$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: K4f5DDUm3cJaK4SMSK2zMPBZgiX7eW9RCy/np7INlMA= Subject key identifier: 7A:02:C4:5B:0B:A7:98:45:7F:9B:53:33:4E:79:D5:9D:56:36:D3:B1 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0957 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 094E Signing time: Thu 24 Jul 2025 20:22:08 +0000 Manifest this update: Thu 24 Jul 2025 20:22:08 +0000 Manifest next update: Thu 31 Jul 2025 20:22:08 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: VD0+O4lvaUz0rHeYmZEbwMzjUqgusjqeBiKqOYeUDTM=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 4ExF2O2Frz9RSsUL7YBwRkgASJlP9BcJdkByxRonGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Jul 24 20:22:08 2025 GMT Not After : Jul 31 20:22:08 2025 GMT Subject: CN=688295f0-6375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:76:f3:3c:79:88:d5:64:9d:7c:5a:88:3f: 06:90:b8:fd:12:71:be:af:d4:90:7c:f7:91:d8:06: 98:7d:ac:51:19:30:33:8e:7e:88:5d:20:d2:47:bf: e8:f4:6a:2f:25:d1:32:1d:31:24:c1:b8:c0:bf:07: 02:ad:b4:8d:0d:7b:20:ab:38:f3:63:80:7f:5a:f2: cf:f5:72:5c:24:23:a6:34:e3:51:af:f6:12:b0:f9: 63:f3:c4:89:61:45:3b:3f:fb:a4:b5:13:49:d4:d1: 6a:3b:c2:a6:aa:b7:e8:8e:ae:6d:15:84:cf:62:f2: de:d1:88:b3:7d:91:8e:70:98:d1:2d:50:b2:fc:44: a2:86:c8:28:93:f1:08:38:26:0d:59:0e:0c:e7:6e: 71:a3:b3:0c:6f:5a:53:f1:88:74:e6:d1:76:53:01: db:8a:ac:ed:55:e7:ca:f9:c0:27:ec:ef:d2:38:e5: ae:10:39:c5:d1:02:02:79:dd:6d:a0:60:2c:47:ce: 07:ca:b2:bc:fb:56:cd:ad:71:d1:7e:fb:3d:31:8f: d6:e6:fd:8f:1b:50:66:95:0e:c8:5c:4a:d0:fb:f8: 74:61:82:e6:af:1d:29:eb:ad:74:ed:b2:f3:d8:e0: 00:5c:94:2c:1e:7e:48:f0:a8:2a:0e:b1:cf:53:d8: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:C4:5B:0B:A7:98:45:7F:9B:53:33:4E:79:D5:9D:56:36:D3:B1 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:65:14:13:fd:85:16:1b:01:cd:39:6b:c9:3c:93:43:84:81: a9:ff:41:69:df:ea:e4:9b:3c:25:ba:07:64:8f:15:e7:52:f0: fe:e0:64:1c:36:f8:14:03:c9:91:76:6d:53:be:12:3b:ef:50: 54:88:24:e0:66:a5:a1:68:28:e7:12:2f:fe:d1:37:10:dc:33: d0:77:29:db:e9:70:d9:5f:4c:c3:c9:e1:b0:77:3f:c7:f9:31: 18:85:25:9b:8a:ed:e8:08:90:20:51:25:48:64:54:36:a5:bc: 39:77:a4:1e:32:30:17:ed:10:95:37:bc:b2:7c:2a:80:8d:be: b5:d3:69:d5:ad:15:5a:3f:30:87:03:0e:e0:28:47:33:e8:07: ed:ce:fa:d5:b3:49:e3:05:f4:be:db:b9:2b:ce:77:75:36:b3: 68:8a:e8:e3:44:62:46:d5:68:3e:50:82:35:a8:e0:58:97:e9: 52:75:31:d6:8f:07:a6:5f:b1:62:20:00:cd:d7:7b:cb:9e:86: 6e:41:48:54:46:64:32:b7:f8:17:f6:da:5f:6d:b4:42:fe:00: ee:88:23:a8:7a:4d:9d:da:0a:a4:bb:07:a4:f4:54:aa:e1:1f: 4b:28:b4:82:80:66:ec:f9:24:f3:d5:a6:f6:5e:13:4b:5f:8e: 12:31:62:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwNzI0MjAyMjA4WhcNMjUwNzMxMjAyMjA4WjAYMRYwFAYD VQQDEw02ODgyOTVmMC02Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5x28zx5iNVknXxaiD8GkLj9EnG+r9SQfPeR2AaYfaxRGTAzjn6IXSDSR7/o 9GovJdEyHTEkwbjAvwcCrbSNDXsgqzjzY4B/WvLP9XJcJCOmNONRr/YSsPlj88SJ YUU7P/uktRNJ1NFqO8Kmqrfojq5tFYTPYvLe0YizfZGOcJjRLVCy/ESihsgok/EI OCYNWQ4M525xo7MMb1pT8Yh05tF2UwHbiqztVefK+cAn7O/SOOWuEDnF0QICed1t oGAsR84HyrK8+1bNrXHRfvs9MY/W5v2PG1BmlQ7IXErQ+/h0YYLmrx0p66107bLz 2OAAXJQsHn5I8KgqDrHPU9iGsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoCxFsL p5hFf5tTM0551Z1WNtOxMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ZRQT/YUWGwHNOWvJPJNDhIGp/0Fp3+rkmzwlugdkjxXnUvD+4GQc NvgUA8mRdm1TvhI771BUiCTgZqWhaCjnEi/+0TcQ3DPQdynb6XDZX0zDyeGwdz/H +TEYhSWbiu3oCJAgUSVIZFQ2pbw5d6QeMjAX7RCVN7yyfCqAjb6102nVrRVaPzCH Aw7gKEcz6AftzvrVs0njBfS+27krznd1NrNoiujjRGJG1Wg+UII1qOBYl+lSdTHW jwemX7FiIADN13vLnoZuQUhURmQyt/gX9tpfbbRC/gDuiCOoek2d2gqkuwek9FSq 4R9LKLSCgGbs+STz1ab2XhNLX44SMWJ+ -----END CERTIFICATE-----Generated at Fri Jul 25 01:42:06 2025 by rpki-client