$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json) Hash identifier: h5DRIxOwLIe9OuxQJh8yzRyZ+TI2pUCIAXiQnaPnNs0= Subject key identifier: AB:2A:43:93:91:58:9C:58:7B:1C:2E:C9:69:BD:B4:0E:90:FA:D8:6E Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft Manifest number: 01EF Signing time: Sat 19 Jul 2025 03:11:54 +0000 Manifest this update: Sat 19 Jul 2025 03:11:54 +0000 Manifest next update: Sat 26 Jul 2025 03:11:54 +0000 Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: mKGVaebaXwG1alhnX3bEfB08GMRyYeeVJWGmQF0JJmI=) 2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: 24aYs+tgnBgct35NNNvM/3lDLKFzetvAVzRTJtmad/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Validity Not Before: Jul 19 03:11:54 2025 GMT Not After : Jul 26 03:11:54 2025 GMT Subject: CN=687b0cfa-58d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:77:cc:24:d6:2f:30:7e:0f:74:f2:c2:74:69: 63:de:63:1b:95:d5:ed:75:6d:ba:d0:b3:a1:bb:d7: e6:04:d6:e8:05:ec:3e:bb:80:c4:14:13:ec:04:02: 32:f7:3a:7a:67:8d:6b:d6:c8:f2:9b:b5:e7:6e:6b: e2:48:f3:65:1b:e0:bc:38:10:f1:e1:c1:b9:88:51: 13:2f:31:3c:e4:a6:0f:c2:e3:3b:fc:d8:f0:ec:ab: 6d:c4:bb:aa:5f:cf:53:b7:14:87:c2:5e:83:6c:ea: 0d:59:0c:e2:b8:dc:02:c4:d3:a5:ae:e4:9e:6f:0f: 59:a5:d0:65:3b:5e:91:6d:dc:3f:dd:2e:94:b0:00: 6b:3f:32:12:b6:83:c1:1e:84:bb:e0:c8:d8:9d:cd: 35:00:5c:35:9e:0b:4f:61:e9:58:87:1e:05:63:03: 99:fd:fa:a4:22:cb:64:df:72:67:fb:6a:ff:68:56: 75:f0:80:1e:7d:7c:2b:3c:7f:61:03:a7:c6:be:41: 36:8b:92:1a:fb:94:54:63:95:dd:97:8e:eb:78:e8: 27:83:58:0b:7b:44:d4:bd:9c:cb:4b:73:42:69:08: 71:50:ae:22:1e:18:5a:67:09:84:6d:da:73:f8:f8: 55:98:17:53:f4:78:e1:f3:6f:bc:57:98:f3:76:31: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:43:93:91:58:9C:58:7B:1C:2E:C9:69:BD:B4:0E:90:FA:D8:6E X509v3 Authority Key Identifier: keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5a:ed:5f:7f:64:13:a9:d1:7d:b3:8f:be:dd:93:05:08:f6: aa:0d:2d:71:cf:24:2b:f6:3d:46:96:68:37:2e:94:e4:39:1a: ee:df:a3:89:31:6c:8d:8b:bf:bd:b0:54:d9:84:28:f8:ac:b8: d4:9b:de:62:df:08:23:f7:3c:8b:95:93:68:44:3d:36:68:b5: 8c:91:ab:29:4c:d5:93:a6:14:4d:e7:62:a0:1c:52:eb:d3:77: 9c:60:9b:5e:f8:14:8f:74:c5:f6:70:dc:ab:19:fc:d2:4d:51: d7:bd:6a:f9:f1:b8:b0:03:4f:d5:70:c0:03:cb:fa:7c:2d:e6: 27:a5:64:3c:a2:f8:07:d2:85:7f:14:b4:85:41:e3:e8:19:ba: 87:e0:a8:0c:79:63:37:3c:26:4e:fc:b1:df:7a:0c:26:b9:45: f1:c7:77:e3:16:2e:a4:dc:ba:da:be:06:70:86:3b:8c:2d:f9: a5:45:fe:c0:be:5e:ce:e6:fb:9f:a7:23:bb:51:af:23:eb:58: 9a:34:4d:a0:e6:72:09:c7:be:c6:0c:86:06:94:95:91:d4:d7: 46:b5:0c:ff:2b:5b:00:e9:2a:4e:2a:3d:e2:3c:7f:69:16:e6: e6:8d:1d:ff:1e:06:94:5e:96:66:c5:3e:aa:a5:ce:9b:03:55: 9c:50:6a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3RjgxMTAvBgNVBAUTKDlGNjRGRTUwOTkyNTM3RkIwQjQwRTUyRjlDRkFDMzEw Q0EyNzE5MTgwHhcNMjUwNzE5MDMxMTU0WhcNMjUwNzI2MDMxMTU0WjAYMRYwFAYD VQQDEw02ODdiMGNmYS01OGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnfMJNYvMH4PdPLCdGlj3mMbldXtdW260LOhu9fmBNboBew+u4DEFBPsBAIy 9zp6Z41r1sjym7XnbmviSPNlG+C8OBDx4cG5iFETLzE85KYPwuM7/Njw7KttxLuq X89TtxSHwl6DbOoNWQziuNwCxNOlruSebw9ZpdBlO16Rbdw/3S6UsABrPzIStoPB HoS74MjYnc01AFw1ngtPYelYhx4FYwOZ/fqkIstk33Jn+2r/aFZ18IAefXwrPH9h A6fGvkE2i5Ia+5RUY5Xdl47reOgng1gLe0TUvZzLS3NCaQhxUK4iHhhaZwmEbdpz +PhVmBdT9Hjh82+8V5jzdjH1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsqQ5OR WJxYexwuyWm9tA6Q+thuMB8GA1UdIwQYMBaAFJ9k/lCZJTf7C0DlL5z6wxDKJxkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdGOC8zNDUwOTQwMEI5 NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5fc0xRT1V2blByREVNb25H UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yVC1VSmtsTl9zTFFPVXZuUHJERU1vbkdSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTdGOC8zNDUwOTQwMEI5NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5f c0xRT1V2blByREVNb25HUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWu1ff2QTqdF9s4++3ZMFCPaqDS1xzyQr9j1Glmg3LpTkORru36OJ MWyNi7+9sFTZhCj4rLjUm95i3wgj9zyLlZNoRD02aLWMkaspTNWTphRN52KgHFLr 03ecYJte+BSPdMX2cNyrGfzSTVHXvWr58biwA0/VcMADy/p8LeYnpWQ8ovgH0oV/ FLSFQePoGbqH4KgMeWM3PCZO/LHfegwmuUXxx3fjFi6k3LravgZwhjuMLfmlRf7A vl7O5vufpyO7Ua8j61iaNE2g5nIJx77GDIYGlJWR1NdGtQz/K1sA6SpOKj3iPH9p FubmjR3/HgaUXpZmxT6qpc6bA1WcUGpx -----END CERTIFICATE-----Generated at Sun Jul 20 07:46:10 2025 by rpki-client