$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: JiuU2cHFW8fulSZTfB/Vt5XWSLvo7FOwZhuycBGa3T0= Subject key identifier: AD:AA:89:6E:6D:49:2E:61:16:E9:BA:0D:7C:C0:8B:41:99:60:30:A2 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: F6 Signing time: Wed 17 Sep 2025 05:53:44 +0000 Manifest this update: Wed 17 Sep 2025 05:53:43 +0000 Manifest next update: Wed 24 Sep 2025 05:53:43 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: p1PkTnBVzqorjVP/+uF+3jkv3iWTc1VlNSQJXOMa3m8=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Sep 17 05:53:43 2025 GMT Not After : Sep 24 05:53:43 2025 GMT Subject: CN=68ca4ce7-dace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:de:a5:84:61:3d:2f:7e:65:89:8e:1c:99: 5a:88:f7:78:df:a8:41:68:28:c8:0c:bf:57:ab:c4: e3:ca:c6:20:12:41:32:d9:6e:ca:91:c3:36:9a:e1: 26:4d:3b:f6:a5:e3:71:91:bd:79:a4:0d:17:99:eb: e0:a3:f7:91:90:5e:22:75:e5:e4:c1:af:33:88:0d: 9c:4b:57:70:39:6f:aa:f9:4d:73:cf:9a:52:06:35: 64:aa:01:78:17:6e:69:c2:56:86:5c:37:72:98:4c: 6a:2e:d5:c0:5f:bb:1e:91:c5:7a:41:1b:d4:98:69: 9c:fd:4a:e9:1f:3b:52:ff:16:56:0f:64:52:bf:53: 0a:5c:0f:09:24:4b:22:16:2b:11:81:99:93:24:92: 07:9d:1b:63:73:0b:03:2b:cb:73:f6:ec:74:d4:23: 65:87:cd:ca:f5:f9:44:8e:40:31:78:02:a5:31:07: 9c:21:1a:69:63:c9:d8:77:d2:39:46:22:8b:cc:20: ad:91:00:2b:b6:fd:71:4b:71:9a:56:9c:c7:ca:e6: 2d:b6:96:db:e3:d4:0f:ed:ba:2d:dc:a5:b7:66:48: 7e:5d:58:3c:ba:c7:cc:3e:98:4a:fa:1a:2a:91:7d: b1:4f:63:30:bf:2b:7e:32:9e:a5:27:1f:dc:a4:c0: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:89:6E:6D:49:2E:61:16:E9:BA:0D:7C:C0:8B:41:99:60:30:A2 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1e:43:00:16:3e:c9:ac:e5:76:d0:dc:76:f0:96:e1:8d:b7: 41:b4:ba:18:1c:c8:38:b6:2c:d1:51:ab:78:c7:8a:56:2d:fe: bc:44:a8:5d:48:17:83:82:6a:6f:aa:4c:a4:a9:50:f1:8f:f5: 74:b0:fc:84:74:9c:18:f6:8c:e7:8c:e3:a3:20:66:89:6e:48: 99:39:59:75:3f:14:22:d9:6b:99:84:6e:27:77:0e:83:82:1f: a1:2d:17:57:14:2b:65:65:1d:13:a8:a8:c8:67:bd:3e:51:6b: ed:0d:8a:16:08:20:46:ba:a8:07:56:58:eb:13:41:92:39:87: 05:94:36:a3:c8:72:ac:87:9e:83:5b:97:01:b1:16:e0:b1:c9: 2a:b5:94:7c:43:ad:2d:b4:48:ae:c9:4c:01:6b:10:79:8e:b6: 89:7a:41:85:a7:85:07:5f:c0:db:0c:af:17:c3:03:20:9e:ae: 65:b5:49:05:7f:fb:0b:aa:40:85:1e:23:83:fe:ab:ad:4b:46: 5c:4f:5c:2f:36:8a:5e:27:0e:1c:ad:04:6f:b4:d2:bb:cf:ce: 05:67:7e:bb:29:c5:57:52:b2:c7:ed:38:e3:e9:1c:2b:44:94: 90:86:b9:de:6e:74:df:8a:45:38:62:9e:0b:01:0c:65:fd:6f: aa:c7:2c:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwOTE3MDU1MzQzWhcNMjUwOTI0MDU1MzQzWjAYMRYwFAYD VQQDEw02OGNhNGNlNy1kYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzrepYRhPS9+ZYmOHJlaiPd436hBaCjIDL9Xq8TjysYgEkEy2W7KkcM2muEm TTv2peNxkb15pA0Xmevgo/eRkF4ideXkwa8ziA2cS1dwOW+q+U1zz5pSBjVkqgF4 F25pwlaGXDdymExqLtXAX7sekcV6QRvUmGmc/UrpHztS/xZWD2RSv1MKXA8JJEsi FisRgZmTJJIHnRtjcwsDK8tz9ux01CNlh83K9flEjkAxeAKlMQecIRppY8nYd9I5 RiKLzCCtkQArtv1xS3GaVpzHyuYttpbb49QP7bot3KW3Zkh+XVg8usfMPphK+hoq kX2xT2Mwvyt+Mp6lJx/cpMDdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2qiW5t SS5hFum6DXzAi0GZYDCiMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNHkMAFj7JrOV20Nx28JbhjbdBtLoYHMg4tizRUat4x4pWLf68RKhd SBeDgmpvqkykqVDxj/V0sPyEdJwY9oznjOOjIGaJbkiZOVl1PxQi2WuZhG4ndw6D gh+hLRdXFCtlZR0TqKjIZ70+UWvtDYoWCCBGuqgHVljrE0GSOYcFlDajyHKsh56D W5cBsRbgsckqtZR8Q60ttEiuyUwBaxB5jraJekGFp4UHX8DbDK8XwwMgnq5ltUkF f/sLqkCFHiOD/qutS0ZcT1wvNopeJw4crQRvtNK7z84FZ367KcVXUrLH7Tjj6Rwr RJSQhrnebnTfikU4Yp4LAQxl/W+qxyza -----END CERTIFICATE-----Generated at Wed Sep 17 09:04:51 2025 by rpki-client