$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: /07GjN1S9I8Ys7UQHH4sBxTdqdvMWunzeBTV0FrufpU= Subject key identifier: A6:94:B7:51:01:F2:4B:84:CA:36:CE:EE:1B:1C:E8:8B:06:90:E0:0F Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0AF9 Signing time: Sun 24 Aug 2025 19:22:36 +0000 Manifest this update: Sun 24 Aug 2025 19:22:36 +0000 Manifest next update: Sun 31 Aug 2025 19:22:36 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: yEKAOmguoMaA5Qr5qn6QVl4a6JSFoRheZA9XGYN2p+o=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Aug 24 19:22:36 2025 GMT Not After : Aug 31 19:22:36 2025 GMT Subject: CN=68ab667c-fb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:8f:99:14:95:b9:89:13:71:a7:2c:16:ba: 9d:80:9a:a6:28:f3:48:ba:86:6b:35:25:33:2c:21: 7a:c1:e3:e1:a0:01:c1:67:10:e1:c9:7b:34:75:50: ad:3f:27:43:fd:e6:8b:44:67:ec:8e:3d:66:99:68: 2b:88:18:ad:cc:da:a7:d4:66:49:3f:fe:4d:88:5d: 92:fe:43:1a:a7:47:e3:29:b4:45:73:6d:08:18:64: f4:73:fb:b2:7e:b0:9c:08:4f:34:ba:10:ab:ca:9f: cd:46:6f:83:1f:d8:ba:b5:ed:45:cd:eb:fe:29:82: 9e:da:9b:f4:08:35:1d:e2:59:ed:73:6c:88:7f:30: 73:ab:82:35:3c:d8:4f:1d:30:c2:97:ad:c0:83:e6: d6:11:d3:bf:35:50:23:61:b1:49:73:a2:06:b6:62: f8:ec:2f:00:84:60:ac:e6:6b:70:d4:aa:12:77:87: ed:f6:08:8f:7a:bf:3f:f8:71:1a:8a:a1:13:6d:4c: e6:41:35:58:e0:4d:63:e4:5a:ba:e6:41:91:ae:23: a3:5d:17:28:be:1a:66:5d:9e:e3:78:60:80:4b:0d: df:7c:c0:f2:25:68:17:30:b4:b9:0c:57:8d:8a:10: 6e:0b:06:b6:9e:d3:70:03:d2:47:36:f6:a5:a0:0f: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:94:B7:51:01:F2:4B:84:CA:36:CE:EE:1B:1C:E8:8B:06:90:E0:0F X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ab:be:32:8f:70:48:64:b8:a7:77:d5:4d:ec:a4:fb:1a:91: 37:00:4c:2b:2e:f3:4b:0e:a7:5a:d6:20:4f:da:f3:65:4c:8c: fc:46:9a:fa:85:3d:1f:67:e8:62:fa:44:e1:0a:90:9c:b4:8d: 66:b9:b2:e2:9d:77:78:f2:cc:3e:20:8c:68:93:68:16:36:4d: 25:59:6c:73:32:7d:8e:f0:94:77:a8:f3:7d:94:bd:30:8e:7e: fd:15:86:fa:2b:20:fe:bd:ee:5a:d8:0a:cf:16:9d:6a:bc:14: 9d:36:be:34:cc:e6:bc:07:6d:5f:fb:cc:1a:d7:b5:e9:21:ee: 66:88:59:17:66:56:d0:0b:f5:56:81:77:c4:cb:19:9b:20:f5: 2d:62:72:53:a9:94:32:64:57:c7:eb:e2:db:6c:a6:eb:7e:e2: 21:b8:24:a4:43:4f:85:3a:d9:6d:dc:fc:9d:13:f9:51:87:40: 32:a7:de:1c:de:d0:e0:b1:cf:c7:21:fe:46:52:ea:d8:2e:5d: 39:2c:7e:6c:44:e4:2d:db:ad:a6:b1:c4:e9:6a:b1:fd:25:26: 9c:ff:51:29:24:f8:f7:d3:fb:ca:4c:bc:cf:4e:c8:b9:c4:27: 15:9a:31:13:f9:c2:2b:42:85:ad:2c:55:fc:79:6a:0b:dc:d7: 3c:0b:7f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwODI0MTkyMjM2WhcNMjUwODMxMTkyMjM2WjAYMRYwFAYD VQQDEw02OGFiNjY3Yy1mYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybaPmRSVuYkTcacsFrqdgJqmKPNIuoZrNSUzLCF6wePhoAHBZxDhyXs0dVCt PydD/eaLRGfsjj1mmWgriBitzNqn1GZJP/5NiF2S/kMap0fjKbRFc20IGGT0c/uy frCcCE80uhCryp/NRm+DH9i6te1Fzev+KYKe2pv0CDUd4lntc2yIfzBzq4I1PNhP HTDCl63Ag+bWEdO/NVAjYbFJc6IGtmL47C8AhGCs5mtw1KoSd4ft9giPer8/+HEa iqETbUzmQTVY4E1j5Fq65kGRriOjXRcovhpmXZ7jeGCASw3ffMDyJWgXMLS5DFeN ihBuCwa2ntNwA9JHNvaloA85DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaUt1EB 8kuEyjbO7hsc6IsGkOAPMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVq74yj3BIZLind9VN7KT7GpE3AEwrLvNLDqda1iBP2vNlTIz8Rpr6 hT0fZ+hi+kThCpCctI1mubLinXd48sw+IIxok2gWNk0lWWxzMn2O8JR3qPN9lL0w jn79FYb6KyD+ve5a2ArPFp1qvBSdNr40zOa8B21f+8wa17XpIe5miFkXZlbQC/VW gXfEyxmbIPUtYnJTqZQyZFfH6+LbbKbrfuIhuCSkQ0+FOtlt3PydE/lRh0Ayp94c 3tDgsc/HIf5GUurYLl05LH5sROQt262mscTparH9JSac/1EpJPj30/vKTLzPTsi5 xCcVmjET+cIrQoWtLFX8eWoL3Nc8C38x -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:38 2025 by rpki-client