$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: b2v27u1fDk3iTAXKuUM7Flvmt3yCS+k60NLYlcz9wco= Subject key identifier: 20:23:22:05:24:BA:92:C1:23:5F:80:69:1B:BA:75:83:DC:C9:28:B1 Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 34A5 Signing time: Sun 20 Jul 2025 14:59:46 +0000 Manifest this update: Sun 20 Jul 2025 14:59:46 +0000 Manifest next update: Sun 27 Jul 2025 14:59:46 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: e5N9QoQoVhN/BndiT4oiaH8ATuoLQCl7ut6HQ4ghuQE=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: RzsyMG8grNRl/TU/HKZlXJ7ZiLnl0fu14E8Z0lJpa0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2, serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: Jul 20 14:59:46 2025 GMT Not After : Jul 27 14:59:46 2025 GMT Subject: CN=687d0462-f7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:19:61:08:21:33:14:6a:7d:0a:ee:01:3a: fe:ab:2d:c9:c1:34:73:2a:a4:79:01:8b:a8:95:1c: 4b:d5:13:27:c4:ce:30:21:87:ba:5f:34:cb:b0:e3: f1:60:f0:4d:92:81:66:cd:de:08:fa:27:25:2e:22: 7e:2d:79:16:40:c2:1e:de:a8:be:9e:d6:23:1c:0b: 08:fd:1a:02:c7:2c:fa:87:77:3a:67:13:2c:d6:77: 18:32:ed:e9:e1:c7:b0:5c:c9:03:2e:bc:5f:d2:be: c6:2a:6b:6d:9c:06:7c:cc:d9:48:97:71:9f:56:cc: 94:20:bc:1a:25:32:f2:df:09:83:7f:24:eb:dd:7e: ae:f5:7a:43:fe:ad:38:7f:6d:fd:7a:97:67:d7:5c: a0:52:46:4e:88:ab:a1:c2:7c:15:e8:7c:d2:63:f9: b9:46:59:b3:f7:b5:43:f6:e9:85:8a:34:e5:bf:38: 37:01:01:9d:c9:30:3c:03:3a:ed:7e:ea:01:26:72: 92:4f:86:c4:c2:e8:be:7e:97:73:d0:2d:fa:86:1c: a7:40:9d:4c:4e:74:ab:66:89:f2:6d:93:2c:45:e6: 64:c9:32:41:e1:f5:b7:37:6f:d2:0e:05:bc:3d:db: 6f:40:6f:31:79:1f:f8:6f:8b:cb:0e:87:65:2d:9f: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:23:22:05:24:BA:92:C1:23:5F:80:69:1B:BA:75:83:DC:C9:28:B1 X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f0:c8:ae:f0:f9:b7:69:a6:a3:60:ca:bd:0d:1a:7c:f2:02: 16:7f:03:ef:0c:30:58:43:0b:84:45:1a:5b:ee:cf:cd:44:2b: 2f:26:9f:2e:77:64:8f:a7:b8:2a:b0:31:ec:64:e2:57:8a:b9: 08:0f:e7:3d:3d:a4:d4:fc:46:1f:02:4f:74:d1:0b:6b:28:4c: 38:61:fe:4c:ae:66:ff:14:70:88:f5:2a:d2:34:2d:fa:84:28: e1:7b:8c:b6:5e:4d:04:ab:c0:06:ad:a4:de:7b:49:39:05:2d: 87:3b:7a:3e:5e:4d:3d:b7:cf:da:a4:7b:5a:a1:b6:34:ff:7f: c1:7d:81:3a:e0:4e:b2:8d:09:f8:0f:5c:85:ac:d5:58:81:b2: 27:bb:69:1d:2c:3e:6d:f8:c6:74:74:cc:73:ad:1a:fb:b7:6b: ee:79:68:9b:a6:c1:e1:ac:90:7f:f4:5a:8d:0e:96:dc:eb:54: 1b:82:21:19:68:1d:db:5e:e2:c0:fe:01:6c:71:18:5a:f0:73: 9a:79:69:34:e8:59:85:88:26:93:25:90:10:85:78:24:c4:1f: ef:38:53:f2:bf:4d:9a:94:5a:04:57:52:b5:7f:c7:18:75:0b: 27:bf:ff:a4:2e:06:2b:4d:01:d3:47:6d:6a:03:34:80:ad:eb: e2:3f:22:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjUwNzIwMTQ1OTQ2WhcNMjUwNzI3MTQ1OTQ2WjAYMRYwFAYD VQQDEw02ODdkMDQ2Mi1mN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswUZYQghMxRqfQruATr+qy3JwTRzKqR5AYuolRxL1RMnxM4wIYe6XzTLsOPx YPBNkoFmzd4I+iclLiJ+LXkWQMIe3qi+ntYjHAsI/RoCxyz6h3c6ZxMs1ncYMu3p 4cewXMkDLrxf0r7GKmttnAZ8zNlIl3GfVsyUILwaJTLy3wmDfyTr3X6u9XpD/q04 f239epdn11ygUkZOiKuhwnwV6HzSY/m5Rlmz97VD9umFijTlvzg3AQGdyTA8Azrt fuoBJnKST4bEwui+fpdz0C36hhynQJ1MTnSrZonybZMsReZkyTJB4fW3N2/SDgW8 PdtvQG8xeR/4b4vLDodlLZ/6/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAjIgUk upLBI1+AaRu6dYPcySixMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC8Miu8Pm3aaajYMq9DRp88gIWfwPvDDBYQwuERRpb7s/NRCsvJp8u d2SPp7gqsDHsZOJXirkID+c9PaTU/EYfAk900QtrKEw4Yf5Mrmb/FHCI9SrSNC36 hCjhe4y2Xk0Eq8AGraTee0k5BS2HO3o+Xk09t8/apHtaobY0/3/BfYE64E6yjQn4 D1yFrNVYgbInu2kdLD5t+MZ0dMxzrRr7t2vueWibpsHhrJB/9FqNDpbc61QbgiEZ aB3bXuLA/gFscRha8HOaeWk06FmFiCaTJZAQhXgkxB/vOFPyv02alFoEV1K1f8cY dQsnv/+kLgYrTQHTR21qAzSAreviPyIk -----END CERTIFICATE-----Generated at Mon Jul 21 07:13:10 2025 by rpki-client