$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: j5XLfa5HXmSACgq5yNGtpG5nbEYr7iWQ5hGsN7zDypU= Subject key identifier: 9C:89:E7:E0:D8:E1:40:94:7B:74:05:54:22:A8:BA:50:25:2E:B6:DA Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06ED Signing time: Fri 18 Jul 2025 22:15:18 +0000 Manifest this update: Fri 18 Jul 2025 22:15:18 +0000 Manifest next update: Fri 25 Jul 2025 22:15:18 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: KdsOplf3ISyqVA6MzhwyFnkt4qCz3b7tQwW3362Jaw0=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Jul 18 22:15:18 2025 GMT Not After : Jul 25 22:15:18 2025 GMT Subject: CN=687ac776-3a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:71:40:6d:86:56:49:9a:c2:78:86:69:c1:30: 7b:9c:ae:9c:b7:24:d9:92:70:3e:52:cf:ac:e1:bb: 89:5a:c4:8e:e1:b5:97:91:a5:cf:5c:54:f0:fd:93: e7:35:ec:03:92:46:26:04:e4:19:51:9c:ce:22:cc: 51:0c:fd:f8:7b:77:4a:1c:05:cc:60:93:d4:b7:d9: 51:d1:db:48:ed:58:2d:7b:d2:54:4b:a1:28:f1:fb: c3:b7:ff:3a:b0:b6:a6:ad:ef:a8:2c:0c:2e:49:10: 25:98:26:99:ff:f7:03:8c:ae:61:52:72:00:dc:7f: 3e:07:1b:45:38:f2:f6:53:42:d2:85:99:62:f9:a8: 5c:af:c6:15:55:2b:a0:77:16:14:3a:54:72:36:50: 22:f2:e7:65:b6:f6:a6:ab:39:6e:23:a5:ab:fa:2f: 4a:e7:e6:a0:b9:96:2e:16:cd:d6:12:4d:7a:98:7f: b7:fa:18:79:6c:af:62:40:6d:07:3d:ce:75:f7:73: 44:90:54:3e:95:f5:5b:4b:1a:0a:6c:2a:0b:97:d9: 15:e9:03:16:b1:96:96:19:5b:1d:7d:03:b2:4b:eb: 7b:e2:46:82:52:70:88:77:28:39:31:d0:41:24:7d: 0b:0d:43:c9:c0:cf:64:81:60:e3:24:41:87:77:32: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:E7:E0:D8:E1:40:94:7B:74:05:54:22:A8:BA:50:25:2E:B6:DA X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:56:6d:8d:24:52:22:f3:a4:dc:20:be:a9:a0:f1:e5:55:fe: a8:c5:0f:16:c3:bd:84:d8:a7:97:88:8c:f2:fa:98:0f:19:cc: 1e:5d:52:51:c2:63:1c:e0:ed:83:0a:d1:78:81:df:d5:3a:11: 9f:d0:ad:ca:6f:93:86:51:91:53:0b:8e:ad:ef:fd:1b:5f:f9: 57:e8:58:85:14:e7:ee:21:87:55:d5:b8:57:ad:5f:1c:ee:ae: 99:16:b6:9e:fb:f5:13:4f:e5:b4:24:2b:dd:55:fa:16:ec:09: b5:a8:14:bc:bc:9b:0e:f1:fb:09:85:37:33:0e:60:5d:4f:90: 7a:c4:a2:f5:20:d5:e0:e5:ff:07:19:91:37:58:a6:ed:72:5b: f5:60:ee:34:1e:e5:0b:48:62:db:99:f3:3f:e7:c8:b3:ac:33: 98:7e:10:41:72:d9:9f:d0:a4:45:40:62:21:56:c3:63:72:d1: 39:8d:05:cd:02:d4:1f:0e:a9:1f:97:1b:16:bb:ad:d5:40:e5: 3c:ff:8f:83:7f:30:1d:38:ba:a6:00:f0:38:87:e1:f7:57:47: 25:e0:1c:00:86:cc:cf:7d:0d:a1:96:ff:f3:43:c2:9e:97:a1: ee:26:78:46:81:37:d1:45:a7:50:8b:9f:1b:43:5e:4c:40:0e: f4:4f:2d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwNzE4MjIxNTE4WhcNMjUwNzI1MjIxNTE4WjAYMRYwFAYD VQQDEw02ODdhYzc3Ni0zYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HFAbYZWSZrCeIZpwTB7nK6ctyTZknA+Us+s4buJWsSO4bWXkaXPXFTw/ZPn NewDkkYmBOQZUZzOIsxRDP34e3dKHAXMYJPUt9lR0dtI7Vgte9JUS6Eo8fvDt/86 sLamre+oLAwuSRAlmCaZ//cDjK5hUnIA3H8+BxtFOPL2U0LShZli+ahcr8YVVSug dxYUOlRyNlAi8udltvamqzluI6Wr+i9K5+aguZYuFs3WEk16mH+3+hh5bK9iQG0H Pc5193NEkFQ+lfVbSxoKbCoLl9kV6QMWsZaWGVsdfQOyS+t74kaCUnCIdyg5MdBB JH0LDUPJwM9kgWDjJEGHdzJQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyJ5+DY 4UCUe3QFVCKoulAlLrbaMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Vm2NJFIi86TcIL6poPHlVf6oxQ8Ww72E2KeXiIzy+pgPGcweXVJR wmMc4O2DCtF4gd/VOhGf0K3Kb5OGUZFTC46t7/0bX/lX6FiFFOfuIYdV1bhXrV8c 7q6ZFrae+/UTT+W0JCvdVfoW7Am1qBS8vJsO8fsJhTczDmBdT5B6xKL1INXg5f8H GZE3WKbtclv1YO40HuULSGLbmfM/58izrDOYfhBBctmf0KRFQGIhVsNjctE5jQXN AtQfDqkflxsWu63VQOU8/4+DfzAdOLqmAPA4h+H3V0cl4BwAhszPfQ2hlv/zQ8Ke l6HuJnhGgTfRRadQi58bQ15MQA70Ty2T -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:59 2025 by rpki-client