:d4:1a:9d:5a: e4:f7:de:f1:d2:e6:3f:3c:de:c7:db:99:21:68:aa: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:1A:CE:45:7A:52:E7:D2:DB:F9:EC:9B:91:64:43:59:6C:E3:41 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e0:49:8a:a9:39:5b:29:7d:12:b5:d4:1c:4c:ec:01:a5:f4: 29:f4:3c:df:3b:63:58:b7:bc:30:ed:02:e2:06:4a:8d:92:d5: 54:ea:a0:74:b3:b0:cd:de:2e:c4:d8:62:ad:20:63:eb:8c:a9: 4b:16:35:45:ac:e7:b8:b0:48:eb:cf:c2:ba:57:41:1d:f8:af: 9f:a9:08:aa:b4:2d:45:1d:67:48:e0:d7:18:9c:33:b4:35:01: dc:fd:e9:6d:40:a5:96:3e:d1:8c:c3:9a:0a:ef:0b:9c:2a:7e: d7:67:9a:26:da:68:55:8f:47:0e:e6:c7:b3:17:b1:78:21:82: df:e8:73:89:45:27:de:ef:9e:32:6d:66:b2:2b:72:e1:61:73: d6:1b:65:eb:b4:a5:3d:bb:f8:91:55:35:23:43:e3:c7:eb:e0: e5:a2:91:1e:13:69:e5:b8:f7:91:a3:64:18:00:93:ba:69:4a: 8a:f0:c0:27:6a:2e:4b:3e:92:55:54:01:be:86:86:67:a8:b7: f9:c9:25:6a:55:8e:eb:f8:45:66:d4:95:33:2d:49:32:ac:66: 3d:2b:61:09:c3:16:73:65:6b:ac:d9:43:b8:70:81:00:57:44: f2:ac:da:5a:54:3a:a1:21:bd:d5:06:7c:b7:5e:14:f0:a2:a2: 03:03:a6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjUwODIwMTgxODU0WhcNMjUwODI3MTgxODU0WjAYMRYwFAYD VQQDEw02OGE2MTE4ZS0zNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3Dtpa0dOgV8mJd3aWBtB+RDsdTEVoTwbScW0AcG37lMBZfLub16e5QSPBdy HV1/lKh4wL3AYqipQj0ng73kYYib01By2iiKPPX9bH9GdLgPAXjKPOykgNFc3REo wcaRd1oYGEq96zJcAyxLD8Xuy4rPkA72sW3hWZaH57xg2kCOCuEnWpK8gUxwEBh+ TAg/XUdTObEwS2hJdgFZ6F3RGdacgQ+FgGYxnjLk01nEvSlA0FhA61Ba9dTqfHn1 OJ8M2YLbPIbIbMSBGYQLI1vI3WJqPSVkMdoGYbS6a69+VEnI7EQvFYkkxP4Zx9Qa nVrk997x0uY/PN7H25khaKqQowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAglGs5F elLn0tv57JuRZENZbONBMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU4EmKqTlbKX0StdQcTOwBpfQp9DzfO2NYt7ww7QLiBkqNktVU6qB0 s7DN3i7E2GKtIGPrjKlLFjVFrOe4sEjrz8K6V0Ed+K+fqQiqtC1FHWdI4NcYnDO0 NQHc/eltQKWWPtGMw5oK7wucKn7XZ5om2mhVj0cO5sezF7F4IYLf6HOJRSfe754y bWayK3LhYXPWG2XrtKU9u/iRVTUjQ+PH6+DlopEeE2nluPeRo2QYAJO6aUqK8MAn ai5LPpJVVAG+hoZnqLf5ySVqVY7r+EVm1JUzLUkyrGY9K2EJwxZzZWus2UO4cIEA V0TyrNpaVDqhIb3VBny3XhTwoqIDA6b0 -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client