$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: 7qDwiihHQ+BHNsEkvW5aci4Hd6R/8fHP71TTl0b6WUg= Subject key identifier: 40:20:FA:30:CB:D5:FA:D7:CE:88:3A:16:43:49:96:69:3F:DC:9C:27 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0815 Signing time: Mon 08 Sep 2025 20:53:29 +0000 Manifest this update: Mon 08 Sep 2025 20:53:29 +0000 Manifest next update: Mon 15 Sep 2025 20:53:29 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: s56f6E3ebjp9mH3/8MmtdJq6hypb3RwqHGBRuHhD7L4=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: DuU/zvCDCUg2TONY7brDsE/++qWvSBYjnL7XCdcyag0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Sep 8 20:53:29 2025 GMT Not After : Sep 15 20:53:29 2025 GMT Subject: CN=68bf4249-081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:d1:3b:86:6a:09:79:e4:4b:88:c3:98:b0: 6b:0a:51:de:93:0b:f3:fa:33:b8:d2:9a:21:e7:40: 71:72:37:c9:93:dd:14:f3:d6:63:8d:8a:f0:59:60: d2:5e:26:5a:50:14:95:9e:2d:53:96:4b:f7:ed:af: e5:19:19:0c:cb:c6:8b:4b:df:94:ea:c0:75:bc:b3: 2c:6b:d1:d9:c4:f6:4a:00:ff:29:d6:da:c5:14:82: 38:ee:82:41:ae:04:c3:69:40:de:f9:14:9e:46:a4: 5f:db:26:ee:a7:f5:f6:cc:6b:47:0b:3a:72:0e:6d: 94:e5:d7:b3:56:fe:61:a7:01:13:b2:cf:70:1a:37: de:db:2e:49:55:53:57:8d:2f:02:f8:bf:39:2f:30: 2e:0d:93:12:42:27:fd:b1:55:9d:5c:b9:9f:a7:b0: 7a:2d:bd:c5:16:00:1e:5e:c4:ed:36:fa:5f:21:eb: 81:f6:53:26:ee:c1:22:fa:85:c7:9c:30:80:44:ba: c4:84:d8:c3:ad:df:15:2b:da:6b:ff:b5:33:39:26: e6:89:d0:97:36:a0:ca:88:e0:f1:fb:cf:93:29:d3: 27:c7:30:1e:71:12:4a:27:dd:10:63:c7:4f:d2:d0: 74:1e:73:ae:96:cb:2c:6d:76:93:d8:34:07:23:0f: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:FA:30:CB:D5:FA:D7:CE:88:3A:16:43:49:96:69:3F:DC:9C:27 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:e2:3f:8c:b4:1a:12:a0:dd:c1:07:bf:d2:5f:f0:78:cd: af:51:a0:c7:4c:2b:89:30:b4:ac:cf:ee:3a:46:63:01:d9:06: ff:3a:7d:bc:12:5c:79:8c:04:35:3d:a8:79:0a:70:f1:43:fa: 6a:f2:7a:63:83:32:ec:36:ff:8a:b2:63:8c:e0:a4:e5:6d:b1: a8:53:ce:61:54:92:47:eb:be:24:85:67:64:0d:0a:c8:fb:69: 94:2b:99:6a:fc:17:2d:74:d4:e1:a3:7d:95:3c:7b:66:13:9e: a2:0b:05:eb:1b:5a:62:55:96:94:ef:ba:59:35:61:52:39:23: d5:3a:cd:0d:75:72:34:27:d2:6a:9c:37:9a:d2:ea:bb:8f:f8: e5:f7:a0:da:6e:a3:64:97:63:e4:07:45:15:6b:0c:57:07:51: 8f:59:78:bd:b8:af:33:9d:32:15:9d:d3:59:e8:95:31:05:ab: 3b:84:3d:8a:dc:ed:55:be:22:b1:40:dd:90:cf:0e:8c:47:13: a1:a7:0f:7e:cf:40:0e:27:ac:4c:20:37:2a:4d:05:e4:2f:b8: 3a:7a:f4:76:a8:b1:7d:92:7a:22:ad:5e:24:bf:5b:3d:ee:aa: 7b:41:72:7a:9b:a8:49:b8:04:34:74:77:51:10:0a:22:9b:59: 6d:cf:a5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwOTA4MjA1MzI5WhcNMjUwOTE1MjA1MzI5WjAYMRYwFAYD VQQDEw02OGJmNDI0OS0wODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZHRO4ZqCXnkS4jDmLBrClHekwvz+jO40poh50BxcjfJk90U89ZjjYrwWWDS XiZaUBSVni1Tlkv37a/lGRkMy8aLS9+U6sB1vLMsa9HZxPZKAP8p1trFFII47oJB rgTDaUDe+RSeRqRf2ybup/X2zGtHCzpyDm2U5dezVv5hpwETss9wGjfe2y5JVVNX jS8C+L85LzAuDZMSQif9sVWdXLmfp7B6Lb3FFgAeXsTtNvpfIeuB9lMm7sEi+oXH nDCARLrEhNjDrd8VK9pr/7UzOSbmidCXNqDKiODx+8+TKdMnxzAecRJKJ90QY8dP 0tB0HnOulsssbXaT2DQHIw9UvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAg+jDL 1frXzog6FkNJlmk/3JwnMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFuI/jLQaEqDdwQe/0l/weM2vUaDHTCuJMLSsz+46RmMB2Qb/On28 Elx5jAQ1Pah5CnDxQ/pq8npjgzLsNv+KsmOM4KTlbbGoU85hVJJH674khWdkDQrI +2mUK5lq/BctdNTho32VPHtmE56iCwXrG1piVZaU77pZNWFSOSPVOs0NdXI0J9Jq nDea0uq7j/jl96DabqNkl2PkB0UVawxXB1GPWXi9uK8znTIVndNZ6JUxBas7hD2K 3O1VviKxQN2Qzw6MRxOhpw9+z0AOJ6xMIDcqTQXkL7g6evR2qLF9knoirV4kv1s9 7qp7QXJ6m6hJuAQ0dHdREAoim1ltz6XI -----END CERTIFICATE-----Generated at Wed Sep 10 19:39:07 2025 by rpki-client