$ rpki-client -vvf rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft File: 2CVmixrBt_OBXwe82lfnSMSWSpo.mft (raw, json) Hash identifier: bqFUTWtTamYjr3RuA3cO97mUVT9AKmSI0wyJ8Ye1EgE= Subject key identifier: A8:18:08:98:86:05:6B:A9:F8:1C:5D:2A:FB:6B:0F:90:38:7E:D3:76 Authority key identifier: D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A Certificate issuer: /CN=A91756C3/serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft Manifest number: 57 Signing time: Mon 21 Jul 2025 07:21:52 +0000 Manifest this update: Mon 21 Jul 2025 07:21:51 +0000 Manifest next update: Mon 28 Jul 2025 07:21:51 +0000 Files and hashes: 1: 2CVmixrBt_OBXwe82lfnSMSWSpo.crl (hash: 4QNVpw3XE5fx5SiiNCVumo3vCohJLOgVIysEMtiL4N8=) 2: 00078764E06811EF8716401DC4F9AE02.roa (hash: xskJHyJy9wOT0np+Xdp4jl5Zejz4/7Uevmd8xiyRBK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756C3, serialNumber=D825668B1AC1B7F3815F07BCDA57E748C4964A9A Validity Not Before: Jul 21 07:21:51 2025 GMT Not After : Jul 28 07:21:51 2025 GMT Subject: CN=687dea90-8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:ab:ab:c2:40:57:72:c0:28:a5:31:a7:0f: a9:8e:ee:91:83:ab:b5:38:4c:78:7c:93:23:5d:ad: 6e:b1:f5:1b:e6:2d:ff:61:46:1c:5b:f8:35:e5:7e: 44:04:9d:5f:c8:ca:d7:ef:8f:a3:c8:81:4b:49:de: c9:ba:be:fe:1f:52:20:02:89:c3:d3:63:2b:df:67: 11:0c:68:d3:bc:e2:ea:38:ab:8b:9c:1c:02:db:16: db:b6:71:4c:02:00:20:c1:b9:0d:ba:fe:d4:56:73: fc:bb:4d:3b:ea:8d:e2:0a:db:cf:3c:66:37:a7:d6: 48:37:c3:b4:d3:d4:ba:33:af:42:2e:6b:ab:46:58: 8c:80:84:c6:c6:95:32:4a:5e:2d:4f:be:d3:ae:bb: 6a:76:82:36:89:a0:60:50:f7:14:c5:9b:98:ba:25: d5:a9:73:e9:d2:96:ba:b3:c6:3c:c1:17:f9:c3:e0: 09:aa:25:d8:8d:89:8f:47:c1:68:59:24:31:fc:0a: 80:37:dc:d4:45:8b:df:42:5a:b2:8f:7c:3b:d6:7d: 54:da:8e:68:34:f9:c8:de:8b:4c:e5:73:9f:d2:ef: 57:be:b4:2f:2f:fc:50:3e:5b:0e:24:3b:25:db:7e: c9:6c:ea:d4:e7:f1:c4:8f:5e:19:32:ad:2b:ce:7a: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:18:08:98:86:05:6B:A9:F8:1C:5D:2A:FB:6B:0F:90:38:7E:D3:76 X509v3 Authority Key Identifier: keyid:D8:25:66:8B:1A:C1:B7:F3:81:5F:07:BC:DA:57:E7:48:C4:96:4A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CVmixrBt_OBXwe82lfnSMSWSpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756C3/5BF5192AE06711EFBC3D171BC4F9AE02/2CVmixrBt_OBXwe82lfnSMSWSpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f1:b7:75:60:44:c1:b5:74:93:71:7c:66:40:ee:ab:d8:0c: 