$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: vXTyTZmo03TKJ3wldzgisTEbzxGS6dNK2RqPYZLLmH8= Subject key identifier: A6:B9:DA:DF:B6:A1:96:7B:B5:9D:AA:E4:A2:AD:98:F7:34:C4:8D:7C Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 02AC Signing time: Thu 21 Aug 2025 01:41:35 +0000 Manifest this update: Thu 21 Aug 2025 01:41:35 +0000 Manifest next update: Thu 28 Aug 2025 01:41:35 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: 9j2ooCNVKiR//oSk9Fg1kUz0PhefOvZ98td188O6Xo4=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: XQQlM6hNFAUKcUE8JK0r1I7v7DiMWYg0+Wov0CdSVM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Aug 21 01:41:35 2025 GMT Not After : Aug 28 01:41:35 2025 GMT Subject: CN=68a6794f-62e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:be:7b:b6:69:20:6d:fe:ea:78:63:25:7d: ba:10:df:a2:e2:c0:be:4c:13:f5:ca:52:03:92:89: 9c:7e:72:6f:ed:31:d5:57:b4:d7:e2:77:67:1c:c1: ee:66:37:42:06:90:a2:01:4b:28:36:62:99:e0:97: a7:9e:08:d2:62:3c:2c:27:16:26:fc:21:64:d4:25: c1:77:86:f5:8a:2c:12:97:88:1c:6b:ba:8a:8c:8d: 3e:17:86:73:53:39:61:6e:ee:ff:1a:53:b7:35:21: a6:8f:ab:2b:34:54:c7:01:fb:05:ee:f9:d9:fe:e8: 98:83:c8:7c:4d:6b:11:55:2e:51:40:5e:cd:76:6b: 0b:ac:a7:6d:f8:58:26:a8:6e:c4:3a:6f:b7:4f:93: 82:d7:5b:be:55:63:5c:4b:a1:9a:ce:6e:12:e0:82: 06:0f:fb:df:32:71:12:e5:0b:f7:06:c9:c9:7d:e9: f0:06:92:df:73:f1:31:28:41:6f:ce:3b:28:3e:dd: d0:3a:86:eb:76:3c:86:ca:76:b2:67:96:42:ad:99: ce:26:e9:0d:1d:d2:fe:0a:21:ea:84:3e:75:6f:d6: 33:0d:9b:bb:92:17:0a:dd:76:06:e1:bd:75:97:69: 71:ce:c3:00:e1:9a:3b:d8:98:40:bf:72:23:e4:2d: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:DA:DF:B6:A1:96:7B:B5:9D:AA:E4:A2:AD:98:F7:34:C4:8D:7C X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b8:4a:53:e5:7a:5f:24:e2:48:27:13:ff:d9:78:03:4e:cd: b1:fd:b3:59:ed:58:fa:3c:6d:85:4c:47:d9:4d:e1:91:43:5b: 7e:8c:35:fa:cd:e0:c1:95:7b:9d:f2:e4:bb:69:83:a7:bc:ce: 24:86:90:54:b2:e5:52:30:e2:26:fa:64:02:62:45:95:60:f4: 1a:33:b3:7c:0c:91:79:72:52:09:db:a1:a2:8b:51:d6:d6:ab: bc:be:f0:d5:0f:d0:5e:c6:41:b0:ce:93:b5:20:5b:9e:fb:77: f4:9b:6c:68:5d:12:4f:31:06:96:d9:8a:7d:94:75:80:e6:32: 12:33:23:3c:aa:52:ee:0d:c3:87:22:05:f5:0e:08:7f:02:71: d5:13:5f:92:0b:21:33:ca:ec:e6:c3:8b:ef:2d:2b:f0:a8:05: da:4e:a8:33:c6:9a:60:fd:56:de:a5:90:05:e1:77:05:f2:d9: 58:43:61:af:23:5c:8e:be:41:2a:80:65:5b:cb:81:91:b8:0e: 04:03:b5:9b:7c:a3:b2:af:e1:cd:81:29:0e:40:e1:65:72:d2: f7:e0:31:37:75:4d:eb:25:e0:c4:7d:97:39:58:c9:69:b0:ed: 7f:07:e6:dd:3e:29:ee:10:9c:09:28:33:c1:fe:ea:a7:84:17: 42:d6:4e:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjUwODIxMDE0MTM1WhcNMjUwODI4MDE0MTM1WjAYMRYwFAYD VQQDEw02OGE2Nzk0Zi02MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRa+e7ZpIG3+6nhjJX26EN+i4sC+TBP1ylIDkomcfnJv7THVV7TX4ndnHMHu ZjdCBpCiAUsoNmKZ4JenngjSYjwsJxYm/CFk1CXBd4b1iiwSl4gca7qKjI0+F4Zz Uzlhbu7/GlO3NSGmj6srNFTHAfsF7vnZ/uiYg8h8TWsRVS5RQF7NdmsLrKdt+Fgm qG7EOm+3T5OC11u+VWNcS6Gazm4S4IIGD/vfMnES5Qv3BsnJfenwBpLfc/ExKEFv zjsoPt3QOobrdjyGynayZ5ZCrZnOJukNHdL+CiHqhD51b9YzDZu7khcK3XYG4b11 l2lxzsMA4Zo72JhAv3Ij5C0HgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKa52t+2 oZZ7tZ2q5KKtmPc0xI18MB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARuEpT5XpfJOJIJxP/2XgDTs2x/bNZ7Vj6PG2FTEfZTeGRQ1t+jDX6 zeDBlXud8uS7aYOnvM4khpBUsuVSMOIm+mQCYkWVYPQaM7N8DJF5clIJ26Gii1HW 1qu8vvDVD9BexkGwzpO1IFue+3f0m2xoXRJPMQaW2Yp9lHWA5jISMyM8qlLuDcOH IgX1Dgh/AnHVE1+SCyEzyuzmw4vvLSvwqAXaTqgzxppg/VbepZAF4XcF8tlYQ2Gv I1yOvkEqgGVby4GRuA4EA7WbfKOyr+HNgSkOQOFlctL34DE3dU3rJeDEfZc5WMlp sO1/B+bdPinuEJwJKDPB/uqnhBdC1k7J -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:19 2025 by rpki-client