$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: L9YsrAxxD2unYXXd2WPC0lqx+lL7ncFkzy6ND5I3yeA= Subject key identifier: A1:6C:09:4B:68:7D:56:EE:5C:9B:E2:1C:F8:14:E7:1A:CE:2B:1E:61 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 046C Signing time: Fri 05 Sep 2025 00:27:27 +0000 Manifest this update: Fri 05 Sep 2025 00:27:26 +0000 Manifest next update: Fri 12 Sep 2025 00:27:26 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: Vu5v+5JIClRgppaykbw/+UYXyBOO522aA+0I0ebfBW4=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Sep 5 00:27:26 2025 GMT Not After : Sep 12 00:27:26 2025 GMT Subject: CN=68ba2e6f-33f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:57:88:50:7d:0b:9e:92:f5:c5:c5:e2:54:80: 39:25:39:d1:3d:70:ac:a7:fc:eb:9b:db:6d:f1:aa: 0e:a3:ea:71:97:a9:17:ba:df:95:7c:21:7a:7d:56: 74:89:50:41:fb:a5:30:ba:57:ec:f1:39:61:a5:48: ee:97:51:14:e0:5d:10:4a:78:cf:d0:d2:45:58:2c: 76:3e:24:34:56:99:28:43:20:28:11:a4:20:4e:82: 47:5f:29:08:fb:d8:8b:20:b0:1c:a3:48:53:6a:05: bd:fc:5a:26:fb:1e:73:ce:5a:99:cc:dc:51:45:0e: 67:86:7e:2a:e5:5c:c0:e1:66:fe:0d:9e:16:9d:ef: d4:4c:51:e5:87:c7:73:57:f5:f5:a1:f8:f4:d6:d4: 1f:ed:c9:5d:5a:59:98:62:4f:fa:aa:ae:b0:50:19: e2:20:f5:79:f9:66:27:f2:50:91:3a:9c:8e:c9:95: 7c:ad:c9:8b:68:3f:a6:cb:59:c3:fd:aa:92:79:43: 6e:ea:34:ac:5c:b5:11:8c:31:56:0a:ef:41:dd:67: a0:0d:6d:0d:84:15:69:80:d4:22:57:b7:48:2f:27: 27:d1:e0:27:df:d8:cb:20:5f:22:cf:6d:ca:4b:8a: 5d:b6:a7:fa:55:59:50:78:86:48:ce:2f:fe:8a:d4: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:09:4B:68:7D:56:EE:5C:9B:E2:1C:F8:14:E7:1A:CE:2B:1E:61 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1a:a5:89:df:05:e6:d6:a9:39:95:e5:d0:6f:6e:40:db:15: 28:5f:56:14:27:08:d8:75:3d:55:33:ca:5d:27:3f:29:35:69: 90:57:e6:b9:2d:5a:a3:d9:f7:75:63:55:66:37:80:1d:c6:d4: 43:42:8a:19:80:09:ab:0d:a9:de:27:79:ea:83:76:df:d2:ab: 99:f2:0a:3a:8b:87:fa:40:0b:f4:a2:12:18:05:7d:37:c9:1b: c3:42:cf:75:70:21:8c:e1:7e:32:8f:57:26:f7:90:08:51:4e: 35:7e:86:af:e8:3a:b2:95:e2:e8:74:46:d0:79:64:2c:1f:88: 1c:c3:9f:f2:e5:b0:bc:df:e6:ec:9b:c7:b9:55:d8:db:71:67: 2e:88:53:f3:5a:53:6c:86:f4:70:19:53:93:1b:8a:0d:6d:79: 9e:c5:b2:b7:79:ff:38:7c:54:4f:32:27:ff:c6:5c:86:d1:9e: 2c:a7:5b:9a:a2:35:ad:e2:a9:15:6a:04:bf:c8:ee:bb:b9:98: bd:82:20:4c:5b:a3:69:b8:9f:38:2e:e6:91:8d:d6:b2:d5:3d: 63:2a:78:3d:10:33:c7:f6:28:96:2b:60:5f:10:70:a8:d7:99: 55:bd:f4:ea:41:5b:ee:42:24:c6:a8:65:45:32:a8:31:04:12: fb:e6:f4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUwOTA1MDAyNzI2WhcNMjUwOTEyMDAyNzI2WjAYMRYwFAYD VQQDEw02OGJhMmU2Zi0zM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFeIUH0LnpL1xcXiVIA5JTnRPXCsp/zrm9tt8aoOo+pxl6kXut+VfCF6fVZ0 iVBB+6Uwulfs8TlhpUjul1EU4F0QSnjP0NJFWCx2PiQ0VpkoQyAoEaQgToJHXykI +9iLILAco0hTagW9/Fom+x5zzlqZzNxRRQ5nhn4q5VzA4Wb+DZ4Wne/UTFHlh8dz V/X1ofj01tQf7cldWlmYYk/6qq6wUBniIPV5+WYn8lCROpyOyZV8rcmLaD+my1nD /aqSeUNu6jSsXLURjDFWCu9B3WegDW0NhBVpgNQiV7dILycn0eAn39jLIF8iz23K S4pdtqf6VVlQeIZIzi/+itQz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFsCUto fVbuXJviHPgU5xrOKx5hMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTGqWJ3wXm1qk5leXQb25A2xUoX1YUJwjYdT1VM8pdJz8pNWmQV+a5 LVqj2fd1Y1VmN4AdxtRDQooZgAmrDaneJ3nqg3bf0quZ8go6i4f6QAv0ohIYBX03 yRvDQs91cCGM4X4yj1cm95AIUU41foav6DqyleLodEbQeWQsH4gcw5/y5bC83+bs m8e5VdjbcWcuiFPzWlNshvRwGVOTG4oNbXmexbK3ef84fFRPMif/xlyG0Z4sp1ua ojWt4qkVagS/yO67uZi9giBMW6NpuJ84LuaRjday1T1jKng9EDPH9iiWK2BfEHCo 15lVvfTqQVvuQiTGqGVFMqgxBBL75vRM -----END CERTIFICATE-----Generated at Fri Sep 5 10:42:34 2025 by rpki-client