62:8c:1f:27:31:e0:63:b0:b2:b0:86:da:e2:5f:a1:97:02:85: a7:ed:11:08:a0:e6:8f:b4:8b:5d:99:86:f3:45:a3:72:6d:76: 84:53:0e:33:bd:74:50:87:66:45:8a:9a:5c:6f:ae:75:47:cd: 39:8d:76:90:52:78:bb:22:67:17:06:52:e9:f8:34:0a:10:87: fb:fb:9c:bd:22:c4:2e:fb:dc:fe:38:98:df:e0:e7:d7:19:a9: e8:6e:a0:35:26:3f:ae:6a:ca:5c:60:eb:af:85:75:74:f6:b5: 01:95:3c:96:d8:4a:4d:a4:06:2e:e7:98:fa:c1:a8:d5:1c:92: 0f:ec:cf:13:02:75:fb:43:ab:a0:06:ee:9f:3a:74:19:dd:43: cf:5b:e7:c6:c1:9d:29:d3:bf:72:57:36:2f:d6:aa:bb:8f:8c: 7e:54:55:80:cb:98:73:25:13:46:f4:14:3a:92:ac:d9:0e:03: 97:e6:d3:22:78:18:c4:20:05:a7:f8:97:ac:26:43:61:c1:6d: 9d:8b:ca:eb:06:22:55:10:25:92:df:a2:e1:eb:35:f1:8f:30: be:81:2a:3a:3e:9c:25:94:44:df:16:3b:34:7d:90:c8:03:ef: da:a6:1e:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTZDMzExMC8GA1UEBRMoRDgyNTY2OEIxQUMxQjdGMzgxNUYwN0JDREE1N0U3NDhD NDk2NEE5QTAeFw0yNTA3MjEwNzIxNTFaFw0yNTA3MjgwNzIxNTFaMBgxFjAUBgNV BAMTDTY4N2RlYTkwLTgzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ4qurwkBXcsAopTGnD6mO7pGDq7U4THh8kyNdrW6x9RvmLf9hRhxb+DXlfkQE nV/Iytfvj6PIgUtJ3sm6vv4fUiACicPTYyvfZxEMaNO84uo4q4ucHALbFtu2cUwC ACDBuQ26/tRWc/y7TTvqjeIK2888Zjen1kg3w7TT1Lozr0Iua6tGWIyAhMbGlTJK Xi1PvtOuu2p2gjaJoGBQ9xTFm5i6JdWpc+nSlrqzxjzBF/nD4AmqJdiNiY9HwWhZ JDH8CoA33NRFi99CWrKPfDvWfVTajmg0+cjei0zlc5/S71e+tC8v/FA+Ww4kOyXb fsls6tTn8cSPXhkyrSvOekfhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqBgImIYF a6n4HF0q+2sPkDh+03YwHwYDVR0jBBgwFoAU2CVmixrBt/OBXwe82lfnSMSWSpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NkMzLzVCRjUxOTJBRTA2 NzExRUZCQzNEMTcxQkM0RjlBRTAyLzJDVm1peHJCdF9PQlh3ZTgybGZuU01TV1Nw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkNWbWl4ckJ0X09CWHdlODJsZm5TTVNXU3BvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 NkMzLzVCRjUxOTJBRTA2NzExRUZCQzNEMTcxQkM0RjlBRTAyLzJDVm1peHJCdF9P Qlh3ZTgybGZuU01TV1Nwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/xt3VgRMG1dJNxfGZA7qvYDGKMHycx4GOwsrCG2uJfoZcChaftEQig 5o+0i12ZhvNFo3JtdoRTDjO9dFCHZkWKmlxvrnVHzTmNdpBSeLsiZxcGUun4NAoQ h/v7nL0ixC773P44mN/g59cZqehuoDUmP65qylxg66+FdXT2tQGVPJbYSk2kBi7n mPrBqNUckg/szxMCdftDq6AG7p86dBndQ89b58bBnSnTv3JXNi/WqruPjH5UVYDL mHMlE0b0FDqSrNkOA5fm0yJ4GMQgBaf4l6wmQ2HBbZ2LyusGIlUQJZLfouHrNfGP ML6BKjo+nCWURN8WOzR9kMgD79qmHtA= -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:07 2025 by rpki-client