$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: z0IWZH9oOxlQXz8weBOLM5FgPAClQVX0mWQZqkuGSqE= Subject key identifier: F7:3C:0B:53:E3:59:14:FC:79:26:FF:AA:AC:A9:26:F3:C6:2F:D1:63 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 39 Signing time: Sat 19 Jul 2025 07:50:47 +0000 Manifest this update: Sat 19 Jul 2025 07:50:46 +0000 Manifest next update: Sat 26 Jul 2025 07:50:46 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: iIwQYmdvBZzAXVN1s8yhZRxV7NHrFQAEMwsy7Bg58mo=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: LJYk/G3tN+KuXhxLY4vLUCBZc2tSEaFJTdOb4sX/qHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Jul 19 07:50:46 2025 GMT Not After : Jul 26 07:50:46 2025 GMT Subject: CN=687b4e56-5cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:1e:b5:cd:cb:36:2d:e5:74:af:9a:e9:3a: f8:94:07:e4:60:ba:d8:17:dc:0c:62:30:58:91:a4: 5e:8d:be:a8:35:7a:3a:b8:b3:c5:29:52:02:66:9a: 4d:72:a9:2d:85:eb:a6:29:1a:95:ff:94:f0:7a:55: 2e:69:37:c9:36:1e:44:32:5c:63:a9:47:9c:cc:4d: 26:dd:ba:da:01:5e:5b:d7:3c:2c:53:23:4d:fd:41: b9:c7:ad:05:bf:e7:71:80:9f:0e:28:0b:76:09:31: 7b:2e:29:b9:dd:3f:c4:e3:cf:75:7e:0f:48:15:2d: 2a:29:2e:ea:37:5c:15:60:0c:79:53:cf:2e:6e:16: 7a:3b:bd:bc:9c:d1:f8:45:30:98:01:ba:b3:fe:43: 69:f4:c6:b2:25:66:ab:4f:cc:e3:fc:9b:b3:52:36: 3a:f4:73:59:84:e0:4a:99:f7:8d:8e:ac:5c:b8:4b: 22:73:30:fa:82:5f:6b:aa:09:c4:a8:d8:bd:4d:51: 7a:c6:8c:ba:0c:1b:fc:c5:8e:f6:70:8d:3f:4b:17: 05:1a:2c:0b:43:63:15:6b:8f:da:5a:cb:79:9e:cb: 63:d1:9a:97:0f:37:49:8b:fc:18:20:21:ed:6e:83: 2d:1d:84:09:e4:78:e7:97:74:1d:8b:b4:83:50:c4: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3C:0B:53:E3:59:14:FC:79:26:FF:AA:AC:A9:26:F3:C6:2F:D1:63 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7c:35:22:62:5d:65:21:ed:bb:b6:15:75:f3:1b:3e:da:8d: ba:f8:53:c8:b8:7a:f4:9e:31:37:6f:3b:94:1c:0a:5c:8c:5d: 23:9f:90:c6:85:5b:c9:f0:a3:e3:1c:21:77:54:45:3b:5c:ff: 2c:0d:4c:69:b9:92:58:4d:57:6a:62:0e:2d:a5:df:ed:d1:99: 2f:78:a7:49:3e:df:ea:38:b6:d6:f2:95:c2:18:20:6b:e1:de: 84:ba:0f:0b:b3:fe:1c:4a:be:9a:d3:3e:23:4b:97:79:c8:10: 28:3a:94:39:64:82:59:06:ad:f2:12:72:15:17:86:ee:2f:f3: 3d:0e:54:04:0a:82:3f:b7:de:67:16:f6:18:c3:3f:4e:3e:a7: 64:c6:d3:6d:cc:ce:2b:95:f8:dd:f4:eb:cb:74:4b:56:33:d9: 2b:3c:5a:9c:9b:2f:46:2a:5e:56:5b:e1:c2:58:cf:a6:db:e1: e8:56:86:a2:49:5b:75:7f:d3:ef:45:24:6f:ec:58:b7:e1:f4: bb:8f:ed:31:7f:26:2c:0b:0d:03:3e:f7:c4:d6:90:a4:f0:0f: 78:cc:f7:b0:84:46:c7:3f:ad:56:78:09:37:30:d0:3a:6b:76: 93:a6:11:8e:e0:6a:2f:08:69:94:09:26:88:fe:3d:8a:d8:af: 03:ab:6b:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTA3MTkwNzUwNDZaFw0yNTA3MjYwNzUwNDZaMBgxFjAUBgNV BAMTDTY4N2I0ZTU2LTVjZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1mB61zcs2LeV0r5rpOviUB+RgutgX3AxiMFiRpF6Nvqg1ejq4s8UpUgJmmk1y qS2F66YpGpX/lPB6VS5pN8k2HkQyXGOpR5zMTSbdutoBXlvXPCxTI039QbnHrQW/ 53GAnw4oC3YJMXsuKbndP8Tjz3V+D0gVLSopLuo3XBVgDHlTzy5uFno7vbyc0fhF MJgBurP+Q2n0xrIlZqtPzOP8m7NSNjr0c1mE4EqZ942OrFy4SyJzMPqCX2uqCcSo 2L1NUXrGjLoMG/zFjvZwjT9LFwUaLAtDYxVrj9pay3mey2PRmpcPN0mL/BggIe1u gy0dhAnkeOeXdB2LtINQxL0rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9zwLU+NZ FPx5Jv+qrKkm88Yv0WMwHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE58NSJiXWUh7bu2FXXzGz7ajbr4U8i4evSeMTdvO5QcClyMXSOfkMaF W8nwo+McIXdURTtc/ywNTGm5klhNV2piDi2l3+3RmS94p0k+3+o4ttbylcIYIGvh 3oS6Dwuz/hxKvprTPiNLl3nIECg6lDlkglkGrfISchUXhu4v8z0OVAQKgj+33mcW 9hjDP04+p2TG023MziuV+N3068t0S1Yz2Ss8WpybL0YqXlZb4cJYz6bb4ehWhqJJ W3V/0+9FJG/sWLfh9LuP7TF/JiwLDQM+98TWkKTwD3jM97CERsc/rVZ4CTcw0Dpr dpOmEY7gai8IaZQJJoj+PYrYrwOra0w= -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:08 2025 by rpki-client