$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: YY6ExYXUVoLO/2aYcvSclm46rtaZdMWN+5CgIcjxH1M= Subject key identifier: 7E:E2:D4:2F:8C:79:A2:DD:79:BE:1B:3F:63:A6:CF:9E:D0:9E:97:DF Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 01B5 Signing time: Mon 21 Jul 2025 03:28:52 +0000 Manifest this update: Mon 21 Jul 2025 03:28:51 +0000 Manifest next update: Mon 28 Jul 2025 03:28:51 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: RqDqsMXNcHYKHtL7SPI4irbozDHKQ+bl/8qr9Poq67w=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: Hs65sLSKy0xl32E/CqZU6pbUw1OHGtFrgMZh2AD/QUA=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Jul 21 03:28:51 2025 GMT Not After : Jul 28 03:28:51 2025 GMT Subject: CN=687db3f3-ee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:87:f0:d1:87:f7:a9:2c:87:0f:32:4d:46: f5:ce:99:5a:fc:14:78:4e:21:1c:7f:47:de:f9:db: 7d:a2:55:be:53:4a:47:d3:a4:79:c5:00:ca:84:ca: 26:1e:ec:8b:a1:c5:be:5e:cc:b2:07:7f:4a:d9:81: 82:b7:29:88:ec:86:5c:87:94:0b:9d:6b:e9:a5:02: 34:2f:b5:47:ca:3f:6e:77:4a:ff:8a:91:33:ac:ce: 3b:5c:31:63:8e:d1:ce:e2:c5:c4:26:5a:1a:4c:a5: 05:fc:1f:81:13:62:ca:c0:f1:d2:9c:2c:c8:dd:83: 4a:78:7a:ca:50:f8:49:0f:58:53:1f:10:e7:02:68: c2:f0:fa:1c:72:ca:1d:b1:03:46:f8:f7:83:36:d1: 7a:e6:a5:e0:e3:06:d8:8a:93:d2:f4:fb:06:a1:2d: fa:83:80:24:74:62:b1:6e:ad:53:9b:15:8c:44:12: 59:cb:a6:9c:5d:9c:6c:bb:c4:90:34:bf:4c:9a:6a: 70:b5:69:ec:9f:04:eb:67:b1:8d:55:cd:9a:b0:72: 9a:b9:f1:c0:9f:5f:0c:c2:91:87:0b:9c:9c:72:83: 93:1f:a1:09:f9:b4:2f:16:a6:76:b7:46:98:01:85: 72:12:ad:d2:a1:e3:f6:cf:08:be:07:e5:5b:6b:ff: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E2:D4:2F:8C:79:A2:DD:79:BE:1B:3F:63:A6:CF:9E:D0:9E:97:DF X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:8c:d8:d3:17:64:70:6e:2f:57:d4:cb:80:fb:74:01:f5:42: 11:c4:68:69:19:2e:69:40:3d:3c:24:59:96:66:f7:93:51:ca: 85:9e:26:80:bc:dc:79:ed:50:72:10:67:0a:5c:1c:1e:f1:ce: b4:b1:38:e3:62:f0:1f:3e:e7:7b:4e:02:72:ba:3b:cb:7c:f2: e0:4d:96:f4:63:87:00:39:4d:46:7a:ab:ee:2d:4e:4a:cf:e6: a7:b1:ee:ee:06:42:16:71:4c:54:6d:d7:b1:d2:57:b2:f5:7b: 0d:fb:9e:59:26:88:e0:22:d0:3a:30:0b:34:39:19:d3:01:06: 51:b1:39:11:9d:1e:c7:39:b4:ce:5d:25:78:f5:fe:d9:88:91: 2e:74:6d:91:e9:a4:20:8b:af:a1:20:1a:32:81:07:a2:88:47: a8:3f:1f:0c:76:e5:47:84:19:52:d7:e5:be:84:dc:04:20:ae: 0a:3e:59:35:95:1a:1b:ea:a5:b9:48:66:93:0c:43:62:00:54: 7c:19:fe:b3:3b:56:ed:5b:b0:a0:d7:eb:55:db:6e:7b:e1:d1: 8c:76:55:bf:94:2b:c5:ae:5d:50:06:81:90:34:bf:09:a3:8d: 0a:4a:19:87:70:77:b7:8b:84:f0:ae:43:7e:a3:6f:4f:c6:75: 65:3e:c9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwNzIxMDMyODUxWhcNMjUwNzI4MDMyODUxWjAYMRYwFAYD VQQDEw02ODdkYjNmMy1lZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpOH8NGH96kshw8yTUb1zpla/BR4TiEcf0fe+dt9olW+U0pH06R5xQDKhMom HuyLocW+XsyyB39K2YGCtymI7IZch5QLnWvppQI0L7VHyj9ud0r/ipEzrM47XDFj jtHO4sXEJloaTKUF/B+BE2LKwPHSnCzI3YNKeHrKUPhJD1hTHxDnAmjC8Poccsod sQNG+PeDNtF65qXg4wbYipPS9PsGoS36g4AkdGKxbq1TmxWMRBJZy6acXZxsu8SQ NL9MmmpwtWnsnwTrZ7GNVc2asHKaufHAn18MwpGHC5yccoOTH6EJ+bQvFqZ2t0aY AYVyEq3SoeP2zwi+B+Vba/9S6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7i1C+M eaLdeb4bP2Omz57QnpffMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwjNjTF2Rwbi9X1MuA+3QB9UIRxGhpGS5pQD08JFmWZveTUcqFniaA vNx57VByEGcKXBwe8c60sTjjYvAfPud7TgJyujvLfPLgTZb0Y4cAOU1GeqvuLU5K z+anse7uBkIWcUxUbdex0ley9XsN+55ZJojgItA6MAs0ORnTAQZRsTkRnR7HObTO XSV49f7ZiJEudG2R6aQgi6+hIBoygQeiiEeoPx8MduVHhBlS1+W+hNwEIK4KPlk1 lRob6qW5SGaTDENiAFR8Gf6zO1btW7Cg1+tV22574dGMdlW/lCvFrl1QBoGQNL8J o40KShmHcHe3i4TwrkN+o29PxnVlPslU -----END CERTIFICATE-----Generated at Wed Jul 23 04:20:40 2025 by rpki-client