$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: cZw0JJTi0W8LszQLfaE0qCJr8b6QqGd1STochKciLPw= Subject key identifier: FA:F4:D6:66:0E:53:7A:5D:5B:3C:3F:32:FF:F9:52:80:8C:78:F3:6A Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0260 Signing time: Mon 21 Jul 2025 02:04:49 +0000 Manifest this update: Mon 21 Jul 2025 02:04:49 +0000 Manifest next update: Mon 28 Jul 2025 02:04:49 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: bEt418Jgczncz6pKzo5YKtW8Ru3aInAm2XzY+ze5VBg=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Jul 21 02:04:49 2025 GMT Not After : Jul 28 02:04:49 2025 GMT Subject: CN=687da041-d206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:56:a2:b9:e1:76:14:9a:6a:a2:36:0d:b4: 2d:60:40:a0:d6:55:76:45:2b:bc:bc:af:3b:8e:69: 51:9c:f7:f0:b5:80:0d:95:04:bd:bb:2f:73:5f:a8: df:29:e3:a4:32:bd:a0:c1:ee:d9:ea:e5:fb:33:53: 50:f5:cb:d3:cc:25:a9:2b:4f:24:87:0c:22:44:07: 81:e5:7a:59:a0:1b:a9:0c:63:05:b5:85:07:d6:ca: 56:59:06:b6:16:fe:40:4f:9c:e2:45:45:d1:b1:b8: 25:c5:1f:22:1d:a7:ce:6b:ad:f9:61:b1:7c:52:e7: 00:42:8d:30:1e:ab:54:82:de:0a:99:d2:3c:7f:8a: 9e:76:90:7e:90:3a:c0:b0:36:c0:4c:0f:d6:62:14: 7e:73:54:a7:16:87:90:33:23:3e:e5:2f:e9:8a:a1: 99:df:23:06:dc:2a:f3:a8:04:c6:6e:09:16:57:2b: 5e:fc:c1:fb:a9:a0:94:c9:72:e4:64:82:ae:9b:2b: ff:c2:df:24:54:e1:94:ab:c7:f5:cb:55:11:54:5d: c6:14:59:33:af:ae:db:51:18:40:cf:80:d4:5e:c3: 58:f9:44:6e:16:27:da:c9:da:85:9b:5a:32:66:05: 14:ef:94:f8:7e:da:6c:73:91:c4:9b:87:b3:73:cd: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:D6:66:0E:53:7A:5D:5B:3C:3F:32:FF:F9:52:80:8C:78:F3:6A X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bb:e1:4a:f0:d7:13:c2:62:78:82:50:22:02:05:32:78:3f: 81:31:7d:74:55:d8:91:45:03:2f:73:e2:3f:78:7b:cc:0e:6e: f7:ee:96:c2:67:44:12:73:ba:c2:b3:69:2f:d2:e1:d6:03:bd: 13:45:57:69:b4:cb:f8:9e:7e:d7:6e:74:f4:57:9c:6f:22:05: 44:3a:71:ec:a1:66:3e:2b:e6:f6:b8:2c:5c:99:28:8b:4a:50: 66:b6:c8:68:4e:2d:31:b9:bf:2b:51:c5:55:94:4c:10:c4:c1: 8d:e3:23:d0:ee:f2:12:ff:d4:5c:1e:bd:9d:62:b7:70:6e:63: 34:e4:d7:3e:61:21:2e:9d:b6:93:dd:2e:e7:e3:46:b0:79:7f: 85:bf:1d:ff:02:db:18:06:27:12:86:7c:92:82:6b:67:29:c2: cc:c3:32:48:25:77:58:80:de:9f:1e:ba:49:49:f7:26:86:a8: 4b:49:6f:2a:a7:a4:d3:5a:42:e1:de:56:ba:38:59:7f:a2:11: 3d:28:d2:bc:2e:76:da:6d:a1:69:bb:6d:e1:50:45:86:41:f5: ba:f5:1c:e8:cd:39:33:25:9f:4c:1b:11:23:b2:92:93:95:4c: 65:bc:b6:47:8d:d2:95:38:ee:3e:bf:b6:a7:ab:51:1e:87:37: 1c:97:51:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUwNzIxMDIwNDQ5WhcNMjUwNzI4MDIwNDQ5WjAYMRYwFAYD VQQDEw02ODdkYTA0MS1kMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ltWornhdhSaaqI2DbQtYECg1lV2RSu8vK87jmlRnPfwtYANlQS9uy9zX6jf KeOkMr2gwe7Z6uX7M1NQ9cvTzCWpK08khwwiRAeB5XpZoBupDGMFtYUH1spWWQa2 Fv5AT5ziRUXRsbglxR8iHafOa635YbF8UucAQo0wHqtUgt4KmdI8f4qedpB+kDrA sDbATA/WYhR+c1SnFoeQMyM+5S/piqGZ3yMG3CrzqATGbgkWVyte/MH7qaCUyXLk ZIKumyv/wt8kVOGUq8f1y1URVF3GFFkzr67bURhAz4DUXsNY+URuFifaydqFm1oy ZgUU75T4ftpsc5HEm4ezc811nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr01mYO U3pdWzw/Mv/5UoCMePNqMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVu+FK8NcTwmJ4glAiAgUyeD+BMX10VdiRRQMvc+I/eHvMDm737pbC Z0QSc7rCs2kv0uHWA70TRVdptMv4nn7XbnT0V5xvIgVEOnHsoWY+K+b2uCxcmSiL SlBmtshoTi0xub8rUcVVlEwQxMGN4yPQ7vIS/9RcHr2dYrdwbmM05Nc+YSEunbaT 3S7n40aweX+Fvx3/AtsYBicShnySgmtnKcLMwzJIJXdYgN6fHrpJSfcmhqhLSW8q p6TTWkLh3la6OFl/ohE9KNK8LnbabaFpu23hUEWGQfW69RzozTkzJZ9MGxEjspKT lUxlvLZHjdKVOO4+v7anq1Eehzccl1Fc -----END CERTIFICATE-----Generated at Wed Jul 23 02:21:11 2025 by rpki-client