$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: 7+gQkBCIF+OfquXSEr5YQdVledjPCOpGJEHpMI4AWiQ= Subject key identifier: A6:3A:4A:72:FE:33:A8:38:58:45:35:DF:2F:FD:86:96:98:BE:6A:5F Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 22 Signing time: Sun 27 Jul 2025 08:08:58 +0000 Manifest this update: Sun 27 Jul 2025 08:08:58 +0000 Manifest next update: Sun 03 Aug 2025 08:08:58 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: vPyoBBNAheXxD5mUTioysnVNYm1iDbmg7rr7lVMxqX8=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 08:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Jul 27 08:08:58 2025 GMT Not After : Aug 3 08:08:58 2025 GMT Subject: CN=6885de9a-3d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bd:53:25:4a:1e:ff:57:9a:85:23:4f:b7:35: 13:30:b3:13:fe:45:db:f4:37:c4:cb:68:0b:38:67: c9:12:11:7b:17:1e:1c:78:61:e5:fc:3e:db:0f:a5: 08:7e:0c:f2:ae:69:07:11:fe:c9:10:23:46:93:36: a9:5f:fb:cb:1d:c0:62:15:a1:be:c7:d7:5a:51:3d: 61:42:e8:50:38:1f:80:4d:e6:9c:b2:aa:07:00:0e: 34:15:01:7d:ae:2c:02:05:65:ec:4c:0c:37:0b:03: 41:06:02:c5:0e:81:fe:da:52:64:91:a0:00:b7:18: 71:3a:4b:a0:85:13:95:47:bd:36:b8:be:e9:0b:62: 5c:19:e5:87:52:a5:96:8c:70:00:1e:79:eb:95:1a: b2:2b:93:82:d8:70:06:39:6d:ac:d3:54:76:4a:ed: 42:07:3c:82:c3:f2:d1:fa:9a:99:87:c3:e8:ad:1f: 2f:c6:db:86:ea:3d:b4:d6:1c:f1:65:98:5b:ad:91: 20:d6:89:0a:5e:9a:0e:93:a5:dd:fe:43:97:4c:41: ad:72:1d:c6:b4:0c:8f:c3:2c:57:4b:ec:59:3c:54: 91:e6:bf:d8:ca:67:2b:ac:59:6f:b8:03:d2:2c:29: d8:62:16:0d:f5:bd:ab:80:d1:4c:b8:a4:18:42:a5: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:4A:72:FE:33:A8:38:58:45:35:DF:2F:FD:86:96:98:BE:6A:5F X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2b:ef:76:ba:0d:97:01:97:a7:8c:5d:3e:dd:48:a3:00:0b: 4d:c4:e7:4c:68:73:36:53:51:47:47:ed:2e:14:3d:79:f2:74: fa:12:c7:a3:24:bf:64:5f:82:22:eb:5f:ff:5f:e8:30:55:78: 8d:de:53:3c:ab:d8:bc:3a:94:52:3b:2b:ef:de:52:2e:44:e0: 79:e3:92:56:a9:58:81:ba:63:e7:74:20:b3:ef:e5:25:6b:c5: b1:7d:d1:79:a6:05:ad:5c:f3:40:93:1c:90:15:8c:38:4a:1f: bb:a2:30:0c:ab:be:03:95:e1:46:44:37:20:bc:fa:20:63:a0: 80:85:08:39:67:a9:a6:67:24:15:74:9b:d7:03:9d:6c:46:3d: 17:eb:ad:2e:dd:a6:7d:d3:ee:76:5e:2c:b0:81:46:dc:1a:67: ff:2f:ca:68:d0:37:2e:2d:14:03:da:0f:0a:b0:fb:45:51:c0: 14:f4:64:20:f8:66:9b:13:6e:d1:36:84:7d:63:9c:4c:3d:3b: 96:17:85:8e:d3:50:e5:c0:21:43:e0:45:13:8b:59:e0:4c:d5: 5b:8a:97:10:ae:cb:d7:b9:71:c7:ee:61:21:7e:fa:ec:ca:a7: 9f:1a:e1:5a:b9:06:e4:35:d0:dd:18:44:3e:86:59:19:60:9e: 5b:fe:ea:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA3MjcwODA4NThaFw0yNTA4MDMwODA4NThaMBgxFjAUBgNV BAMTDTY4ODVkZTlhLTNkNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNvVMlSh7/V5qFI0+3NRMwsxP+Rdv0N8TLaAs4Z8kSEXsXHhx4YeX8PtsPpQh+ DPKuaQcR/skQI0aTNqlf+8sdwGIVob7H11pRPWFC6FA4H4BN5pyyqgcADjQVAX2u LAIFZexMDDcLA0EGAsUOgf7aUmSRoAC3GHE6S6CFE5VHvTa4vukLYlwZ5YdSpZaM cAAeeeuVGrIrk4LYcAY5bazTVHZK7UIHPILD8tH6mpmHw+itHy/G24bqPbTWHPFl mFutkSDWiQpemg6Tpd3+Q5dMQa1yHca0DI/DLFdL7Fk8VJHmv9jKZyusWW+4A9Is KdhiFg31vauA0Uy4pBhCpUbnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpjpKcv4z qDhYRTXfL/2Glpi+al8wHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwr73a6DZcBl6eMXT7dSKMAC03E50xoczZTUUdH7S4UPXnydPoSx6Mk v2RfgiLrX/9f6DBVeI3eUzyr2Lw6lFI7K+/eUi5E4HnjklapWIG6Y+d0ILPv5SVr xbF90XmmBa1c80CTHJAVjDhKH7uiMAyrvgOV4UZENyC8+iBjoICFCDlnqaZnJBV0 m9cDnWxGPRfrrS7dpn3T7nZeLLCBRtwaZ/8vymjQNy4tFAPaDwqw+0VRwBT0ZCD4 ZpsTbtE2hH1jnEw9O5YXhY7TUOXAIUPgRROLWeBM1VuKlxCuy9e5ccfuYSF++uzK p58a4Vq5BuQ10N0YRD6GWRlgnlv+6vs= -----END CERTIFICATE-----Generated at Mon Jul 28 22:33:46 2025 by rpki-client