$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: dONAz/8x8VhjSMnHAs0gDWowNXMKEDq5+0kk+Z9qznY= Subject key identifier: 2B:2D:DB:ED:79:93:95:4A:09:2B:2B:EB:08:F9:B6:F3:06:83:8A:E9 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D42 Signing time: Sun 24 Aug 2025 17:58:13 +0000 Manifest this update: Sun 24 Aug 2025 17:58:13 +0000 Manifest next update: Sun 31 Aug 2025 17:58:13 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: VztaWn9Ge+pX5/Vf98olRVMK8MA0qPCCv6i9lh2N5pM=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Aug 24 17:58:13 2025 GMT Not After : Aug 31 17:58:13 2025 GMT Subject: CN=68ab52b5-bf68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:ef:88:31:c9:63:cf:72:d7:60:c4:f1:d4: 3b:47:0e:48:ec:20:86:f8:5f:d9:a7:38:32:b7:5f: be:ff:dd:53:f1:32:19:d5:46:54:7f:ba:1d:c8:2f: 0d:02:0b:46:e3:74:c7:a6:c1:26:55:ab:57:4e:1f: e2:ed:c8:48:ed:32:50:d3:44:2b:e4:c5:7e:09:bd: 6e:a8:c7:5d:b0:c9:3c:a9:c1:64:bc:cc:99:16:3e: ee:b0:3c:2e:3e:29:6b:22:cd:32:9d:6f:93:0c:97: a1:29:f6:88:47:05:2b:1e:81:e4:f6:be:47:f1:09: 9d:3e:7a:3e:34:a8:6c:4b:31:2d:ee:eb:8e:3c:b7: 63:0f:38:92:b5:ce:0d:b6:f5:e7:fc:39:e7:62:08: 98:e3:f7:d9:6d:4f:f7:35:36:1a:cd:08:26:db:99: a3:ad:ad:01:c4:05:17:30:07:d5:b4:f0:d1:57:6b: 62:61:5e:06:fe:64:b4:c3:8b:47:7e:66:c9:6f:0f: b1:1f:d5:fa:f1:4b:ad:b4:e8:7e:5f:8d:9d:b8:c3: 02:51:7c:b7:35:04:40:1f:45:54:06:1c:40:02:e8: 29:16:64:23:07:78:b1:ea:84:c6:42:29:35:f9:06: 7d:87:e8:b6:33:4d:62:98:d8:1c:77:30:f8:93:ef: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2D:DB:ED:79:93:95:4A:09:2B:2B:EB:08:F9:B6:F3:06:83:8A:E9 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:b6:07:a2:00:82:96:a0:5f:8d:b2:43:91:0a:49:83:cd:7c: 22:06:0a:35:f6:e2:99:c7:f9:e8:40:31:1c:d1:32:cb:19:c8: 8e:16:98:a2:ab:c2:d7:4a:d6:fb:90:1b:d0:d5:71:05:a8:77: cc:be:91:b6:e7:b2:de:f6:7c:b2:37:1b:55:f9:2b:24:18:b8: e9:b9:3d:66:51:a4:7a:40:33:82:5a:01:ac:5c:9c:c3:34:b0: 4b:45:40:ab:7b:60:0a:94:b7:ac:b0:a9:c6:ba:37:a8:11:10: 79:c2:b2:4a:38:cd:ea:89:83:f6:26:17:11:f0:f4:fa:fd:25: 46:8e:72:e3:16:9d:9a:e0:f5:36:f2:46:a2:09:57:0c:8c:05: ab:e1:49:69:27:fc:ff:a8:2a:01:3a:ea:f9:72:ee:f1:0e:4c: 87:20:65:64:da:e4:61:59:42:d2:aa:f6:c9:85:6e:80:1e:c9: ce:74:aa:ce:72:5b:e2:a1:f0:0c:30:a2:97:32:87:79:2d:2c: 74:34:30:da:8b:9f:f7:78:fd:3c:bc:50:22:a3:a9:9b:9c:89: b5:14:92:81:ea:72:34:da:3e:d0:be:2f:bb:91:a4:87:a3:d3: ed:e9:5c:3e:e3:bd:f3:70:22:d5:82:c8:52:f4:64:32:b1:ce: fa:75:c3:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwODI0MTc1ODEzWhcNMjUwODMxMTc1ODEzWjAYMRYwFAYD VQQDEw02OGFiNTJiNS1iZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslXviDHJY89y12DE8dQ7Rw5I7CCG+F/Zpzgyt1++/91T8TIZ1UZUf7odyC8N AgtG43THpsEmVatXTh/i7chI7TJQ00Qr5MV+Cb1uqMddsMk8qcFkvMyZFj7usDwu PilrIs0ynW+TDJehKfaIRwUrHoHk9r5H8QmdPno+NKhsSzEt7uuOPLdjDziStc4N tvXn/DnnYgiY4/fZbU/3NTYazQgm25mjra0BxAUXMAfVtPDRV2tiYV4G/mS0w4tH fmbJbw+xH9X68UuttOh+X42duMMCUXy3NQRAH0VUBhxAAugpFmQjB3ix6oTGQik1 +QZ9h+i2M01imNgcdzD4k+/rkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCst2+15 k5VKCSsr6wj5tvMGg4rpMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDitgeiAIKWoF+NskORCkmDzXwiBgo19uKZx/noQDEc0TLLGciOFpii q8LXStb7kBvQ1XEFqHfMvpG257Le9nyyNxtV+SskGLjpuT1mUaR6QDOCWgGsXJzD NLBLRUCre2AKlLessKnGujeoERB5wrJKOM3qiYP2JhcR8PT6/SVGjnLjFp2a4PU2 8kaiCVcMjAWr4UlpJ/z/qCoBOur5cu7xDkyHIGVk2uRhWULSqvbJhW6AHsnOdKrO clviofAMMKKXMod5LSx0NDDai5/3eP08vFAio6mbnIm1FJKB6nI02j7Qvi+7kaSH o9Pt6Vw+473zcCLVgshS9GQysc76dcN2 -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:49 2025 by rpki-client