$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: S/VvvkRr8JdvdgRB9doUvI3xMsJYmEhIgqho0AHhHAI= Subject key identifier: 07:68:06:E8:73:D3:D0:3E:48:B7:9C:3A:C4:95:7B:5D:EC:1F:E6:C1 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 064F Signing time: Sat 06 Sep 2025 23:14:29 +0000 Manifest this update: Sat 06 Sep 2025 23:14:29 +0000 Manifest next update: Sat 13 Sep 2025 23:14:29 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: WI11uwFkIx9fTuG/JJe/UYRhUBzO1QRKXxp5KaJGLg8=) 2: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 3: E81D407A84E111F0BD6D9525C4F9AE02.roa (hash: gAkZlfREF6dDXBi5+4FArRtO8IoYltgxsB8gMPbG7rI=) 4: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 5: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 6: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Sep 6 23:14:29 2025 GMT Not After : Sep 13 23:14:29 2025 GMT Subject: CN=68bcc055-8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:50:40:2d:34:cc:5e:21:73:2d:ca:71:21: 8a:5b:3e:97:f3:86:88:20:64:47:c7:9b:2a:32:c6: b5:13:0e:79:5d:03:42:27:8d:cf:8d:cd:58:0a:08: c7:68:60:bf:9c:46:10:95:0b:03:c7:56:48:8e:4f: ca:1d:75:e2:2d:7b:2d:e3:85:bc:79:25:d8:ec:f9: 04:65:3c:92:3d:59:82:f6:2f:47:3f:0c:82:aa:61: 24:fd:a7:f2:6b:7d:82:fb:f4:3a:76:18:bf:81:44: 81:88:71:a9:92:2f:03:72:39:83:01:16:b3:37:55: 25:75:ba:ee:fa:68:20:8e:68:0d:98:01:16:ed:7d: a3:3f:a3:d5:85:11:b9:3c:32:4b:01:fb:83:b4:a2: 51:f3:3b:19:ff:e8:54:e2:6a:5d:d7:2f:57:5c:56: 4a:bd:6e:9d:69:73:77:a9:dc:cf:4a:4a:63:84:3f: a1:4b:00:62:85:a4:65:45:b6:3f:ac:80:54:68:5d: 38:15:18:9a:de:94:26:9d:f5:c0:8c:24:7e:0d:2a: 49:fe:bb:0d:e6:9d:33:b0:35:1c:07:90:cc:d5:37: 00:d8:ac:ba:1a:f5:c5:a9:50:75:fc:95:cb:21:6c: bd:bc:66:a9:ef:9a:61:35:1e:a1:ac:25:0f:a3:ae: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:68:06:E8:73:D3:D0:3E:48:B7:9C:3A:C4:95:7B:5D:EC:1F:E6:C1 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:7f:65:02:f8:2b:fd:8b:3e:71:68:f2:60:9f:75:be:b0:9b: 1a:b3:09:3f:4d:b7:cc:87:a8:46:fe:e9:ba:cc:20:72:0f:e9: 9d:1b:ae:92:df:bc:fb:29:93:09:b9:ab:92:01:77:7f:a0:28: 5b:e2:27:6f:75:13:99:46:4f:d6:79:6d:e2:04:55:5a:2b:1a: 80:e9:b9:13:90:41:f7:f4:37:88:1d:db:32:df:4d:e7:0c:e4: 64:49:18:f5:64:71:44:05:ea:6d:cb:90:80:c6:48:0f:60:9f: 1f:34:e3:60:59:db:2c:4c:95:04:96:44:62:3b:e4:cf:4b:16: 68:fa:b9:14:01:02:53:00:9b:fb:a7:51:5d:f6:29:83:45:1e: b5:3a:30:8c:91:b5:6c:03:80:c2:42:80:fb:8b:55:8e:29:81: 5e:12:d1:47:6e:27:98:93:9e:d2:9c:5a:f6:46:16:32:46:af: eb:20:b0:68:8f:cb:93:80:79:40:4a:76:1e:30:69:1c:2e:1f: 07:14:91:17:f7:0f:f6:60:f0:21:c7:18:da:64:0d:98:49:4d: b0:df:b8:19:6b:2c:fb:b2:ce:7f:3a:dc:8a:24:19:e6:1e:16: ee:bd:1a:95:4d:0c:1f:59:d1:a6:97:5f:35:c3:40:4b:9c:da: 45:9b:7b:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwOTA2MjMxNDI5WhcNMjUwOTEzMjMxNDI5WjAYMRYwFAYD VQQDEw02OGJjYzA1NS04ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTVQQC00zF4hcy3KcSGKWz6X84aIIGRHx5sqMsa1Ew55XQNCJ43Pjc1YCgjH aGC/nEYQlQsDx1ZIjk/KHXXiLXst44W8eSXY7PkEZTySPVmC9i9HPwyCqmEk/afy a32C+/Q6dhi/gUSBiHGpki8DcjmDARazN1Uldbru+mggjmgNmAEW7X2jP6PVhRG5 PDJLAfuDtKJR8zsZ/+hU4mpd1y9XXFZKvW6daXN3qdzPSkpjhD+hSwBihaRlRbY/ rIBUaF04FRia3pQmnfXAjCR+DSpJ/rsN5p0zsDUcB5DM1TcA2Ky6GvXFqVB1/JXL IWy9vGap75phNR6hrCUPo65abQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdoBuhz 09A+SLecOsSVe13sH+bBMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6f2UC+Cv9iz5xaPJgn3W+sJsaswk/TbfMh6hG/um6zCByD+mdG66S 37z7KZMJuauSAXd/oChb4idvdROZRk/WeW3iBFVaKxqA6bkTkEH39DeIHdsy303n DORkSRj1ZHFEBepty5CAxkgPYJ8fNONgWdssTJUElkRiO+TPSxZo+rkUAQJTAJv7 p1Fd9imDRR61OjCMkbVsA4DCQoD7i1WOKYFeEtFHbieYk57SnFr2RhYyRq/rILBo j8uTgHlASnYeMGkcLh8HFJEX9w/2YPAhxxjaZA2YSU2w37gZayz7ss5/OtyKJBnm HhbuvRqVTQwfWdGml181w0BLnNpFm3sy -----END CERTIFICATE-----Generated at Mon Sep 8 06:43:45 2025 by rpki-client