$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: cl3P4bRfibwrRUaivI1GAWZRn1rBD7EWBHOlJx7KAdI= Subject key identifier: E7:FE:11:46:CC:E6:41:E4:95:79:AF:38:09:C7:58:79:AF:3D:23:41 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 3D Signing time: Wed 17 Sep 2025 08:15:25 +0000 Manifest this update: Wed 17 Sep 2025 08:15:25 +0000 Manifest next update: Wed 24 Sep 2025 08:15:25 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: RIIqa1T3jXy6xsvashDedctUovbRa929sO/Lljcj0LY=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Sep 17 08:15:25 2025 GMT Not After : Sep 24 08:15:25 2025 GMT Subject: CN=68ca6e1d-2a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:b4:a3:9b:3c:f5:4c:0b:59:2a:60:5b:5b: 10:e5:3b:c9:ae:b0:9a:c5:59:33:2b:c7:9c:ca:ea: 17:21:9a:04:a8:a2:01:c5:12:9b:86:b0:31:2e:02: e5:3d:7d:af:82:b8:f0:21:61:4d:6f:63:c6:d0:f3: ed:eb:94:69:de:8a:12:42:5f:cf:a2:ee:b9:53:d0: 6c:c1:ac:41:c2:24:b3:45:eb:63:e2:49:1b:29:88: da:62:95:11:13:70:b7:b4:06:fb:a2:6b:68:0b:db: 3c:4d:99:9e:e6:41:16:39:4d:31:8f:10:7f:8e:3b: 16:8f:0d:3c:e3:bf:9d:9d:93:dd:4d:76:4f:33:ed: a8:9b:b8:ab:cc:d6:08:6e:f3:ee:8d:af:10:14:54: cf:37:e1:a2:e0:fb:09:54:fd:1d:9b:0a:04:fb:d7: a5:3b:47:78:2e:4e:88:c9:d0:c0:c1:49:3a:52:03: 29:2b:31:8b:34:32:6e:54:12:79:7a:0f:ea:ff:5d: b4:11:1c:69:7a:78:e6:09:6d:5d:e2:1e:74:83:0d: 51:ca:71:f7:91:8f:8e:f1:24:4f:91:c6:0e:bf:b2: fa:e9:f8:69:3b:27:f8:8f:c3:45:a4:44:8d:7c:b4: 1f:85:30:21:e7:da:41:9c:46:12:41:f7:7c:c9:a3: c7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:11:46:CC:E6:41:E4:95:79:AF:38:09:C7:58:79:AF:3D:23:41 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:d5:22:ae:50:a5:32:71:3a:6e:f4:16:b8:41:80:72:b3: a5:a9:9c:ae:7d:5a:e3:58:35:39:f7:1c:a7:67:04:ba:45:bd: f0:ef:07:b6:22:c9:6d:aa:d4:27:7a:ab:93:95:56:16:bc:2a: ae:0e:80:f3:0e:11:33:1a:5b:52:34:a9:7d:e5:71:92:4c:67: df:04:81:6a:4b:17:90:80:40:4a:76:bf:cb:b9:c7:14:43:ed: ec:46:68:cb:a4:ab:6d:b9:c7:9f:6b:43:da:03:4c:98:35:9c: ac:70:d2:6e:bb:1b:b5:f8:bd:cf:4e:df:cb:59:7d:74:0b:37: 7a:ac:44:ac:9c:fa:a9:f4:2f:29:73:62:ad:34:3e:17:10:41: de:97:db:e2:83:89:ea:46:bb:64:9a:3b:46:cf:1b:58:7e:06: 32:bd:77:f9:21:28:58:8a:48:c3:59:86:de:43:21:bb:14:1f: 34:00:f8:8a:f3:f3:8b:d5:cc:9f:ee:c4:42:ee:00:bc:02:ad: bb:42:7b:04:8e:03:7e:33:8f:f2:33:36:8a:27:eb:22:d7:7d: 3a:e5:e6:20:2d:ed:4c:ba:62:0a:46:12:21:52:67:6c:c2:d4: c7:49:d1:92:a8:ea:2b:18:f0:67:5d:99:a1:62:77:a1:1c:ba: b0:36:b8:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA5MTcwODE1MjVaFw0yNTA5MjQwODE1MjVaMBgxFjAUBgNV BAMTDTY4Y2E2ZTFkLTJhMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+krSjmzz1TAtZKmBbWxDlO8musJrFWTMrx5zK6hchmgSoogHFEpuGsDEuAuU9 fa+CuPAhYU1vY8bQ8+3rlGneihJCX8+i7rlT0GzBrEHCJLNF62PiSRspiNpilRET cLe0Bvuia2gL2zxNmZ7mQRY5TTGPEH+OOxaPDTzjv52dk91Ndk8z7aibuKvM1ghu 8+6NrxAUVM834aLg+wlU/R2bCgT716U7R3guTojJ0MDBSTpSAykrMYs0Mm5UEnl6 D+r/XbQRHGl6eOYJbV3iHnSDDVHKcfeRj47xJE+Rxg6/svrp+Gk7J/iPw0WkRI18 tB+FMCHn2kGcRhJB93zJo8crAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5/4RRszm QeSVea84CcdYea89I0EwHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSj1SKuUKUycTpu9Ba4QYBys6WpnK59WuNYNTn3HKdnBLpFvfDvB7Yi yW2q1Cd6q5OVVha8Kq4OgPMOETMaW1I0qX3lcZJMZ98EgWpLF5CAQEp2v8u5xxRD 7exGaMukq225x59rQ9oDTJg1nKxw0m67G7X4vc9O38tZfXQLN3qsRKyc+qn0Lylz Yq00PhcQQd6X2+KDiepGu2SaO0bPG1h+BjK9d/khKFiKSMNZht5DIbsUHzQA+Irz 84vVzJ/uxELuALwCrbtCewSOA34zj/IzNoon6yLXfTrl5iAt7Uy6YgpGEiFSZ2zC 1MdJ0ZKo6isY8GddmaFid6EcurA2uDk= -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:17 2025 by rpki-client