$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: YBmhRpkbVdtKwJstL8R67dVtkiMU8uWv1LHP4WcR9wY= Subject key identifier: 42:0B:2B:44:6F:BF:B7:14:57:F2:18:85:D7:AF:A0:71:95:70:1F:F7 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 023D Signing time: Mon 21 Jul 2025 02:13:12 +0000 Manifest this update: Mon 21 Jul 2025 02:13:12 +0000 Manifest next update: Mon 28 Jul 2025 02:13:12 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: 8bFMkY45v1S2vNLnCt8LcLGnnetuESP0/MBPEPvjJaw=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Jul 21 02:13:12 2025 GMT Not After : Jul 28 02:13:12 2025 GMT Subject: CN=687da238-150a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:3e:f8:89:6d:df:f3:64:d7:38:e6:bb:67: 78:a4:ac:ed:27:67:92:ed:d9:79:bc:26:2a:23:10: a5:30:73:96:d2:55:e6:bb:30:15:27:c7:b7:74:a3: f8:c8:2f:08:87:e6:40:32:4e:0a:23:eb:48:eb:37: a8:cd:27:a7:75:03:0a:7a:d1:10:5a:55:e3:2a:bd: 31:f9:98:70:ec:c5:61:9d:59:7c:8a:0f:10:83:8c: 0f:4c:0e:d6:12:ca:02:cf:39:51:44:50:55:18:08: bf:af:1f:82:b9:70:53:1c:dd:7c:d2:31:32:40:6d: c7:1f:8b:26:6a:bb:84:d4:4c:60:28:60:c1:98:fe: 10:36:b7:2f:6f:3b:05:59:cc:9f:78:62:eb:cf:df: 3c:af:41:b5:73:c6:7f:05:e9:38:99:4f:1f:13:e8: 02:64:ca:77:57:fc:6a:66:2c:8c:10:40:59:41:a7: 49:7d:cf:41:ec:3f:ef:9a:bd:c4:af:7a:7b:63:1a: 1e:2b:5a:7b:5d:d5:99:9b:b7:38:a0:2f:91:25:c1: 13:3a:c3:ec:a3:c7:4f:42:e4:54:c3:f9:8f:25:5d: fb:7f:9b:d8:1e:ba:56:7b:96:25:54:cb:aa:17:79: 74:6a:5c:86:a8:4f:19:5a:8a:10:5d:ab:5f:54:9c: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0B:2B:44:6F:BF:B7:14:57:F2:18:85:D7:AF:A0:71:95:70:1F:F7 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:09:9a:a4:ff:3d:65:c5:e1:16:65:64:06:43:83:2b:97:eb: 37:8f:53:b4:2e:75:8b:20:5b:b6:34:c7:aa:fb:be:00:cd:64: 3b:df:d3:4f:26:8e:ab:8f:15:9a:ab:eb:65:fb:35:50:7a:8c: ac:61:b3:76:de:a8:d6:84:07:ea:bc:bd:ff:07:a5:02:2e:f6: 12:1d:8e:06:8c:68:07:b7:70:35:d8:a6:27:9e:ff:b7:65:91: 9d:09:7b:2b:8c:d3:bb:78:a3:bb:9d:39:74:d0:3e:58:49:37: 68:93:27:42:41:78:f4:4c:db:13:cd:df:53:e2:5b:5d:e0:47: c0:87:38:ac:ff:c6:05:f5:61:e2:78:ae:3f:bd:8f:c8:1e:5b: 3b:21:67:09:da:d4:7f:83:77:98:f4:7f:1b:5f:db:cb:86:0a: 63:5d:36:fe:9a:65:b2:29:bb:b0:33:8d:f7:48:9e:f2:67:0f: 5e:99:02:57:f7:a3:8f:5b:17:69:b8:7b:ec:91:a9:79:29:1f: 81:48:57:47:9a:72:4e:3d:06:3b:42:90:76:e7:40:58:db:dd: 54:57:aa:9c:22:11:1b:6c:0e:03:6a:60:44:37:de:c4:6b:1f: 8a:cc:c2:36:67:e9:26:bc:77:9d:07:8c:28:da:2e:b7:0b:f4: 52:b8:98:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNzIxMDIxMzEyWhcNMjUwNzI4MDIxMzEyWjAYMRYwFAYD VQQDEw02ODdkYTIzOC0xNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRA++Ilt3/Nk1zjmu2d4pKztJ2eS7dl5vCYqIxClMHOW0lXmuzAVJ8e3dKP4 yC8Ih+ZAMk4KI+tI6zeozSendQMKetEQWlXjKr0x+Zhw7MVhnVl8ig8Qg4wPTA7W EsoCzzlRRFBVGAi/rx+CuXBTHN180jEyQG3HH4smaruE1ExgKGDBmP4QNrcvbzsF WcyfeGLrz988r0G1c8Z/Bek4mU8fE+gCZMp3V/xqZiyMEEBZQadJfc9B7D/vmr3E r3p7YxoeK1p7XdWZm7c4oC+RJcETOsPso8dPQuRUw/mPJV37f5vYHrpWe5YlVMuq F3l0alyGqE8ZWooQXatfVJxfEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEILK0Rv v7cUV/IYhdevoHGVcB/3MB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCCZqk/z1lxeEWZWQGQ4Mrl+s3j1O0LnWLIFu2NMeq+74AzWQ739NP Jo6rjxWaq+tl+zVQeoysYbN23qjWhAfqvL3/B6UCLvYSHY4GjGgHt3A12KYnnv+3 ZZGdCXsrjNO7eKO7nTl00D5YSTdokydCQXj0TNsTzd9T4ltd4EfAhzis/8YF9WHi eK4/vY/IHls7IWcJ2tR/g3eY9H8bX9vLhgpjXTb+mmWyKbuwM433SJ7yZw9emQJX 96OPWxdpuHvskal5KR+BSFdHmnJOPQY7QpB250BY291UV6qcIhEbbA4DamBEN97E ax+KzMI2Z+kmvHedB4wo2i63C/RSuJie -----END CERTIFICATE-----Generated at Tue Jul 22 05:02:11 2025 by rpki-client