$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: CTVijSpindrTHfs8LwYGVgjqFTDdiZwSMZ3ddTXWeB0= Subject key identifier: 5E:FA:5C:22:E4:69:FB:D8:3F:2D:4B:47:D5:86:FE:EC:99:31:DD:AF Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E0C Signing time: Tue 22 Jul 2025 18:01:02 +0000 Manifest this update: Tue 22 Jul 2025 18:01:01 +0000 Manifest next update: Tue 29 Jul 2025 18:01:01 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: CTXdjCOmxOXq9MIdTvE/F0H40sRtRPBcC496JkuMaUI=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3621 (0xe25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Jul 22 18:01:01 2025 GMT Not After : Jul 29 18:01:01 2025 GMT Subject: CN=687fd1de-068c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:b2:c5:58:6b:f9:ac:1e:b3:e7:97:65:0a: 11:57:96:7f:9d:5f:8b:c5:33:de:7f:d1:40:d3:68: 82:95:8b:e2:02:12:3d:69:0a:d6:79:34:30:4f:0d: 67:e7:0d:ba:e3:c6:02:1c:be:1c:51:2f:5c:6d:b9: 75:c1:c5:37:03:2b:e8:f6:91:e6:fd:b7:a9:4b:cc: 61:9e:b7:00:b3:26:e8:09:59:f7:9d:64:fa:79:6c: 1e:17:a4:33:53:d9:4e:52:46:26:06:fc:0b:8c:a3: b2:14:3d:ae:b9:cf:2b:28:6e:2a:eb:5d:08:19:08: f2:03:8f:b6:64:66:e6:ba:c4:bf:a0:8f:18:c6:8a: 4b:64:4b:2f:42:93:a3:53:59:75:75:b1:30:10:1f: 7f:aa:83:38:5f:56:32:b1:aa:bc:56:44:bb:26:c3: c6:19:7a:b0:22:ae:85:b2:17:65:1d:4c:c7:84:a7: 15:5a:5b:1b:cd:c0:e4:df:54:66:4f:6d:46:0d:24: 6c:4b:57:fc:fd:12:96:6c:3f:f5:c9:66:03:03:d8: 0d:af:14:ef:cb:2c:3e:37:5e:4a:18:08:f6:e2:9c: a2:91:0d:dc:1c:84:b4:50:75:6c:2a:62:39:3a:20: 1f:66:af:ac:57:27:5f:9b:ce:5a:cd:f7:f6:65:55: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:5C:22:E4:69:FB:D8:3F:2D:4B:47:D5:86:FE:EC:99:31:DD:AF X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c0:cc:29:8d:c7:5d:d9:90:bc:2f:72:c5:87:54:74:2c:16: d2:11:41:0e:e9:4e:04:09:78:0a:e8:5c:00:85:d7:4e:ea:0e: 34:88:a7:40:1b:61:8a:15:47:43:df:5e:32:b9:e0:d8:39:cd: 7a:c2:3f:87:9e:76:8b:67:98:0d:21:c1:6f:c6:23:0e:85:89: 19:0e:dd:17:ce:0f:b7:69:d0:06:17:dd:7b:5d:cb:25:61:8b: 5d:49:d6:ae:96:3a:e9:6a:1a:84:ad:c7:3a:59:00:8b:7e:e4: c2:d4:1d:e2:67:28:f6:a7:c1:f3:89:77:1c:02:39:4f:73:69: ea:a9:e8:82:38:a4:68:11:fc:86:28:3d:ee:ae:34:28:14:66: c7:fc:66:8e:c3:ba:e3:6b:50:6f:21:ac:57:11:fa:5b:1e:93: 65:49:fc:ab:1e:32:d9:59:a9:d4:26:b3:b7:21:6c:6a:56:00: dd:b8:26:80:2e:70:3b:2f:f1:9d:4d:83:04:ea:58:50:21:20: a7:29:15:23:10:17:fa:57:d1:93:3f:90:ad:13:9e:da:f8:11: 14:1f:07:86:2f:d4:6e:7c:4b:25:90:46:6a:a3:e1:6a:96:6f: 8b:65:d8:1d:16:06:93:d1:a3:9d:aa:d8:7c:14:cd:f5:a2:3b: be:44:86:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUwNzIyMTgwMTAxWhcNMjUwNzI5MTgwMTAxWjAYMRYwFAYD VQQDEw02ODdmZDFkZS0wNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyqyxVhr+awes+eXZQoRV5Z/nV+LxTPef9FA02iClYviAhI9aQrWeTQwTw1n 5w2648YCHL4cUS9cbbl1wcU3Ayvo9pHm/bepS8xhnrcAsyboCVn3nWT6eWweF6Qz U9lOUkYmBvwLjKOyFD2uuc8rKG4q610IGQjyA4+2ZGbmusS/oI8YxopLZEsvQpOj U1l1dbEwEB9/qoM4X1Yysaq8VkS7JsPGGXqwIq6FshdlHUzHhKcVWlsbzcDk31Rm T21GDSRsS1f8/RKWbD/1yWYDA9gNrxTvyyw+N15KGAj24pyikQ3cHIS0UHVsKmI5 OiAfZq+sVydfm85azff2ZVU8+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF76XCLk afvYPy1LR9WG/uyZMd2vMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2wMwpjcdd2ZC8L3LFh1R0LBbSEUEO6U4ECXgK6FwAhddO6g40iKdA G2GKFUdD314yueDYOc16wj+HnnaLZ5gNIcFvxiMOhYkZDt0Xzg+3adAGF917Xcsl YYtdSdauljrpahqErcc6WQCLfuTC1B3iZyj2p8HziXccAjlPc2nqqeiCOKRoEfyG KD3urjQoFGbH/GaOw7rja1BvIaxXEfpbHpNlSfyrHjLZWanUJrO3IWxqVgDduCaA LnA7L/GdTYME6lhQISCnKRUjEBf6V9GTP5CtE57a+BEUHweGL9RufEslkEZqo+Fq lm+LZdgdFgaT0aOdqth8FM31oju+RIZ4 -----END CERTIFICATE-----Generated at Wed Jul 23 23:52:21 2025 by rpki-client