$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: GHrCGD06QTPJUXpx7mOO6y7+XuimUMiiUCp7DEO6t6E= Subject key identifier: 7A:45:27:4B:4F:2A:9E:58:73:EA:A2:B2:04:AE:2F:4F:A9:C7:9D:A0 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 023C Signing time: Sat 19 Jul 2025 02:18:14 +0000 Manifest this update: Sat 19 Jul 2025 02:18:13 +0000 Manifest next update: Sat 26 Jul 2025 02:18:13 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: ZNiSIRzyYJLeSsQOU5dnoizUt08RPcj43BiHCW+I+CY=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Jul 19 02:18:13 2025 GMT Not After : Jul 26 02:18:13 2025 GMT Subject: CN=687b0065-5dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:d2:7e:df:33:07:93:3c:7f:b2:df:5a:26: 2a:ff:35:be:42:d6:db:34:78:73:d8:d8:46:0b:6b: 39:99:19:a8:0f:51:f3:3c:97:c6:8d:a8:42:6a:3b: 4a:dc:99:85:b4:f7:e3:9d:2b:87:66:64:53:4f:e9: 16:4d:a9:ff:6d:d0:36:7f:11:8a:ec:4a:84:42:e6: 4f:0d:35:b0:38:ca:53:e4:21:64:d5:3e:ff:68:54: 08:17:a1:aa:5e:20:4b:de:84:fb:0e:6f:65:25:80: 2b:b0:b3:b8:3b:05:3c:45:28:3c:b2:94:c6:86:de: d2:90:5f:17:18:97:f1:19:bf:47:f1:7e:af:40:3b: 6f:2a:b4:15:47:e7:6e:5d:2f:85:30:d1:e9:40:77: fd:b0:01:69:74:05:23:dc:e4:cd:9d:70:a0:e6:c1: ba:2b:f8:55:ec:9a:ca:46:42:38:ae:3c:a2:62:a1: d4:49:8d:f7:31:9b:56:a3:c3:de:c2:24:2d:07:39: 5e:6a:00:f0:b3:4d:10:d5:a3:ab:a9:7b:64:af:96: 8a:98:09:5a:c4:c7:da:f2:67:88:03:69:11:93:3d: 9a:0a:d8:46:6c:85:52:43:30:aa:1c:5b:83:45:d2: 60:38:92:c5:f3:fe:2a:1d:c1:7a:9d:22:e2:c5:ab: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:45:27:4B:4F:2A:9E:58:73:EA:A2:B2:04:AE:2F:4F:A9:C7:9D:A0 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:70:68:ff:72:4c:2e:3d:f0:69:56:03:95:11:20:fe:3f:b9: 0a:4e:71:50:5e:17:0e:60:6d:40:ff:20:89:a7:d9:54:5f:00: a9:7c:76:ad:3b:47:58:7f:7f:df:96:0d:00:a0:45:a5:d1:13: 0b:f1:0a:04:fc:f1:74:7f:47:30:14:90:fa:7b:62:13:45:7f: 79:88:3c:83:62:77:ca:b8:3e:26:d3:82:7a:69:45:cc:1f:ac: 21:2f:6b:9b:00:22:e7:d7:2d:32:38:7a:52:d6:8d:67:58:2e: 6b:94:c3:f1:79:2b:c1:95:98:3e:bb:4a:47:00:f5:16:1e:d9: a6:8f:b8:0c:bf:b4:4e:20:62:15:ec:59:4a:8c:d4:0e:7a:6d: 8c:2c:0f:af:c8:b6:76:8a:5b:d0:29:f8:86:48:d8:3d:b1:50: ca:c4:97:21:4e:2e:f5:4a:9c:00:82:b7:ec:c9:92:1a:6e:66: d7:34:c9:bc:49:2d:13:81:ef:7a:58:26:83:48:c0:a3:df:45: 56:33:cb:19:2e:fa:1a:e4:b0:7c:67:36:f1:e1:11:0d:49:36: 2b:55:2f:70:b0:80:7f:10:49:1a:57:b7:af:e6:78:f8:65:7a: 33:0b:45:a5:f4:29:0c:de:73:2e:d1:b5:ac:56:19:f4:ce:87: 94:a5:bb:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwNzE5MDIxODEzWhcNMjUwNzI2MDIxODEzWjAYMRYwFAYD VQQDEw02ODdiMDA2NS01ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYDSft8zB5M8f7LfWiYq/zW+QtbbNHhz2NhGC2s5mRmoD1HzPJfGjahCajtK 3JmFtPfjnSuHZmRTT+kWTan/bdA2fxGK7EqEQuZPDTWwOMpT5CFk1T7/aFQIF6Gq XiBL3oT7Dm9lJYArsLO4OwU8RSg8spTGht7SkF8XGJfxGb9H8X6vQDtvKrQVR+du XS+FMNHpQHf9sAFpdAUj3OTNnXCg5sG6K/hV7JrKRkI4rjyiYqHUSY33MZtWo8Pe wiQtBzleagDws00Q1aOrqXtkr5aKmAlaxMfa8meIA2kRkz2aCthGbIVSQzCqHFuD RdJgOJLF8/4qHcF6nSLixauN5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpFJ0tP Kp5Yc+qisgSuL0+px52gMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEcGj/ckwuPfBpVgOVESD+P7kKTnFQXhcOYG1A/yCJp9lUXwCpfHat O0dYf3/flg0AoEWl0RML8QoE/PF0f0cwFJD6e2ITRX95iDyDYnfKuD4m04J6aUXM H6whL2ubACLn1y0yOHpS1o1nWC5rlMPxeSvBlZg+u0pHAPUWHtmmj7gMv7ROIGIV 7FlKjNQOem2MLA+vyLZ2ilvQKfiGSNg9sVDKxJchTi71SpwAgrfsyZIabmbXNMm8 SS0Tge96WCaDSMCj30VWM8sZLvoa5LB8Zzbx4RENSTYrVS9wsIB/EEkaV7ev5nj4 ZXozC0Wl9CkM3nMu0bWsVhn0zoeUpbti -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:20 2025 by rpki-client