$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: 2U1AHFYWFqZiVe4gI7DSWYOrkjYtYuy7BDGuCoeWxoI= Subject key identifier: 32:2E:3A:7F:BD:75:D1:62:E4:EC:99:8C:BC:52:EC:6E:A1:50:DB:51 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0261 Signing time: Wed 23 Jul 2025 02:15:15 +0000 Manifest this update: Wed 23 Jul 2025 02:15:14 +0000 Manifest next update: Wed 30 Jul 2025 02:15:14 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: mnTRM1DEW6yPoHjxy/fZpypLynPzkOavnR5RY1c9F38=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Jul 23 02:15:14 2025 GMT Not After : Jul 30 02:15:14 2025 GMT Subject: CN=688045b3-c702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:ed:77:28:9f:50:c4:7e:58:cc:63:a1:9b: d9:6e:bc:d7:7e:27:d7:24:05:7b:f2:3a:67:36:95: 02:19:a3:ca:e6:71:20:35:c6:8a:e6:a3:48:07:57: 6d:05:28:fc:47:de:46:ec:2c:ba:70:73:29:24:a7: 62:84:9e:ca:b9:ba:3c:5f:23:42:39:2b:ba:f8:22: 94:84:39:22:ad:f4:25:ca:76:25:93:0b:41:59:b1: e1:96:43:fe:2d:7c:4e:0b:cb:0e:3b:b5:00:61:3e: ed:27:b4:51:d4:11:87:44:82:91:8b:6f:6d:53:78: 07:ff:fa:9c:d5:69:1d:25:cf:d8:ad:15:9c:01:b2: 45:1e:fd:65:83:5c:d4:cf:5f:33:c5:a9:2d:79:d3: 75:03:17:f7:3c:40:de:6a:4c:74:1a:8d:20:f2:b1: a7:c5:3f:a2:ba:91:68:a3:6e:9d:19:28:b9:7f:a5: 90:41:82:9a:7b:8d:6f:95:8e:01:49:0c:74:2a:52: d1:cb:c9:fd:9c:a6:96:80:75:40:c9:9d:91:04:fe: f6:46:f1:b7:69:39:2c:3b:48:d0:cc:6b:04:d3:a9: 16:da:10:47:a7:2e:ea:b8:35:62:59:39:07:d4:b1: 91:a4:c4:d1:59:f3:bd:e0:68:34:28:44:24:29:14: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:3A:7F:BD:75:D1:62:E4:EC:99:8C:BC:52:EC:6E:A1:50:DB:51 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:1e:4e:b1:c1:e6:13:ea:09:96:82:35:7c:58:a3:c1:2b: 95:08:1d:8c:3d:e7:33:60:7f:e2:ac:28:6c:ee:f9:4c:9e:e3: c4:07:f2:39:16:af:d1:a6:57:66:2d:a0:33:ad:f9:e3:16:23: 8b:b9:ca:08:db:a6:1a:fa:a1:d3:1a:f4:66:ff:bf:ad:8c:44: 92:48:35:4d:38:a4:d3:93:15:f4:4f:78:f4:dc:78:9a:1d:af: 14:4b:be:44:a2:1a:c5:d2:9e:6f:8e:a0:72:4b:8d:be:7f:85: ec:e7:99:2a:0d:c9:79:aa:e4:bf:c2:f7:16:d6:55:d1:9d:5d: 85:c0:5e:85:47:82:88:4f:07:ca:db:ef:f1:f7:d3:c1:bf:ad: f7:cb:34:0f:fd:73:5f:c2:c7:11:95:b6:24:34:7a:eb:40:4d: dc:cf:d6:9d:44:36:2f:de:27:11:14:15:2b:e4:5c:93:d3:4d: 0e:a2:62:d3:52:da:15:ab:97:c2:c5:7a:93:94:81:f3:3a:ab: a0:d0:69:fb:96:6c:fc:a9:2c:00:af:a1:55:11:85:07:bc:f8: 5b:5b:8a:39:8f:82:c0:58:66:6e:7e:d9:48:7e:ad:ba:63:00: d3:b9:ad:b8:e4:ed:39:38:ce:b3:b9:ef:d1:cc:3d:dc:bc:86: 73:cf:68:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUwNzIzMDIxNTE0WhcNMjUwNzMwMDIxNTE0WjAYMRYwFAYD VQQDEw02ODgwNDViMy1jNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLntdyifUMR+WMxjoZvZbrzXfifXJAV78jpnNpUCGaPK5nEgNcaK5qNIB1dt BSj8R95G7Cy6cHMpJKdihJ7Kubo8XyNCOSu6+CKUhDkirfQlynYlkwtBWbHhlkP+ LXxOC8sOO7UAYT7tJ7RR1BGHRIKRi29tU3gH//qc1WkdJc/YrRWcAbJFHv1lg1zU z18zxaktedN1Axf3PEDeakx0Go0g8rGnxT+iupFoo26dGSi5f6WQQYKae41vlY4B SQx0KlLRy8n9nKaWgHVAyZ2RBP72RvG3aTksO0jQzGsE06kW2hBHpy7quDViWTkH 1LGRpMTRWfO94Gg0KEQkKRRIEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIuOn+9 ddFi5OyZjLxS7G6hUNtRMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY2R5OscHmE+oJloI1fFijwSuVCB2MPeczYH/irChs7vlMnuPEB/I5 Fq/RpldmLaAzrfnjFiOLucoI26Ya+qHTGvRm/7+tjESSSDVNOKTTkxX0T3j03Hia Ha8US75EohrF0p5vjqByS42+f4Xs55kqDcl5quS/wvcW1lXRnV2FwF6FR4KITwfK 2+/x99PBv633yzQP/XNfwscRlbYkNHrrQE3cz9adRDYv3icRFBUr5FyT000OomLT UtoVq5fCxXqTlIHzOqug0Gn7lmz8qSwAr6FVEYUHvPhbW4o5j4LAWGZuftlIfq26 YwDTua245O05OM6zue/RzD3cvIZzz2hX -----END CERTIFICATE-----Generated at Thu Jul 24 12:24:01 2025 by rpki-client