$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: cuCeIs7Myb73SdMNMOky+03tcEl/Bmn5Qo0zKonJ4KI= Subject key identifier: 32:1C:A4:B5:4D:E2:76:DA:13:C0:17:3D:D8:05:86:E9:EA:51:15:A3 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03D7 Signing time: Mon 21 Jul 2025 00:49:48 +0000 Manifest this update: Mon 21 Jul 2025 00:49:47 +0000 Manifest next update: Mon 28 Jul 2025 00:49:47 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: KqZW/N3EEanqft+uhFHDzJvMt2udrbCMb1eRXDQ67QY=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Jul 21 00:49:47 2025 GMT Not After : Jul 28 00:49:47 2025 GMT Subject: CN=687d8eab-00ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:1d:57:cf:e0:51:af:a3:f0:eb:2e:98:21: f5:34:b8:af:11:bf:a9:1d:7b:14:da:cb:af:9c:af: 31:5c:c4:8c:03:63:cf:ea:d7:19:7e:91:05:5f:9d: 0c:85:de:55:bb:34:36:64:35:42:91:c9:0d:59:23: 6e:a3:f2:99:47:b5:e6:2c:05:70:0e:02:3e:0e:e0: 82:3b:dc:f4:3b:ae:ee:40:31:9e:7c:ae:24:73:51: 29:53:ea:62:33:15:0b:94:e8:3f:d9:bf:60:38:68: d7:ca:bb:9a:2f:a4:6e:61:c5:fc:d5:1a:20:d2:4f: e6:d0:d2:ff:f7:19:a6:c6:9a:15:6c:d2:67:4b:d6: 91:04:a6:3b:fc:6a:56:34:cd:dd:11:84:95:8e:6d: 89:6b:1d:43:bd:37:34:3a:2c:63:f0:fe:06:72:70: 77:54:83:61:2f:d8:9c:14:cd:81:ca:cf:e6:32:54: 39:5b:4b:73:db:b1:98:ad:1d:32:14:61:c3:25:eb: 4c:21:0a:1a:7e:27:a5:63:e4:e0:32:bb:74:41:6f: 05:15:8d:74:fa:9a:19:25:76:a9:fe:a3:e1:b4:1b: 26:62:6e:b8:a0:cc:c3:9c:63:65:c6:76:ff:aa:35: 8a:9c:df:2a:b8:cf:ae:88:37:37:a1:1b:05:2a:f0: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1C:A4:B5:4D:E2:76:DA:13:C0:17:3D:D8:05:86:E9:EA:51:15:A3 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:3e:aa:48:52:be:cd:5e:68:36:5a:74:e0:bf:22:98:15:c7: 17:f3:71:8c:8e:32:0f:f3:8d:95:e3:09:8b:9a:b8:e4:00:da: b8:e5:df:fe:7b:88:4a:21:1e:47:89:5c:ed:23:0d:2b:64:7d: 72:9d:fc:3b:72:72:4d:ca:02:48:75:7a:e2:00:3a:ac:5e:3b: 73:6b:e5:f8:2e:fc:fa:83:ba:d0:07:fa:cd:45:18:0e:a9:26: fe:50:72:12:67:ee:87:1b:34:2b:d5:d7:c1:73:17:e6:72:59: b3:f5:5c:63:ba:f4:f4:45:90:35:f7:0a:7b:7c:c4:0e:e1:82: eb:19:b6:15:ad:83:7f:cc:ab:7f:01:e4:20:22:9c:db:e7:62: b4:a4:e9:e5:d9:27:9c:f5:95:81:71:e5:34:18:35:2f:37:f8: f4:43:85:4e:05:7a:0d:92:d1:c6:a5:db:7a:b3:9c:04:9b:eb: cc:10:06:76:73:40:93:60:e7:e1:ad:51:45:64:cb:7b:c5:03: 1b:be:91:9d:48:9c:ad:db:ff:a1:81:8a:75:33:c7:63:4a:bc: 7b:83:8e:9a:e2:74:64:72:19:d0:d8:89:60:cc:cf:53:eb:82: a6:74:f3:d4:a0:65:1f:ba:85:ca:77:89:e9:1d:35:10:ed:22: 39:3d:0e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwNzIxMDA0OTQ3WhcNMjUwNzI4MDA0OTQ3WjAYMRYwFAYD VQQDEw02ODdkOGVhYi0wMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxy4dV8/gUa+j8OsumCH1NLivEb+pHXsU2suvnK8xXMSMA2PP6tcZfpEFX50M hd5VuzQ2ZDVCkckNWSNuo/KZR7XmLAVwDgI+DuCCO9z0O67uQDGefK4kc1EpU+pi MxULlOg/2b9gOGjXyruaL6RuYcX81Rog0k/m0NL/9xmmxpoVbNJnS9aRBKY7/GpW NM3dEYSVjm2Jax1DvTc0Oixj8P4GcnB3VINhL9icFM2Bys/mMlQ5W0tz27GYrR0y FGHDJetMIQoafielY+TgMrt0QW8FFY10+poZJXap/qPhtBsmYm64oMzDnGNlxnb/ qjWKnN8quM+uiDc3oRsFKvAirwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIcpLVN 4nbaE8AXPdgFhunqURWjMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChPqpIUr7NXmg2WnTgvyKYFccX83GMjjIP842V4wmLmrjkANq45d/+ e4hKIR5HiVztIw0rZH1ynfw7cnJNygJIdXriADqsXjtza+X4Lvz6g7rQB/rNRRgO qSb+UHISZ+6HGzQr1dfBcxfmclmz9VxjuvT0RZA19wp7fMQO4YLrGbYVrYN/zKt/ AeQgIpzb52K0pOnl2Sec9ZWBceU0GDUvN/j0Q4VOBXoNktHGpdt6s5wEm+vMEAZ2 c0CTYOfhrVFFZMt7xQMbvpGdSJyt2/+hgYp1M8djSrx7g46a4nRkchnQ2IlgzM9T 64KmdPPUoGUfuoXKd4npHTUQ7SI5PQ7q -----END CERTIFICATE-----Generated at Mon Jul 21 18:35:13 2025 by rpki-client