$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: 3LVQ0sLOtIcD2zEkrSA3FyjiyTV/uZOBc7jgyjSvemo= Subject key identifier: 5E:F1:36:D8:CE:F8:51:C7:7C:8F:4C:F4:CF:FB:C0:AC:19:0A:21:86 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0CB4 Signing time: Wed 10 Sep 2025 18:25:06 +0000 Manifest this update: Wed 10 Sep 2025 18:25:05 +0000 Manifest next update: Wed 17 Sep 2025 18:25:05 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: b8yqBX/KAF4e1BbHAFq4UJvpPDRePUjglm30i77bQUc=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: ntAPfFwqMwW/14nODr1Kka3t3flJTGPxOyia+rG6hsc=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Sep 10 18:25:05 2025 GMT Not After : Sep 17 18:25:05 2025 GMT Subject: CN=68c1c282-a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:9d:34:4a:70:e0:ef:fb:a6:93:57:3a:6c: 62:dc:4e:0d:b2:bf:64:71:44:c0:0b:9a:30:8a:98: cb:40:24:9a:c9:11:e8:1c:f8:ac:9a:96:5b:87:cd: e0:4b:f8:63:ca:25:18:10:79:dd:b5:37:6a:9c:72: ec:d8:94:7a:e7:8b:01:a4:e6:aa:b6:6b:dc:66:24: c0:6b:14:89:38:19:14:9b:27:b3:35:aa:e0:0b:3d: 1a:fe:4a:70:25:b7:29:d2:ed:9f:f7:d1:71:20:16: f4:f6:d1:7e:8b:62:ab:59:3e:97:23:f1:15:01:62: bd:b3:e5:9b:dd:84:8e:8b:52:98:3c:32:91:1f:d2: 22:3c:a3:78:c7:ee:71:58:8a:0e:9a:65:0a:1f:07: 54:e3:0c:f4:bd:b6:d5:24:00:d2:98:69:d4:1b:17: 1f:ec:f5:3a:00:32:50:fd:79:e1:e6:fd:e8:e0:d7: 38:14:6a:23:94:a0:6b:6a:0d:3e:36:46:d3:47:c5: 65:18:f4:2d:ed:9d:8b:ee:07:54:ef:07:3f:49:6a: 64:ad:c9:70:e7:5d:53:04:b4:0b:d6:62:85:a4:a0: 6f:52:8e:a0:c7:bb:76:0f:24:b4:db:f9:be:60:4f: 41:ef:05:88:d8:dd:29:21:38:18:a2:68:9a:bf:b4: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:36:D8:CE:F8:51:C7:7C:8F:4C:F4:CF:FB:C0:AC:19:0A:21:86 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:29:7a:66:c9:0f:a9:6c:1a:64:53:7d:56:18:82:19:76: 98:8f:41:41:bf:be:8a:9e:05:9b:2f:fd:87:ae:e8:a6:6e:13: 6c:78:2a:60:d5:32:6b:1a:a0:c0:89:64:21:04:d3:20:df:86: 48:46:bc:e5:a7:f2:c6:d0:5a:37:6d:62:53:45:e0:bc:3b:b4: 0e:07:2f:3f:29:b8:c2:c9:b8:ef:a3:14:c9:c6:24:6c:94:5a: f3:a5:dd:0e:30:81:d7:80:17:86:fc:41:c7:47:96:8e:af:02: ce:cb:7d:d0:ae:f5:ac:fe:91:63:25:4e:0b:7c:aa:11:d1:46: 0d:28:c1:d9:ee:3a:e3:29:57:af:79:62:4e:4d:83:77:20:34: 3e:6b:ee:05:8f:5a:4b:90:c9:96:bf:1c:df:d1:23:02:61:37: f5:e1:b0:7f:32:e8:ae:09:fd:0f:1f:6d:c5:66:c0:2e:62:1b: 37:ce:2f:d3:e9:2f:d1:52:f3:6f:45:b9:ca:f9:59:2d:c9:b1: 29:87:cc:93:bc:76:43:68:27:c2:2c:c2:c9:45:22:2f:b7:ea: 44:d8:ec:76:1a:42:d7:7d:06:e3:68:16:15:a9:88:65:40:f6: b2:81:4c:e1:14:3d:7f:a4:81:83:e5:3e:53:c2:be:23:a3:a4: dd:fc:a4:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUwOTEwMTgyNTA1WhcNMjUwOTE3MTgyNTA1WjAYMRYwFAYD VQQDEw02OGMxYzI4Mi1hNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lWdNEpw4O/7ppNXOmxi3E4Nsr9kcUTAC5owipjLQCSayRHoHPismpZbh83g S/hjyiUYEHndtTdqnHLs2JR654sBpOaqtmvcZiTAaxSJOBkUmyezNargCz0a/kpw Jbcp0u2f99FxIBb09tF+i2KrWT6XI/EVAWK9s+Wb3YSOi1KYPDKRH9IiPKN4x+5x WIoOmmUKHwdU4wz0vbbVJADSmGnUGxcf7PU6ADJQ/Xnh5v3o4Nc4FGojlKBrag0+ NkbTR8VlGPQt7Z2L7gdU7wc/SWpkrclw511TBLQL1mKFpKBvUo6gx7t2DyS02/m+ YE9B7wWI2N0pITgYomiav7QNdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7xNtjO +FHHfI9M9M/7wKwZCiGGMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHil6ZskPqWwaZFN9VhiCGXaYj0FBv76KngWbL/2HruimbhNseCpg 1TJrGqDAiWQhBNMg34ZIRrzlp/LG0Fo3bWJTReC8O7QOBy8/KbjCybjvoxTJxiRs lFrzpd0OMIHXgBeG/EHHR5aOrwLOy33QrvWs/pFjJU4LfKoR0UYNKMHZ7jrjKVev eWJOTYN3IDQ+a+4Fj1pLkMmWvxzf0SMCYTf14bB/MuiuCf0PH23FZsAuYhs3zi/T 6S/RUvNvRbnK+VktybEph8yTvHZDaCfCLMLJRSIvt+pE2Ox2GkLXfQbjaBYVqYhl QPaygUzhFD1/pIGD5T5Twr4jo6Td/KTk -----END CERTIFICATE-----Generated at Thu Sep 11 01:27:13 2025 by rpki-client