$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: GQJ1/6hUL2HOZr4OtJ+qpkm0JexRA/CU2vUXsekRwaQ= Subject key identifier: AF:F7:FA:CF:60:6F:F6:36:EE:89:7E:55:90:72:44:32:D1:05:F6:27 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 0453 Signing time: Sat 19 Jul 2025 00:37:42 +0000 Manifest this update: Sat 19 Jul 2025 00:37:41 +0000 Manifest next update: Sat 26 Jul 2025 00:37:41 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: d1swYPHuSdHXB+Haf9v7Wyb55w1bEX0vS0DE5Vy0RuU=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Jul 19 00:37:41 2025 GMT Not After : Jul 26 00:37:41 2025 GMT Subject: CN=687ae8d6-97ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:0d:f1:2d:a3:a3:7f:01:83:32:dd:5d:55: 2d:87:c3:3b:01:fb:88:14:2c:6a:6b:6d:d3:8b:3b: e3:61:72:97:fd:a8:cc:3c:ad:ae:22:e1:bd:18:d2: 47:eb:0c:5d:1f:21:af:b6:3c:92:99:d9:45:f5:f3: 85:1c:a4:44:dd:1d:5a:a8:80:a4:f5:c5:90:bd:9d: ce:7e:81:e8:62:76:c6:ec:f2:e8:6c:89:fc:fe:cc: 78:6d:0b:2c:f1:32:8c:14:a5:f4:13:62:49:bf:0d: 7e:d0:8f:b0:cd:21:16:ba:57:b0:39:71:b2:d9:88: 7b:59:73:d8:d4:ec:51:71:9f:6f:06:53:ed:73:b0: db:e6:8f:95:74:2c:a4:11:7c:f9:a2:2b:1b:64:68: 89:d4:0b:bf:65:53:f8:96:03:7a:40:c1:4a:ed:07: 45:1c:b7:c7:d6:f1:fa:1c:3a:a9:7c:ad:f5:84:a8: 9b:9b:2f:19:e1:5c:be:17:c0:88:47:6a:1b:70:38: ec:54:34:ac:55:bf:dc:99:0a:55:5c:6d:ff:5c:07: f0:a0:dc:6e:88:7d:24:6f:f6:12:da:f9:62:de:17: ac:f3:1a:ca:d2:dc:26:54:8b:85:5d:0e:ce:f0:78: a4:35:c0:56:21:20:8a:34:c1:80:99:a6:a1:88:7e: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F7:FA:CF:60:6F:F6:36:EE:89:7E:55:90:72:44:32:D1:05:F6:27 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a0:ed:13:8b:36:ab:54:db:86:3f:ba:ef:22:c0:ac:3c:e4: 28:35:8c:6d:4c:47:83:e0:04:ed:c6:15:ea:16:72:d4:de:ab: a1:0c:11:a9:22:60:65:b0:92:aa:35:d3:25:e0:e1:d4:91:44: 02:55:4a:9c:53:6f:6a:b3:d2:ab:9e:b9:3a:61:c1:79:6f:2d: 7e:61:8e:2c:f8:21:7f:24:ba:51:54:37:9c:64:85:fd:a3:45: 6f:bc:43:a6:cb:3a:62:c2:a6:29:2d:88:26:6a:f1:12:78:02: 3f:10:52:5a:3f:9c:41:fa:d8:13:be:37:00:91:74:39:fb:7a: 21:f7:9d:85:6b:5a:6a:59:c0:20:39:2e:ed:06:c2:a0:61:1a: 2c:6a:b4:ff:d2:83:8c:33:68:c1:3e:04:55:93:07:f5:ea:d1: 94:29:03:5d:d8:85:71:21:7a:f8:0e:ed:9b:82:42:84:8a:55: e4:85:97:69:ce:6e:58:62:ba:1f:97:d9:c5:31:21:3f:30:5f: 67:89:4c:aa:7d:54:f9:f8:fe:5b:1a:33:2e:90:87:13:d9:9e: 3f:58:f8:63:bd:01:f5:55:f4:e7:e4:6b:36:32:89:16:89:7f: fa:d5:16:2e:01:ff:ea:99:0a:ba:ef:00:24:05:6c:05:05:6c: 5a:66:37:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUwNzE5MDAzNzQxWhcNMjUwNzI2MDAzNzQxWjAYMRYwFAYD VQQDEw02ODdhZThkNi05N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseEN8S2jo38BgzLdXVUth8M7AfuIFCxqa23TizvjYXKX/ajMPK2uIuG9GNJH 6wxdHyGvtjySmdlF9fOFHKRE3R1aqICk9cWQvZ3OfoHoYnbG7PLobIn8/sx4bQss 8TKMFKX0E2JJvw1+0I+wzSEWulewOXGy2Yh7WXPY1OxRcZ9vBlPtc7Db5o+VdCyk EXz5oisbZGiJ1Au/ZVP4lgN6QMFK7QdFHLfH1vH6HDqpfK31hKibmy8Z4Vy+F8CI R2obcDjsVDSsVb/cmQpVXG3/XAfwoNxuiH0kb/YS2vli3hes8xrK0twmVIuFXQ7O 8HikNcBWISCKNMGAmaahiH7dmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/3+s9g b/Y27ol+VZByRDLRBfYnMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5oO0TizarVNuGP7rvIsCsPOQoNYxtTEeD4ATtxhXqFnLU3quhDBGp ImBlsJKqNdMl4OHUkUQCVUqcU29qs9Krnrk6YcF5by1+YY4s+CF/JLpRVDecZIX9 o0VvvEOmyzpiwqYpLYgmavESeAI/EFJaP5xB+tgTvjcAkXQ5+3oh952Fa1pqWcAg OS7tBsKgYRosarT/0oOMM2jBPgRVkwf16tGUKQNd2IVxIXr4Du2bgkKEilXkhZdp zm5YYrofl9nFMSE/MF9niUyqfVT5+P5bGjMukIcT2Z4/WPhjvQH1VfTn5Gs2MokW iX/61RYuAf/qmQq67wAkBWwFBWxaZjd0 -----END CERTIFICATE-----Generated at Sun Jul 20 10:20:44 2025 by rpki-client