$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: SP+Hr4juMT75F3NjgdNXPDPoWdzufaNNlJubG2+KDq0= Subject key identifier: 38:E0:C0:C7:C6:2F:BD:60:7B:1A:7A:CB:0B:DC:C3:FF:9F:7C:18:BA Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 01A8 Signing time: Thu 21 Aug 2025 03:23:08 +0000 Manifest this update: Thu 21 Aug 2025 03:23:07 +0000 Manifest next update: Thu 28 Aug 2025 03:23:07 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: GboG84SG5qGbunJhJNyyrXwOW1Q2/duPnYdMy50D5Io=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Aug 21 03:23:07 2025 GMT Not After : Aug 28 03:23:07 2025 GMT Subject: CN=68a6911c-388d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:bb:e4:ce:85:a9:d4:9f:83:0c:40:a3:69: 97:71:2a:e3:d2:5e:36:9b:a4:68:46:63:3b:d8:1b: fb:50:50:d1:1f:72:79:21:96:5d:de:2f:5a:70:66: 9d:5d:a4:25:57:59:1c:a5:31:65:30:7a:31:67:77: 55:df:29:15:ee:a8:e9:d1:c1:36:f1:81:e6:e0:9e: c8:e9:fc:a3:6f:01:33:18:1c:fe:ce:51:e3:c2:0e: f4:c4:a4:81:51:0a:bb:eb:c7:65:20:aa:4e:6e:12: 25:15:ad:7f:37:8b:db:9b:90:be:97:ce:2e:50:3d: 6b:5f:42:62:24:9f:d7:07:4f:fc:21:2b:8e:39:e7: 38:1e:b9:ce:e3:97:c3:8b:3a:d3:23:05:91:7e:fe: 30:a5:90:06:0f:c5:05:bd:6d:cb:1d:27:47:67:32: fe:5b:20:5c:42:8c:11:d5:1d:9e:07:bf:3c:c6:9d: 9c:78:d2:53:92:fa:8c:a2:3d:6e:6a:e7:ea:c4:27: c6:6e:2e:51:8a:13:1f:3a:da:c0:a1:00:97:3f:59: 7b:f9:8e:16:35:d5:d7:15:d4:8d:4d:56:01:d2:73: 04:c3:ce:f8:4b:8c:9f:e3:a2:9c:23:99:68:cd:ae: 59:29:aa:e3:ee:94:c3:39:d6:9b:be:15:a1:b1:5e: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:C0:C7:C6:2F:BD:60:7B:1A:7A:CB:0B:DC:C3:FF:9F:7C:18:BA X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f9:91:9c:3a:9e:0a:f9:39:f7:d5:e6:69:4c:88:ce:96:60: e6:1d:a9:42:98:4c:35:8d:8d:b5:9c:58:c5:ab:84:25:82:e1: 4d:1d:6f:37:08:d6:23:81:cb:0a:0e:d7:34:4b:a8:21:20:d5: 5e:38:bd:7a:a4:7c:e1:c9:2e:8c:c4:64:35:12:e9:d5:ee:1d: c9:2b:d1:a2:11:6a:c6:11:e7:6f:45:4b:08:6e:6b:6a:98:ff: 51:02:fc:1e:20:df:c1:4a:6b:a9:cd:4e:b5:69:17:31:47:60: 1f:4e:5d:7c:eb:b4:d6:10:53:56:1c:06:30:65:71:a4:b0:c5: 9a:2e:21:83:af:14:31:e3:b7:6b:b5:37:4d:7e:66:26:e3:15: 1b:83:af:bd:41:f5:d3:49:2d:ad:ea:59:2a:61:36:a7:d9:5a: 35:1e:17:e4:a3:83:98:b2:ed:df:c4:e6:71:f8:78:27:32:9d: 00:9f:21:95:74:62:60:9c:dd:c2:f6:21:c2:29:58:d6:8c:fa: 29:3c:f7:c1:16:53:5c:6b:53:fc:f1:59:68:29:b9:d0:26:0f: 5c:b7:19:21:36:69:f8:57:a0:b7:d8:24:2d:bb:32:e8:f2:51: 30:02:0f:a8:4f:8f:ef:9b:a5:75:0f:34:a8:18:9e:d6:77:54: da:4b:74:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwODIxMDMyMzA3WhcNMjUwODI4MDMyMzA3WjAYMRYwFAYD VQQDEw02OGE2OTExYy0zODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYK75M6FqdSfgwxAo2mXcSrj0l42m6RoRmM72Bv7UFDRH3J5IZZd3i9acGad XaQlV1kcpTFlMHoxZ3dV3ykV7qjp0cE28YHm4J7I6fyjbwEzGBz+zlHjwg70xKSB UQq768dlIKpObhIlFa1/N4vbm5C+l84uUD1rX0JiJJ/XB0/8ISuOOec4HrnO45fD izrTIwWRfv4wpZAGD8UFvW3LHSdHZzL+WyBcQowR1R2eB788xp2ceNJTkvqMoj1u aufqxCfGbi5RihMfOtrAoQCXP1l7+Y4WNdXXFdSNTVYB0nMEw874S4yf46KcI5lo za5ZKarj7pTDOdabvhWhsV7lCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjgwMfG L71gexp6ywvcw/+ffBi6MB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl+ZGcOp4K+Tn31eZpTIjOlmDmHalCmEw1jY21nFjFq4QlguFNHW83 CNYjgcsKDtc0S6ghINVeOL16pHzhyS6MxGQ1EunV7h3JK9GiEWrGEedvRUsIbmtq mP9RAvweIN/BSmupzU61aRcxR2AfTl1867TWEFNWHAYwZXGksMWaLiGDrxQx47dr tTdNfmYm4xUbg6+9QfXTSS2t6lkqYTan2Vo1Hhfko4OYsu3fxOZx+HgnMp0AnyGV dGJgnN3C9iHCKVjWjPopPPfBFlNca1P88VloKbnQJg9ctxkhNmn4V6C32CQtuzLo 8lEwAg+oT4/vm6V1DzSoGJ7Wd1TaS3RR -----END CERTIFICATE-----Generated at Thu Aug 21 08:26:03 2025 by rpki-client