$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: ljpi2EpJBhaRy8rkLVvAnLs+mMZfgHW1f4x/huFnobs= Subject key identifier: AD:67:19:C7:83:DA:50:78:67:C9:44:C6:C5:DC:60:D8:FC:85:F7:F9 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A2A Signing time: Sun 20 Jul 2025 15:36:40 +0000 Manifest this update: Sun 20 Jul 2025 15:36:39 +0000 Manifest next update: Sun 27 Jul 2025 15:36:39 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: K03T7nd8N5O+bttPKK+6FbRJwixse5/uRRtT/wdGzXo=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10837 (0x2a55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Jul 20 15:36:39 2025 GMT Not After : Jul 27 15:36:39 2025 GMT Subject: CN=687d0d07-32d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:6b:76:4b:ca:aa:7f:e0:67:3d:d6:47:16: 52:69:9e:49:7c:3b:30:30:94:61:ee:19:3c:35:35: 07:c1:f3:50:6f:79:aa:98:e6:42:ac:30:41:12:15: f5:07:76:f5:f5:71:9f:ef:fd:0e:e3:50:f7:89:d9: fc:55:de:b6:99:bc:20:7c:2d:4f:44:a4:02:5f:3f: 71:2a:6a:d6:09:e0:6f:f5:bb:3b:c3:68:c5:ad:7a: be:3e:b3:dd:8b:53:40:be:d3:a2:a5:1f:6f:cc:7e: 38:66:ea:7c:5d:e2:8e:2a:b4:8c:dd:74:fb:8c:6e: c7:16:a9:84:bb:20:da:85:65:9a:e4:1b:e4:67:67: 4e:33:b5:f3:d6:80:ff:82:8d:df:94:4d:90:49:78: 11:0c:fb:49:1d:68:b3:81:ee:93:76:56:1d:d6:fd: 88:26:57:6b:96:29:1f:aa:c8:79:6f:f9:f1:41:9e: 8c:c0:b4:60:36:63:03:e4:20:59:fd:5f:0e:aa:f6: 94:ea:98:79:c8:3d:4e:af:09:92:93:ff:ad:28:02: a9:8e:17:1b:cb:1f:c2:7a:06:87:b0:fc:a5:15:ff: 4d:0d:7d:16:6f:ac:c4:15:de:89:49:ec:1a:d9:c1: 4c:16:76:5c:79:8c:58:04:5d:99:17:e1:fc:91:59: e3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:67:19:C7:83:DA:50:78:67:C9:44:C6:C5:DC:60:D8:FC:85:F7:F9 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4b:eb:fa:70:8c:2c:d6:7a:93:a9:0b:b1:25:b2:5c:35:7d: 1c:62:1b:1f:9b:6e:5e:98:a1:97:02:94:9e:a2:ff:67:e6:d9: b1:7e:ca:d1:c5:45:44:09:b2:9a:b3:c2:55:82:f4:92:36:d9: a9:2d:57:bc:46:67:38:7d:3a:8c:5c:4e:8b:98:02:59:34:a9: 00:d5:70:40:74:c6:b0:a4:a7:3c:80:c5:24:57:25:22:47:6e: 06:f2:e8:1d:f0:5a:f1:3e:0f:27:df:4e:25:e7:60:8c:cb:4d: f3:76:8a:fb:56:88:65:e8:6f:1c:97:e0:bf:ea:69:c6:c6:ec: 38:c0:aa:16:c4:a4:a9:60:e7:8f:52:0b:53:80:de:5b:f7:b7: 26:41:e5:39:9d:e4:2d:78:34:72:5a:e4:fc:df:ea:37:27:27: d5:a1:b0:5b:d1:ed:8f:6b:15:48:67:94:18:d2:40:ed:28:91: ba:7a:3b:c9:09:c6:f2:0d:02:8a:2b:c6:b5:78:e3:93:ad:1a: 16:72:62:10:90:d0:af:cd:6f:a4:20:01:e7:ad:1d:ed:5d:6d: 37:cb:7e:6c:41:8e:06:b2:9c:45:45:a9:a0:94:cb:95:2c:97: 1f:a6:61:59:a5:98:cb:96:a9:8a:fe:30:c5:fd:51:65:58:24: 29:d2:fe:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwNzIwMTUzNjM5WhcNMjUwNzI3MTUzNjM5WjAYMRYwFAYD VQQDEw02ODdkMGQwNy0zMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xlrdkvKqn/gZz3WRxZSaZ5JfDswMJRh7hk8NTUHwfNQb3mqmOZCrDBBEhX1 B3b19XGf7/0O41D3idn8Vd62mbwgfC1PRKQCXz9xKmrWCeBv9bs7w2jFrXq+PrPd i1NAvtOipR9vzH44Zup8XeKOKrSM3XT7jG7HFqmEuyDahWWa5BvkZ2dOM7Xz1oD/ go3flE2QSXgRDPtJHWizge6TdlYd1v2IJldrlikfqsh5b/nxQZ6MwLRgNmMD5CBZ /V8OqvaU6ph5yD1OrwmSk/+tKAKpjhcbyx/CegaHsPylFf9NDX0Wb6zEFd6JSewa 2cFMFnZceYxYBF2ZF+H8kVnjwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1nGceD 2lB4Z8lExsXcYNj8hff5MB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMS+v6cIws1nqTqQuxJbJcNX0cYhsfm25emKGXApSeov9n5tmxfsrR xUVECbKas8JVgvSSNtmpLVe8Rmc4fTqMXE6LmAJZNKkA1XBAdMawpKc8gMUkVyUi R24G8ugd8FrxPg8n304l52CMy03zdor7Vohl6G8cl+C/6mnGxuw4wKoWxKSpYOeP UgtTgN5b97cmQeU5neQteDRyWuT83+o3JyfVobBb0e2PaxVIZ5QY0kDtKJG6ejvJ CcbyDQKKK8a1eOOTrRoWcmIQkNCvzW+kIAHnrR3tXW03y35sQY4GspxFRamglMuV LJcfpmFZpZjLlqmK/jDF/VFlWCQp0v7M -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:16 2025 by rpki-client