$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: Qhb9SFZQwN9zzE4uZiX4F0L3PNUmx8Ds+siPLtTrrkA= Subject key identifier: 8B:17:CD:B3:BE:0B:35:2F:25:A1:C2:35:06:E2:CF:60:A1:0C:24:37 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1A4D Signing time: Fri 18 Jul 2025 16:28:22 +0000 Manifest this update: Fri 18 Jul 2025 16:28:22 +0000 Manifest next update: Fri 25 Jul 2025 16:28:22 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: CJQSitO8S7Y87hn4XXKtmkWBVJeuXF46YXTM1UABvOk=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: iAz8qRk3/H7vOgPRojw19iFmTjtRy8EuUxq8QG7UtTs=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: BhjSntJM5KeISAX/AXFVMKFsUVqLH2ibjtVSQJsKXQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6760 (0x1a68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 18 16:28:22 2025 GMT Not After : Jul 25 16:28:22 2025 GMT Subject: CN=687a7626-c06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3b:c2:af:2d:55:fe:3e:9f:3d:2f:53:18:a9: 0e:83:b7:b2:f8:a4:62:c2:7f:98:67:ef:8a:75:04: 5d:a0:7e:f3:9d:4b:90:21:a3:af:fc:d3:ee:18:2d: 47:b2:d9:89:26:6a:7e:86:a4:be:82:fc:0a:a3:25: d0:15:f0:a5:85:c1:54:7e:0f:03:52:85:d6:42:1f: 9a:f5:ee:cf:8d:41:ca:9b:90:6a:a9:33:8a:1a:b5: c6:4c:b1:99:48:d9:0c:0e:9a:0d:b0:3d:e8:5d:60: 0d:cf:73:0d:86:1e:43:71:a0:d9:83:63:74:07:0c: e2:32:76:73:a5:ac:25:ba:ae:83:4e:6d:e1:27:b7: dd:26:f8:61:ad:50:a2:0a:19:a7:86:31:5f:08:41: fa:20:a1:f3:f9:c0:03:bc:9f:0f:81:20:9c:ba:ef: bf:38:34:bb:93:ea:d2:c2:70:55:ad:71:57:5c:33: c2:a4:71:54:97:04:b0:4d:20:ec:46:2e:b2:2d:8d: 8b:20:e5:cf:97:32:dd:df:77:5e:28:7b:74:48:3c: 4c:2b:5f:f8:0e:69:21:ab:d9:35:6b:89:24:86:55: 25:57:7e:9c:5f:32:d2:db:51:05:b0:a1:8f:a5:65: ad:11:76:8c:65:58:09:ed:b1:f7:a1:8f:03:5e:5e: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:CD:B3:BE:0B:35:2F:25:A1:C2:35:06:E2:CF:60:A1:0C:24:37 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:ff:21:a9:2e:72:19:89:59:bf:85:ca:ac:5c:1f:c2:fa: f7:17:20:69:3e:bd:48:4d:78:f4:b9:9c:9d:1c:da:5e:e4:c0: 59:bc:3b:da:08:e4:8f:c0:54:c9:2b:28:87:1e:36:76:65:0f: 79:2a:93:3b:e0:5e:ca:bf:84:9b:da:e9:6e:57:73:34:a6:f6: 92:35:7b:10:b9:fb:a6:65:35:36:24:aa:02:31:bf:19:b1:85: e6:f3:54:2d:a5:3e:0f:f4:a1:ae:d6:c7:4a:86:29:43:a5:8a: 51:1e:5e:40:e9:31:77:bd:52:f0:5b:26:6e:06:51:44:77:a0: 5f:05:a5:85:dc:42:a5:a2:ba:8d:bf:3a:55:8b:95:1b:29:c4: 74:e3:d3:3c:1c:cd:de:65:19:f3:17:ff:bd:25:18:7d:d2:a9: 12:17:2f:2f:d7:2a:d4:2b:44:f2:cf:d6:fe:4b:f8:b9:fb:0c: 4e:62:b9:bc:66:34:e0:90:23:e4:ac:1b:2f:99:5a:f7:8a:70: f1:2a:aa:b5:9d:a5:02:d6:17:1e:e2:75:3b:a9:65:de:88:cb: c0:37:0c:f0:07:69:11:cf:1d:32:4a:4d:27:df:cb:1e:fd:53: c0:a8:1d:81:da:31:5d:ee:83:b0:1f:7c:0f:57:4e:70:06:e7: d3:33:37:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUwNzE4MTYyODIyWhcNMjUwNzI1MTYyODIyWjAYMRYwFAYD VQQDEw02ODdhNzYyNi1jMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjvCry1V/j6fPS9TGKkOg7ey+KRiwn+YZ++KdQRdoH7znUuQIaOv/NPuGC1H stmJJmp+hqS+gvwKoyXQFfClhcFUfg8DUoXWQh+a9e7PjUHKm5BqqTOKGrXGTLGZ SNkMDpoNsD3oXWANz3MNhh5DcaDZg2N0BwziMnZzpawluq6DTm3hJ7fdJvhhrVCi ChmnhjFfCEH6IKHz+cADvJ8PgSCcuu+/ODS7k+rSwnBVrXFXXDPCpHFUlwSwTSDs Ri6yLY2LIOXPlzLd33deKHt0SDxMK1/4Dmkhq9k1a4kkhlUlV36cXzLS21EFsKGP pWWtEXaMZVgJ7bH3oY8DXl4uvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsXzbO+ CzUvJaHCNQbiz2ChDCQ3MB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1+P8hqS5yGYlZv4XKrFwfwvr3FyBpPr1ITXj0uZydHNpe5MBZvDva COSPwFTJKyiHHjZ2ZQ95KpM74F7Kv4Sb2uluV3M0pvaSNXsQufumZTU2JKoCMb8Z sYXm81QtpT4P9KGu1sdKhilDpYpRHl5A6TF3vVLwWyZuBlFEd6BfBaWF3EKlorqN vzpVi5UbKcR049M8HM3eZRnzF/+9JRh90qkSFy8v1yrUK0Tyz9b+S/i5+wxOYrm8 ZjTgkCPkrBsvmVr3inDxKqq1naUC1hce4nU7qWXeiMvANwzwB2kRzx0ySk0n38se /VPAqB2B2jFd7oOwH3wPV05wBufTMzfg -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:21 2025 by rpki-client