$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: lyLX1t0aEm+HkXwOBoUImY2/cdAdh6+UAKsFf45BZ/c= Subject key identifier: 6B:CD:53:47:9C:D1:AB:11:17:37:77:08:A2:F7:F5:F3:76:BD:0E:E0 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 067C Signing time: Wed 20 Aug 2025 22:31:25 +0000 Manifest this update: Wed 20 Aug 2025 22:31:25 +0000 Manifest next update: Wed 27 Aug 2025 22:31:25 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: UQWq3KjygxGjOeX8SptLtd9ZYNgv1D5YOT2AW8cgQLo=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Aug 20 22:31:25 2025 GMT Not After : Aug 27 22:31:25 2025 GMT Subject: CN=68a64cbd-5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:d5:76:4a:f0:0f:e8:e6:30:43:ae:e0:0a: 40:25:e6:4a:5e:00:5f:f1:5d:44:0f:c0:1e:68:15: 6a:f2:a1:78:ac:41:66:9a:6a:f6:20:01:f6:4c:fe: 66:92:6f:3e:f7:f7:cc:70:5c:5e:d6:e2:06:b0:05: d7:51:f9:1e:36:39:3c:7e:a9:66:29:27:1e:0b:5f: a3:0d:6f:6f:33:5d:16:6e:37:77:17:34:04:07:71: 92:cf:37:4e:bf:8b:30:ef:02:a5:70:47:74:d6:30: a3:67:22:d5:c7:b9:a8:9d:d8:c6:5d:40:7f:1f:aa: a3:fb:d8:61:3c:f9:70:53:a6:4a:29:37:ca:c3:6f: 18:cb:b8:2f:ce:e0:8e:0c:50:aa:46:a2:e9:ea:f8: 84:c9:82:7f:e4:9e:dd:4c:3a:fd:d4:34:9c:8c:e6: c7:f9:ed:40:05:a8:85:1e:3f:76:42:ae:63:fa:c9: f5:78:09:66:c0:e2:3e:3e:4d:ae:36:e4:a5:92:fb: c9:3a:2d:ca:2b:0b:97:5b:cc:57:37:0a:7f:ab:70: c9:f0:1e:37:86:35:23:07:4a:43:43:9c:cf:06:38: df:29:9e:d2:25:03:86:d0:5b:fb:2a:5e:a5:71:66: c5:4c:39:3c:00:d0:dc:4d:5a:f1:49:80:11:4c:81: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:53:47:9C:D1:AB:11:17:37:77:08:A2:F7:F5:F3:76:BD:0E:E0 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:bb:fa:e4:01:17:05:74:90:2a:58:17:ca:48:2f:c6:be:ca: 6e:5c:dd:cd:ad:04:2f:9f:94:1b:ce:d4:37:13:8f:cc:c2:e7: 2e:10:c6:3d:0d:8d:44:ee:3b:bf:e6:bb:9f:96:68:52:e1:37: 7f:08:0b:fb:89:33:cd:a2:f1:4c:98:60:08:47:79:ca:1d:2f: 1e:c7:6c:38:3d:67:44:e1:86:d5:62:5c:6b:a8:d3:38:fd:91: 43:48:85:64:9b:e9:0f:41:40:b1:79:e8:7c:43:e2:82:a7:aa: c2:15:72:30:65:0d:ca:6b:c4:6a:23:70:aa:d2:29:95:e5:d7: b0:ac:0c:c1:f6:ea:ee:fc:1c:61:88:f7:48:2f:39:5a:a5:72: aa:56:a1:7c:c1:d9:97:36:46:dd:a2:b2:73:47:45:a6:be:3a: 1b:9d:3f:2a:07:60:57:bb:18:09:f3:0c:10:98:ff:bd:4c:3f: 4a:7e:76:99:6d:39:cc:9d:a6:72:2d:19:a4:e9:5f:7c:5a:53: 56:d4:5c:54:ae:bd:c1:27:57:45:51:83:68:0b:60:b6:bd:2b: 2d:9f:da:a1:1a:f3:ef:e0:6b:f2:6a:4d:f6:06:2e:8b:b9:08: a8:12:1c:3f:89:39:49:2e:38:63:ff:ab:ae:e1:b4:35:3a:50: 9a:d4:cb:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjUwODIwMjIzMTI1WhcNMjUwODI3MjIzMTI1WjAYMRYwFAYD VQQDEw02OGE2NGNiZC01ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7zVdkrwD+jmMEOu4ApAJeZKXgBf8V1ED8AeaBVq8qF4rEFmmmr2IAH2TP5m km8+9/fMcFxe1uIGsAXXUfkeNjk8fqlmKSceC1+jDW9vM10Wbjd3FzQEB3GSzzdO v4sw7wKlcEd01jCjZyLVx7mondjGXUB/H6qj+9hhPPlwU6ZKKTfKw28Yy7gvzuCO DFCqRqLp6viEyYJ/5J7dTDr91DScjObH+e1ABaiFHj92Qq5j+sn1eAlmwOI+Pk2u NuSlkvvJOi3KKwuXW8xXNwp/q3DJ8B43hjUjB0pDQ5zPBjjfKZ7SJQOG0Fv7Kl6l cWbFTDk8ANDcTVrxSYARTIEOGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvNU0ec 0asRFzd3CKL39fN2vQ7gMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCou/rkARcFdJAqWBfKSC/GvspuXN3NrQQvn5QbztQ3E4/MwucuEMY9 DY1E7ju/5ruflmhS4Td/CAv7iTPNovFMmGAIR3nKHS8ex2w4PWdE4YbVYlxrqNM4 /ZFDSIVkm+kPQUCxeeh8Q+KCp6rCFXIwZQ3Ka8RqI3Cq0imV5dewrAzB9uru/Bxh iPdILzlapXKqVqF8wdmXNkbdorJzR0WmvjobnT8qB2BXuxgJ8wwQmP+9TD9KfnaZ bTnMnaZyLRmk6V98WlNW1FxUrr3BJ1dFUYNoC2C2vSstn9qhGvPv4Gvyak32Bi6L uQioEhw/iTlJLjhj/6uu4bQ1OlCa1Mvm -----END CERTIFICATE-----Generated at Thu Aug 21 07:23:15 2025 by rpki-client