$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: 6YeCxIMU5J5EgdUcvbIlzWzZ/DcqOZZcuPF1xIgb1fs= Subject key identifier: DA:29:DC:7C:F5:BD:14:A6:02:81:90:92:09:F5:CD:5D:EC:3D:6D:C7 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 07DD Signing time: Sat 06 Sep 2025 21:04:01 +0000 Manifest this update: Sat 06 Sep 2025 21:04:01 +0000 Manifest next update: Sat 13 Sep 2025 21:04:01 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: c7V+eLD7lEmsbjjQO7tQrWuPdRfkao4XXgWbZtcj28k=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: C75Vrv4Uz+C6zFOBFG0FQ16ertvfsDBJQmC7BROeKb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Sep 6 21:04:01 2025 GMT Not After : Sep 13 21:04:01 2025 GMT Subject: CN=68bca1c1-00fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b6:7c:e5:23:1f:cf:fa:1b:35:c3:8d:35:d8: 1d:4c:87:01:39:07:79:9b:0c:7a:c4:ef:78:24:4f: 57:fa:f2:7c:9d:27:75:33:3d:24:d5:62:28:a1:e2: 6e:0f:3d:c7:91:98:a9:a4:28:86:e1:5d:b3:07:ed: 40:05:80:a5:60:eb:1e:a0:3f:93:5f:e1:dc:9b:7c: f7:e3:6e:9c:34:c0:c4:7c:61:03:dd:51:0a:fe:12: 1e:bf:b1:11:97:c3:00:4f:0e:64:e3:bb:15:f5:e9: f8:d5:6c:00:13:63:66:f1:e7:b7:56:e7:fb:4e:07: e3:1c:76:d4:db:ab:5c:24:4c:df:48:22:ed:a7:e3: 1d:40:72:da:48:74:33:fc:e2:9c:a9:c2:21:7b:68: 00:c7:e9:24:61:bf:67:37:68:5d:63:81:c5:83:60: 5d:04:73:62:52:2d:c9:98:02:d8:cd:3c:18:4d:00: 2a:b0:4e:a1:90:14:9f:d6:6a:c0:6c:00:62:55:79: 70:4a:24:6a:ad:93:6a:97:01:05:cb:cb:28:4c:6b: 03:05:17:1a:2b:b8:08:e7:41:06:4d:04:52:be:01: 92:53:ce:02:2f:71:26:a7:f9:bb:c9:74:a5:cb:75: 69:3e:11:51:7f:e1:3a:5f:2d:70:67:77:9b:50:47: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:29:DC:7C:F5:BD:14:A6:02:81:90:92:09:F5:CD:5D:EC:3D:6D:C7 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5a:16:cd:a2:91:fa:84:c3:66:11:3c:3f:d4:f0:f5:87:b4: a7:cf:20:ad:8f:0a:c7:b6:23:5e:68:a1:90:ae:4e:b3:c3:c1: ce:c3:5e:f0:17:97:6c:dc:b8:97:25:53:11:8c:00:ae:6d:f4: c2:df:76:ff:5c:62:29:6d:50:12:ee:99:4b:bd:de:d7:5e:39: 3c:35:bd:4e:b2:51:c9:4e:7d:b5:6d:7a:6e:5c:fe:b3:01:4d: 97:70:c6:4f:41:80:69:c5:94:24:09:66:b8:7b:81:5a:44:80: 6f:40:fe:09:a4:e7:4c:7d:2a:73:7d:bd:1b:30:8f:df:2f:e7: f7:6e:2c:89:8f:a2:b5:6b:90:78:c4:59:4f:c5:f3:3b:9f:58: 6a:97:8d:19:46:5f:0e:01:73:28:15:23:93:eb:82:a4:7a:b5: 7b:c4:16:bd:88:44:bf:87:e6:45:fb:83:86:f3:77:4b:20:00: e7:42:d2:6c:6f:61:03:52:30:5a:84:56:48:61:cb:9c:df:f0: 36:d8:e0:11:ec:56:d1:c5:81:aa:64:90:7a:ae:16:66:50:19: e9:68:67:e4:c9:4e:61:e6:3b:7e:93:f0:fc:f4:a1:28:81:e0: 05:b1:98:ef:21:73:25:6a:24:42:fc:2e:47:c3:86:8a:ab:41: 84:36:62:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjUwOTA2MjEwNDAxWhcNMjUwOTEzMjEwNDAxWjAYMRYwFAYD VQQDEw02OGJjYTFjMS0wMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bZ85SMfz/obNcONNdgdTIcBOQd5mwx6xO94JE9X+vJ8nSd1Mz0k1WIooeJu Dz3HkZippCiG4V2zB+1ABYClYOseoD+TX+Hcm3z3426cNMDEfGED3VEK/hIev7ER l8MATw5k47sV9en41WwAE2Nm8ee3Vuf7TgfjHHbU26tcJEzfSCLtp+MdQHLaSHQz /OKcqcIhe2gAx+kkYb9nN2hdY4HFg2BdBHNiUi3JmALYzTwYTQAqsE6hkBSf1mrA bABiVXlwSiRqrZNqlwEFy8soTGsDBRcaK7gI50EGTQRSvgGSU84CL3Emp/m7yXSl y3VpPhFRf+E6Xy1wZ3ebUEcWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNop3Hz1 vRSmAoGQkgn1zV3sPW3HMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWhbNopH6hMNmETw/1PD1h7SnzyCtjwrHtiNeaKGQrk6zw8HOw17w F5ds3LiXJVMRjACubfTC33b/XGIpbVAS7plLvd7XXjk8Nb1OslHJTn21bXpuXP6z AU2XcMZPQYBpxZQkCWa4e4FaRIBvQP4JpOdMfSpzfb0bMI/fL+f3biyJj6K1a5B4 xFlPxfM7n1hql40ZRl8OAXMoFSOT64KkerV7xBa9iES/h+ZF+4OG83dLIADnQtJs b2EDUjBahFZIYcuc3/A22OAR7FbRxYGqZJB6rhZmUBnpaGfkyU5h5jt+k/D89KEo geAFsZjvIXMlaiRC/C5Hw4aKq0GENmJQ -----END CERTIFICATE-----Generated at Mon Sep 8 02:17:49 2025 by rpki-client