$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: +UB+w1iEZ5ukzEpz4fxV4e8EYg85RifeKmYaP7vMPDE= Subject key identifier: 1A:D9:4C:B4:FA:FA:43:7F:23:10:95:57:4B:32:CE:8D:5C:81:D8:0E Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0A13 Signing time: Sun 20 Jul 2025 19:56:09 +0000 Manifest this update: Sun 20 Jul 2025 19:56:08 +0000 Manifest next update: Sun 27 Jul 2025 19:56:08 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: o9uTvE7EYdbbHfaY19HXkAYfsZ8fXD6AjdjzHl46rE0=) 2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: TxCwNFrh+xkaqDR3M5kqqPa5bX7FhYwp1p0wkxa1CxU=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: JxcjLdYbfNpLt4XJbaeEwHRAAk7SbV4Cw+ExyqNKBV4=) 4: C8A0E422831611EA95762453C4F9AE02.roa (hash: yUwouY97arbHx1ysSRkQtB3/fVJX2BMSgtA5eI1eKIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Jul 20 19:56:08 2025 GMT Not After : Jul 27 19:56:08 2025 GMT Subject: CN=687d49d9-2ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:59:7e:ac:30:c3:ba:61:47:b5:2e:c2:b7: d5:9b:9f:d9:db:4c:92:c2:22:44:fa:5e:49:5e:95: 05:5e:87:a5:55:72:47:8a:ab:34:b7:5e:2b:b7:f0: 83:f3:27:9a:22:1a:1e:13:c9:67:ad:ab:79:bc:73: cf:ca:b1:95:e7:d3:7e:a0:23:d3:27:44:73:64:3e: ce:af:64:b7:45:42:e5:bf:72:fc:a6:3e:72:4e:9a: 76:32:28:10:ad:0b:91:da:f1:db:21:85:44:e1:a7: bd:ff:73:4e:be:33:68:41:e0:cc:a3:3d:ab:5f:37: 90:7d:da:16:76:e7:83:7f:33:66:27:38:52:43:a9: c9:b8:ca:3d:83:23:a1:a7:bb:9b:0c:e7:68:cb:d7: ad:a8:d1:af:16:e5:cb:57:d9:16:db:20:e9:57:c5: 2c:00:9b:38:db:af:20:01:44:f0:cf:4b:1c:a0:e3: 61:3d:31:a4:16:f8:be:a3:c1:e2:4e:1f:b5:34:43: 18:c9:ad:69:3a:54:2e:22:c9:4f:c0:a7:39:57:ed: cc:ec:63:de:5d:15:08:4c:5c:e6:f0:45:92:6b:48: f1:f5:f6:ab:b9:a6:8a:eb:75:66:85:10:59:e6:67: 15:e7:67:40:29:c9:e5:d8:56:75:ec:e7:99:a9:19: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D9:4C:B4:FA:FA:43:7F:23:10:95:57:4B:32:CE:8D:5C:81:D8:0E X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:91:06:b7:df:4b:bc:68:ce:5d:a1:c5:31:6b:80:24:49:95: bb:e8:57:85:ca:02:13:6c:c2:7c:5d:c5:9b:68:f4:58:73:e7: 98:dc:df:5f:f7:b6:9d:bd:32:3d:df:80:b6:a9:a1:7b:a5:ed: f6:f7:9d:f5:e4:70:4d:4b:9e:f0:b6:19:d1:44:a4:20:ef:2e: c7:3f:4c:04:1a:58:2b:e3:f8:05:a5:4d:c3:0a:75:a6:0a:f6: 73:4a:46:d1:b6:b5:74:52:b0:75:79:01:53:09:78:0f:9e:7b: a2:07:8e:52:1e:d9:6c:3a:6d:a0:9d:0c:a1:72:8e:2c:d0:ca: ba:f0:6e:43:60:a9:5b:40:45:24:de:ea:a7:9a:97:3a:97:aa: b1:7b:1e:f1:9c:cd:99:8e:d1:5c:59:f9:54:c8:a6:40:a9:0d: 59:34:96:f9:ec:06:75:73:4c:9a:a8:76:23:91:5a:89:06:69: 0f:b8:c2:c0:3c:93:42:b3:fc:06:8e:fe:cb:35:f4:7f:3e:46: e5:c4:69:c7:e0:b4:18:1d:75:fb:4a:56:57:c4:d2:a5:73:46: f2:81:b1:43:0e:a9:fb:27:e2:86:23:28:04:0a:8e:7b:12:38: 97:e4:4d:49:97:0d:6c:bb:7b:53:e1:24:c8:a0:c4:1b:6b:94: 2e:ea:73:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjUwNzIwMTk1NjA4WhcNMjUwNzI3MTk1NjA4WjAYMRYwFAYD VQQDEw02ODdkNDlkOS0yYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp9Zfqwww7phR7UuwrfVm5/Z20ySwiJE+l5JXpUFXoelVXJHiqs0t14rt/CD 8yeaIhoeE8lnrat5vHPPyrGV59N+oCPTJ0RzZD7Or2S3RULlv3L8pj5yTpp2MigQ rQuR2vHbIYVE4ae9/3NOvjNoQeDMoz2rXzeQfdoWdueDfzNmJzhSQ6nJuMo9gyOh p7ubDOdoy9etqNGvFuXLV9kW2yDpV8UsAJs4268gAUTwz0scoONhPTGkFvi+o8Hi Th+1NEMYya1pOlQuIslPwKc5V+3M7GPeXRUITFzm8EWSa0jx9faruaaK63VmhRBZ 5mcV52dAKcnl2FZ17OeZqRkJ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrZTLT6 +kN/IxCVV0syzo1cgdgOMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5kQa330u8aM5docUxa4AkSZW76FeFygITbMJ8XcWbaPRYc+eY3N9f 97advTI934C2qaF7pe3295315HBNS57wthnRRKQg7y7HP0wEGlgr4/gFpU3DCnWm CvZzSkbRtrV0UrB1eQFTCXgPnnuiB45SHtlsOm2gnQyhco4s0Mq68G5DYKlbQEUk 3uqnmpc6l6qxex7xnM2ZjtFcWflUyKZAqQ1ZNJb57AZ1c0yaqHYjkVqJBmkPuMLA PJNCs/wGjv7LNfR/PkblxGnH4LQYHXX7SlZXxNKlc0bygbFDDqn7J+KGIygECo57 EjiX5E1Jlw1su3tT4STIoMQba5Qu6nMO -----END CERTIFICATE-----Generated at Mon Jul 21 07:08:59 2025 by rpki-client