$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: lvKwaFQfaAFpWLp0kHyJbVmmrYyUKt5oVmIfwUjtH1w= Subject key identifier: 70:EE:D7:7E:8A:D2:5A:C5:31:7F:A9:AD:AF:E3:42:2C:27:27:5E:CF Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 01BC Signing time: Thu 21 Aug 2025 03:08:48 +0000 Manifest this update: Thu 21 Aug 2025 03:08:48 +0000 Manifest next update: Thu 28 Aug 2025 03:08:48 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: SRXmRzmFNXD9nN1KLvKnpq5DP5ANr4PkCcWXDKdQKYg=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: Xws1Pbqqq0/QFZ02P8d+7Evj6MZMCt/rYpdMr05WU7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Aug 21 03:08:48 2025 GMT Not After : Aug 28 03:08:48 2025 GMT Subject: CN=68a68dc0-c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:52:a6:d4:40:c9:da:9b:de:a5:02:2f:9d: c5:d3:58:90:fe:79:d8:a0:64:15:d0:85:25:8e:6d: ec:d0:41:3d:49:ff:03:e1:54:9b:41:29:d5:1a:03: a6:d2:c8:48:cb:08:ec:01:4c:6c:37:41:6e:42:86: e7:64:50:9b:3f:51:2c:c1:a5:32:ce:a3:28:6f:33: be:9b:57:71:81:76:61:71:28:11:88:e4:ae:d0:ab: 0e:91:1f:60:3f:ea:00:11:49:73:d9:2d:f5:79:bf: 22:11:2b:c5:15:ac:2b:5c:67:ac:06:b9:ab:97:32: 59:4a:61:80:42:98:65:22:2e:6b:d6:54:75:91:f1: 15:09:fa:37:99:48:2e:55:07:ce:25:b8:8a:09:6f: 94:bd:a0:59:7c:ef:b3:25:9e:27:b7:7c:23:1e:b8: 3d:7d:90:3a:95:06:fd:fe:e8:b1:10:a6:34:ae:6c: d9:53:ee:3d:b1:fe:c5:b9:af:f1:52:47:6d:5a:1d: ad:c4:c7:54:7d:0e:db:c5:fc:d3:48:71:9e:c8:a8: 80:22:e4:9b:c4:34:e3:2f:46:55:89:e8:8f:db:d9: 2b:72:e4:8b:65:01:ae:3e:bd:2a:ce:51:a0:be:6f: c2:bf:8e:1f:da:2a:2c:b8:39:54:7e:10:e5:b0:c1: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EE:D7:7E:8A:D2:5A:C5:31:7F:A9:AD:AF:E3:42:2C:27:27:5E:CF X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:a2:33:02:a9:89:9b:07:c1:1d:07:29:6f:37:79:c1:67:91: 7f:92:24:16:17:aa:72:62:41:30:9b:61:a7:ac:83:5e:ba:a1: 52:08:4e:c5:94:e2:d9:19:06:13:ad:89:d2:b8:6c:0a:c9:34: 77:49:d5:d2:79:ea:74:d0:d6:90:9c:1a:30:14:a5:48:ce:32: dd:e0:2f:81:07:dc:b0:52:f2:1a:dc:b5:fc:32:4a:91:7b:d3: ca:1a:17:49:1b:f1:8e:d9:a8:fe:01:12:a8:ae:db:ee:f5:ca: 2e:75:d0:cc:b5:f0:2e:cb:6c:a7:02:1d:2b:9f:50:14:33:f3: 75:37:5c:55:ee:f8:83:28:dc:c6:22:2a:05:71:1b:90:74:01: fe:cc:78:b2:b7:0c:72:6f:2d:7c:f4:3f:75:79:e6:1f:77:87: 51:46:7b:7c:90:6d:e8:3c:25:be:ba:4a:df:89:54:f0:88:96: 47:c4:a5:bc:7a:7e:ff:62:04:8a:06:3c:b5:e5:e7:17:9a:26: 17:22:40:7c:5d:34:0d:97:4d:fc:05:e0:81:d4:2f:7c:67:78: 08:d1:95:9e:12:cb:ed:8d:a4:b3:0d:bc:e1:e4:1b:f8:3f:52: ab:fe:0a:2b:eb:8a:2d:39:a8:c8:1e:7b:3d:60:c5:aa:bf:d5: 6e:08:8e:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwODIxMDMwODQ4WhcNMjUwODI4MDMwODQ4WjAYMRYwFAYD VQQDEw02OGE2OGRjMC1jMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDFSptRAydqb3qUCL53F01iQ/nnYoGQV0IUljm3s0EE9Sf8D4VSbQSnVGgOm 0shIywjsAUxsN0FuQobnZFCbP1EswaUyzqMobzO+m1dxgXZhcSgRiOSu0KsOkR9g P+oAEUlz2S31eb8iESvFFawrXGesBrmrlzJZSmGAQphlIi5r1lR1kfEVCfo3mUgu VQfOJbiKCW+UvaBZfO+zJZ4nt3wjHrg9fZA6lQb9/uixEKY0rmzZU+49sf7Fua/x UkdtWh2txMdUfQ7bxfzTSHGeyKiAIuSbxDTjL0ZVieiP29krcuSLZQGuPr0qzlGg vm/Cv44f2iosuDlUfhDlsMHaAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDu136K 0lrFMX+pra/jQiwnJ17PMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRojMCqYmbB8EdBylvN3nBZ5F/kiQWF6pyYkEwm2GnrINeuqFSCE7F lOLZGQYTrYnSuGwKyTR3SdXSeep00NaQnBowFKVIzjLd4C+BB9ywUvIa3LX8MkqR e9PKGhdJG/GO2aj+ARKortvu9couddDMtfAuy2ynAh0rn1AUM/N1N1xV7viDKNzG IioFcRuQdAH+zHiytwxyby189D91eeYfd4dRRnt8kG3oPCW+ukrfiVTwiJZHxKW8 en7/YgSKBjy15ecXmiYXIkB8XTQNl038BeCB1C98Z3gI0ZWeEsvtjaSzDbzh5Bv4 P1Kr/gor64otOajIHns9YMWqv9VuCI5f -----END CERTIFICATE-----Generated at Fri Aug 22 16:24:15 2025 by rpki-client