$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: bL5hmjtn2BKN/xQIhQeBqujx9WiAqJIAyeSwIKsrbJk= Subject key identifier: 09:0C:62:97:A2:01:2E:12:DA:19:B2:AD:CB:19:4C:8E:28:D4:0B:74 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0E7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0E61 Signing time: Fri 18 Jul 2025 17:55:20 +0000 Manifest this update: Fri 18 Jul 2025 17:55:19 +0000 Manifest next update: Fri 25 Jul 2025 17:55:19 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: e/oybl71QXeSi8yjBWHOYcD6diRV+5nPlcgJLHmtGe4=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: xJh5HRbn741snUCbMX+RHgdNum29ocH1QT8bD3kB9Uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3706 (0xe7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Jul 18 17:55:19 2025 GMT Not After : Jul 25 17:55:19 2025 GMT Subject: CN=687a8a87-d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:fb:c0:75:24:5e:78:fb:1d:8b:21:d4:90: 51:ab:0a:96:0a:fa:42:1c:c0:f2:52:89:ab:6c:5f: 89:95:be:02:c3:da:e5:16:94:56:43:97:73:a3:7c: 2b:47:d2:4c:11:23:92:7f:89:d2:8c:eb:81:2d:08: cb:80:0e:d3:cc:d5:7a:4d:bd:6b:99:ba:6d:3b:b5: 75:53:02:d8:b9:29:bd:64:92:b4:e0:f6:ef:78:03: e3:b4:12:53:1a:1b:26:50:50:8b:93:53:18:1b:ab: c0:ed:7f:d4:cb:74:20:e9:b0:3a:d4:e7:74:e6:18: 66:e4:57:15:07:c3:89:85:7c:ad:6f:7e:67:54:d7: c0:32:ff:d3:77:b4:27:3c:02:56:b9:74:20:3b:f5: f6:4d:77:4d:52:3f:e3:eb:ea:a1:5e:8d:a7:df:7b: 23:5f:a4:73:79:1c:0c:3d:5a:ed:fc:60:13:b4:61: 5d:88:50:44:fb:73:ea:01:ee:7a:1b:eb:d3:11:75: 95:c0:ff:25:e2:19:fb:a7:63:49:20:85:eb:8c:c9: 14:00:ff:bb:98:ba:4a:95:dc:c0:86:82:80:f8:dd: b8:1f:51:0f:b0:84:a4:cc:22:1c:bf:8a:b1:07:08: 52:00:48:53:8e:90:66:b5:f8:5c:a2:2d:be:5b:29: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:62:97:A2:01:2E:12:DA:19:B2:AD:CB:19:4C:8E:28:D4:0B:74 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:43:20:0e:29:eb:02:5b:09:00:95:77:ec:ba:55:2c:60:31: 4a:e7:33:9e:af:21:2d:5e:b2:cd:0d:74:c8:b4:65:3a:83:36: 37:25:d6:2a:cf:0a:ce:be:f5:50:3a:8f:85:43:3e:22:3d:fb: 5b:42:62:7e:1b:37:14:b6:d9:81:1b:48:2c:e1:b8:a0:de:fa: 75:3f:1d:f1:49:30:16:88:a8:ba:e7:42:64:92:72:0b:06:a9: 16:ae:fa:8a:90:04:6e:09:0a:6e:3c:31:5e:14:8b:2b:1b:a8: b9:7b:65:63:f7:47:cb:05:71:a0:39:18:e8:8d:c5:65:fb:e9: cc:67:63:64:d0:65:ad:aa:ae:f5:2c:bf:62:47:af:a2:9d:00: 51:2b:dd:11:4b:1b:38:56:ff:4c:b8:06:f2:00:01:d1:b9:b9: 22:d7:f6:da:7c:54:2f:a9:a9:66:84:0f:71:3a:d1:42:88:b8: f2:c7:19:c4:af:1e:6e:64:ab:59:03:9e:53:b2:58:17:b9:1d: 25:ac:d1:1d:cf:41:c6:e1:58:11:28:22:8b:cc:57:94:c7:0a: b3:d3:9d:bc:b0:fe:2a:e1:a3:a4:a1:ed:15:0c:96:a9:d1:18: 55:7c:49:13:ec:c3:6d:db:91:85:7f:cf:5b:cf:56:c9:5c:b9: 9a:e9:36:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjUwNzE4MTc1NTE5WhcNMjUwNzI1MTc1NTE5WjAYMRYwFAYD VQQDEw02ODdhOGE4Ny1kMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUr7wHUkXnj7HYsh1JBRqwqWCvpCHMDyUomrbF+Jlb4Cw9rlFpRWQ5dzo3wr R9JMESOSf4nSjOuBLQjLgA7TzNV6Tb1rmbptO7V1UwLYuSm9ZJK04PbveAPjtBJT GhsmUFCLk1MYG6vA7X/Uy3Qg6bA61Od05hhm5FcVB8OJhXytb35nVNfAMv/Td7Qn PAJWuXQgO/X2TXdNUj/j6+qhXo2n33sjX6RzeRwMPVrt/GATtGFdiFBE+3PqAe56 G+vTEXWVwP8l4hn7p2NJIIXrjMkUAP+7mLpKldzAhoKA+N24H1EPsISkzCIcv4qx BwhSAEhTjpBmtfhcoi2+WylKSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkMYpei AS4S2hmyrcsZTI4o1At0MB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEQyAOKesCWwkAlXfsulUsYDFK5zOeryEtXrLNDXTItGU6gzY3JdYq zwrOvvVQOo+FQz4iPftbQmJ+GzcUttmBG0gs4big3vp1Px3xSTAWiKi650JkknIL BqkWrvqKkARuCQpuPDFeFIsrG6i5e2Vj90fLBXGgORjojcVl++nMZ2Nk0GWtqq71 LL9iR6+inQBRK90RSxs4Vv9MuAbyAAHRubki1/bafFQvqalmhA9xOtFCiLjyxxnE rx5uZKtZA55TslgXuR0lrNEdz0HG4VgRKCKLzFeUxwqz0528sP4q4aOkoe0VDJap 0RhVfEkT7MNt25GFf89bz1bJXLma6TZ8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:09 2025 by rpki-client