$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: Mrrm3Embwc9SLDKDo+xY/h6upl4SZMyShqBmbG4E8+0= Subject key identifier: 21:ED:90:3C:0A:B0:97:72:D6:63:2D:15:8C:2C:C7:FF:0F:F9:04:8B Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 3D Signing time: Fri 05 Sep 2025 07:59:27 +0000 Manifest this update: Fri 05 Sep 2025 07:59:26 +0000 Manifest next update: Fri 12 Sep 2025 07:59:26 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: ra3jVmY7bMTKQOsSi6s1K26I40aHgTrCgJLOPoWZxck=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Sep 5 07:59:26 2025 GMT Not After : Sep 12 07:59:26 2025 GMT Subject: CN=68ba985f-e0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:4e:e4:a5:eb:bc:4e:f3:59:3d:ff:c2:af: 77:2e:86:01:3e:e8:07:c9:f4:3f:90:c9:a3:d4:b1: 00:d1:9a:f2:05:fa:58:1f:79:0f:f1:39:78:b0:0c: e6:d8:6c:87:40:44:bd:a9:53:33:98:99:d9:41:ad: 15:00:2b:86:fd:5b:de:da:94:82:73:19:43:a4:82: 8a:a7:d2:9f:45:aa:54:b6:18:09:56:6b:66:59:a3: 8a:be:e6:bf:94:1f:ea:ce:8c:a8:63:6b:7e:23:5d: 09:7e:6f:2d:22:7b:4f:12:ad:41:b7:f4:18:b6:b1: b5:0f:cc:8c:dd:f5:ca:a2:4f:51:f8:2b:57:95:d9: 47:b7:99:a0:28:81:e9:09:84:7c:04:ea:6c:0e:37: e0:3a:a2:7c:a8:34:bd:fe:77:2a:8b:bd:d1:46:e3: ef:bc:15:9d:a7:c4:6b:6f:93:8f:e6:e1:31:a1:19: fe:81:60:a0:dc:00:05:3a:e4:12:a7:b7:5b:c4:f8: 6a:b2:4f:97:bb:2a:e6:83:fa:c1:64:49:7e:9e:e6: 9d:0d:e7:e8:6a:a3:fb:da:c0:be:05:17:66:4b:5f: 81:8b:49:a6:77:50:fb:44:8f:5d:66:6e:8b:44:15: fb:9d:e3:4d:14:7e:9b:7d:e6:72:2a:30:c4:76:f4: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:90:3C:0A:B0:97:72:D6:63:2D:15:8C:2C:C7:FF:0F:F9:04:8B X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:4f:e9:fe:7f:90:e4:17:61:65:f9:9e:63:4e:0c:95:cd:d7: e9:4b:08:2c:21:d4:ee:92:d6:0b:bf:17:9e:cf:8b:1e:6e:bb: a5:e9:50:6b:2e:cb:61:ef:c7:59:7f:67:91:b0:45:06:69:59: bb:17:ac:03:77:8e:b9:b1:58:4d:ec:99:e0:f3:0e:0b:25:a8: a9:c8:82:41:a2:ca:f5:e0:64:83:ec:b4:59:c1:cc:b0:79:2d: d2:c2:44:9b:fd:d7:72:03:60:15:85:09:23:8e:d8:cb:2b:63: 71:de:0f:c3:fc:6b:04:52:b1:67:c5:5c:d7:46:15:93:7d:6e: b5:93:e2:37:b6:c8:8f:5d:8a:1d:79:08:11:47:29:25:c1:5b: 3b:27:81:86:c3:70:d9:dc:b7:c5:46:48:dc:75:47:a3:37:8c: 2b:5e:b2:61:db:f9:21:da:e9:8d:b8:12:4e:4c:c9:9f:94:81: 3a:b5:f3:8e:f6:8b:78:29:5a:0a:8e:e8:47:d9:4e:88:94:57: 51:f3:c9:c5:06:b3:a9:e7:27:66:dd:33:dd:d7:e8:77:72:29: 58:aa:2c:63:54:66:17:66:57:7c:c1:88:97:c4:87:95:d1:95: 9c:45:57:69:11:ef:c9:f5:a4:86:0b:13:28:0d:18:28:8d:a6: 31:8f:f3:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTA5MDUwNzU5MjZaFw0yNTA5MTIwNzU5MjZaMBgxFjAUBgNV BAMTDTY4YmE5ODVmLWUwYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTYU7kpeu8TvNZPf/Cr3cuhgE+6AfJ9D+QyaPUsQDRmvIF+lgfeQ/xOXiwDObY bIdARL2pUzOYmdlBrRUAK4b9W97alIJzGUOkgoqn0p9FqlS2GAlWa2ZZo4q+5r+U H+rOjKhja34jXQl+by0ie08SrUG39Bi2sbUPzIzd9cqiT1H4K1eV2Ue3maAogekJ hHwE6mwON+A6onyoNL3+dyqLvdFG4++8FZ2nxGtvk4/m4TGhGf6BYKDcAAU65BKn t1vE+GqyT5e7KuaD+sFkSX6e5p0N5+hqo/vawL4FF2ZLX4GLSaZ3UPtEj11mbotE Ffud400Ufpt95nIqMMR29GwhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIe2QPAqw l3LWYy0VjCzH/w/5BIswHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhP6f5/kOQXYWX5nmNODJXN1+lLCCwh1O6S1gu/F57Pix5uu6XpUGsu y2Hvx1l/Z5GwRQZpWbsXrAN3jrmxWE3smeDzDgslqKnIgkGiyvXgZIPstFnBzLB5 LdLCRJv913IDYBWFCSOO2MsrY3HeD8P8awRSsWfFXNdGFZN9brWT4je2yI9dih15 CBFHKSXBWzsngYbDcNnct8VGSNx1R6M3jCtesmHb+SHa6Y24Ek5MyZ+UgTq18472 i3gpWgqO6EfZToiUV1HzycUGs6nnJ2bdM93X6HdyKViqLGNUZhdmV3zBiJfEh5XR lZxFV2kR78n1pIYLEygNGCiNpjGP8xk= -----END CERTIFICATE-----Generated at Sat Sep 6 15:28:39 2025 by rpki-client