$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: X6SUnYwCz1UQ+/lxv8Fki0ugRpB2XSAKzXom7MGII3c= Subject key identifier: 83:1C:E4:ED:C5:9B:D9:C9:48:F4:1B:DE:1E:A3:38:06:91:96:46:F7 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 062B Signing time: Sun 20 Jul 2025 23:10:30 +0000 Manifest this update: Sun 20 Jul 2025 23:10:30 +0000 Manifest next update: Sun 27 Jul 2025 23:10:30 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: AKcr6jWLebVQPMbpophkpFCyffGDvjH8nP3yG+9dqHU=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: tL4FpVgmNNY7jS9BQs7PmDKkC0MYf8VYGM2whKI+KMQ=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Jul 20 23:10:30 2025 GMT Not After : Jul 27 23:10:30 2025 GMT Subject: CN=687d7766-d296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:db:54:36:e7:57:24:3e:21:62:9a:b8:e6: f2:70:03:e4:2a:07:68:9f:a1:1a:ca:eb:f6:b3:08: 57:f5:3f:b6:13:c0:de:27:4f:6a:26:02:ea:f3:3e: 86:c8:d3:3b:33:3b:37:af:a4:c3:85:a8:9a:2d:46: 56:21:a3:e3:3e:47:f9:60:34:b7:05:0f:a2:bf:d0: e3:52:26:48:39:17:d5:2e:07:fc:73:7d:46:98:ff: cf:99:b6:b8:89:c5:a2:10:0d:d7:6e:36:26:ec:d6: ce:f1:f0:35:02:bc:fd:c1:93:95:61:b2:0c:41:00: 03:33:0a:68:2d:58:68:98:0c:a9:5e:47:49:04:ee: c2:c5:ea:f6:78:47:68:d2:a8:81:96:a5:9f:a3:16: 5c:aa:2b:35:2b:a2:4d:68:b7:16:e8:7a:e6:44:f9: 73:92:a7:ba:1d:e3:4e:37:f4:61:5a:05:b5:94:2d: 16:33:d9:97:02:49:9e:9a:62:a9:52:a9:a5:af:8e: 98:ee:58:25:76:16:86:b7:97:15:92:1b:34:23:23: eb:9c:c9:68:3d:81:68:8a:24:b4:35:d9:a0:94:1a: 36:a4:9a:12:a1:3d:f3:ec:16:17:22:0d:6f:6d:57: 61:58:66:4f:ee:91:cc:09:f5:d5:5e:d5:51:d0:c2: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1C:E4:ED:C5:9B:D9:C9:48:F4:1B:DE:1E:A3:38:06:91:96:46:F7 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:31:25:6f:2f:82:5f:2f:64:66:c2:84:73:26:6d:99:8f:e9: eb:b3:73:51:c1:b3:12:6c:53:72:dd:93:9a:0f:d8:16:fe:ae: b4:e5:af:7c:ed:73:59:6a:de:de:cd:61:84:75:6b:c3:85:8a: ca:f6:3e:2e:c1:2b:13:33:62:71:cf:0e:93:0a:6b:53:a6:47: f1:fc:b9:a5:82:94:f9:53:55:d7:cd:ba:98:07:45:41:5e:41: b4:6b:b1:be:29:ea:f7:ce:fc:d1:0c:5a:e4:33:ef:20:69:ad: 4e:c0:99:dd:2c:fb:ac:4e:86:24:d0:e5:c0:81:a8:70:45:28: 88:d4:cc:7a:06:99:ee:5d:fc:aa:a2:f3:48:1b:be:10:c2:54: 3c:aa:b3:2d:58:97:3f:ac:3f:d8:54:4f:25:a9:d6:97:1e:1c: 86:62:67:76:e0:39:f4:e2:5c:f9:ce:82:e5:da:1d:21:94:84: 61:3e:2e:f9:6b:67:d9:5d:e3:c2:44:46:1c:e5:17:d5:9e:31: 7f:0b:7e:eb:84:f9:29:46:b7:43:e3:c9:90:53:fb:6f:88:38: b6:c1:1a:fb:5f:79:f4:a9:36:49:f6:c8:45:c3:00:5a:e0:b3: 1b:82:82:b1:00:ad:86:0d:67:39:e2:be:74:8d:19:da:89:29: 80:8a:9f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNzIwMjMxMDMwWhcNMjUwNzI3MjMxMDMwWjAYMRYwFAYD VQQDEw02ODdkNzc2Ni1kMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/bbVDbnVyQ+IWKauObycAPkKgdon6Eayuv2swhX9T+2E8DeJ09qJgLq8z6G yNM7Mzs3r6TDhaiaLUZWIaPjPkf5YDS3BQ+iv9DjUiZIORfVLgf8c31GmP/Pmba4 icWiEA3XbjYm7NbO8fA1Arz9wZOVYbIMQQADMwpoLVhomAypXkdJBO7Cxer2eEdo 0qiBlqWfoxZcqis1K6JNaLcW6HrmRPlzkqe6HeNON/RhWgW1lC0WM9mXAkmemmKp Uqmlr46Y7lgldhaGt5cVkhs0IyPrnMloPYFoiiS0NdmglBo2pJoSoT3z7BYXIg1v bVdhWGZP7pHMCfXVXtVR0MIovwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMc5O3F m9nJSPQb3h6jOAaRlkb3MB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmMSVvL4JfL2RmwoRzJm2Zj+nrs3NRwbMSbFNy3ZOaD9gW/q605a98 7XNZat7ezWGEdWvDhYrK9j4uwSsTM2Jxzw6TCmtTpkfx/LmlgpT5U1XXzbqYB0VB XkG0a7G+Ker3zvzRDFrkM+8gaa1OwJndLPusToYk0OXAgahwRSiI1Mx6BpnuXfyq ovNIG74QwlQ8qrMtWJc/rD/YVE8lqdaXHhyGYmd24Dn04lz5zoLl2h0hlIRhPi75 a2fZXePCREYc5RfVnjF/C37rhPkpRrdD48mQU/tviDi2wRr7X3n0qTZJ9shFwwBa 4LMbgoKxAK2GDWc54r50jRnaiSmAip/+ -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:18 2025 by rpki-client