$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: QPJXWYTPQh9LBhSpFXbZQOf8RexLJusW7WeghJBrSTc= Subject key identifier: A5:D6:35:6F:BC:9A:DB:F6:25:13:1F:43:33:3C:BB:DC:E1:97:17:F8 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: B0 Signing time: Sat 19 Jul 2025 06:12:26 +0000 Manifest this update: Sat 19 Jul 2025 06:12:25 +0000 Manifest next update: Sat 26 Jul 2025 06:12:25 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: mRjESEgYiLzAxYqIZ0M3y1b4ZdQiiOect+v6DENONus=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Jul 19 06:12:25 2025 GMT Not After : Jul 26 06:12:25 2025 GMT Subject: CN=687b374a-d0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:c5:de:5c:40:77:f7:57:e3:82:4c:18:fe: be:12:2e:d5:50:4d:f5:60:70:a2:9b:85:33:f9:6e: 51:14:9e:7b:f2:9c:a8:08:cc:46:38:1e:06:4f:e5: 74:92:c6:98:73:94:fc:e5:12:da:9a:9b:9b:1e:19: 2a:00:9b:87:de:0a:73:f9:8e:48:ab:1e:7f:a9:49: 68:cc:b3:6a:03:96:14:5d:94:12:39:bd:ca:09:ba: 6f:aa:a3:59:b9:2b:3b:68:df:a2:d3:b1:e7:47:96: eb:73:0d:ca:d0:2b:ad:0c:5f:27:f2:bf:73:36:0c: 65:ed:96:c8:46:0f:60:47:0f:7f:f4:61:0b:f5:c5: 20:39:4e:bc:d1:bb:20:a8:10:cf:fe:f5:59:f7:a1: 70:bb:6b:9f:0b:53:84:88:4c:e6:e8:24:8c:6f:b4: aa:42:50:37:b6:1a:fd:4b:e5:c3:3e:46:0e:59:44: 2b:bb:28:d0:07:2d:c3:86:26:ea:f7:ba:40:8c:a6: 93:e9:30:b7:ee:47:8e:76:f9:a0:3b:63:33:63:ac: 51:aa:1f:28:e3:5e:a8:0d:7f:27:fe:64:f9:10:0d: 36:ce:57:f1:31:7e:1f:85:89:f7:d6:b9:1b:f0:6e: 24:56:ab:ff:d7:1e:88:c1:90:df:84:a9:1a:5d:6d: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D6:35:6F:BC:9A:DB:F6:25:13:1F:43:33:3C:BB:DC:E1:97:17:F8 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:62:f2:e8:3a:48:ae:8f:4b:87:5b:cc:6f:27:f0:bd:84:b2: 03:48:cd:be:c1:7d:9b:64:65:1d:50:db:20:12:96:52:26:ef: b7:a4:9e:d4:fb:eb:57:6c:ec:11:03:c6:f8:d0:02:b1:92:89: 0d:b1:ee:f5:ab:56:20:44:63:32:f1:32:14:15:2b:88:16:23: 28:2d:ce:bf:8c:64:de:7c:ce:af:9a:19:e3:b5:9d:b9:ed:f1: 7f:66:e7:4e:ef:0e:4b:9c:37:1a:5f:2e:43:a7:40:32:41:4b: ab:36:01:8a:16:f0:f6:be:7c:0c:37:ab:e6:b3:83:54:67:d6: c1:51:b2:35:51:95:12:80:be:67:c6:9c:57:01:18:27:4a:c7: 20:bb:69:f5:9f:5a:76:91:cf:59:74:ba:a8:2c:a4:a2:41:f1: a3:44:7d:a1:17:b9:00:49:89:f1:89:89:b3:50:05:96:d3:d8: e2:fd:be:31:1e:fc:41:f0:24:bc:22:bc:0c:93:76:75:69:f1: 9c:e1:10:2c:e3:47:fa:86:ad:7e:77:72:df:ef:a9:27:21:a8: f0:7b:8a:d5:9b:b0:d0:2d:be:8c:1f:49:2b:88:50:fa:47:66: e9:5a:84:40:ef:3b:0f:03:7d:e8:64:c2:f0:a5:2b:4a:1f:f5: 69:fc:72:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwNzE5MDYxMjI1WhcNMjUwNzI2MDYxMjI1WjAYMRYwFAYD VQQDEw02ODdiMzc0YS1kMGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPjF3lxAd/dX44JMGP6+Ei7VUE31YHCim4Uz+W5RFJ578pyoCMxGOB4GT+V0 ksaYc5T85RLampubHhkqAJuH3gpz+Y5Iqx5/qUlozLNqA5YUXZQSOb3KCbpvqqNZ uSs7aN+i07HnR5brcw3K0CutDF8n8r9zNgxl7ZbIRg9gRw9/9GEL9cUgOU680bsg qBDP/vVZ96Fwu2ufC1OEiEzm6CSMb7SqQlA3thr9S+XDPkYOWUQruyjQBy3Dhibq 97pAjKaT6TC37keOdvmgO2MzY6xRqh8o416oDX8n/mT5EA02zlfxMX4fhYn31rkb 8G4kVqv/1x6IwZDfhKkaXW35dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXWNW+8 mtv2JRMfQzM8u9zhlxf4MB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFYvLoOkiuj0uHW8xvJ/C9hLIDSM2+wX2bZGUdUNsgEpZSJu+3pJ7U ++tXbOwRA8b40AKxkokNse71q1YgRGMy8TIUFSuIFiMoLc6/jGTefM6vmhnjtZ25 7fF/ZudO7w5LnDcaXy5Dp0AyQUurNgGKFvD2vnwMN6vms4NUZ9bBUbI1UZUSgL5n xpxXARgnSscgu2n1n1p2kc9ZdLqoLKSiQfGjRH2hF7kASYnxiYmzUAWW09ji/b4x HvxB8CS8IrwMk3Z1afGc4RAs40f6hq1+d3Lf76knIajwe4rVm7DQLb6MH0kriFD6 R2bpWoRA7zsPA33oZMLwpStKH/Vp/HLn -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:47 2025 by rpki-client