$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json) Hash identifier: GEiZLEPSlEB6mpuks7YsX/1VQRGlczq6GeivFRcUlp0= Subject key identifier: 57:AB:B6:C4:96:05:FD:17:F8:ED:D6:63:34:D8:93:BA:AE:65:79:7A Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft Manifest number: 95 Signing time: Thu 04 Sep 2025 23:08:55 +0000 Manifest this update: Thu 04 Sep 2025 23:08:55 +0000 Manifest next update: Thu 11 Sep 2025 23:08:55 +0000 Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: 9S3GVL0u1z5KNkLgaLRjT5CEkRUoviMQAHUlPhtVgpQ=) 2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 05N/6Qhw5iJe1Qr/JCmwvRl4veGMACl1Zh2wsIyWrXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Validity Not Before: Sep 4 23:08:55 2025 GMT Not After : Sep 11 23:08:55 2025 GMT Subject: CN=68ba1c07-f0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:42:72:04:77:83:85:41:54:07:7a:c9:ea: 2a:ed:79:f8:2f:09:4b:b3:8a:0c:70:68:f9:25:2c: 6e:c9:8e:c5:e3:6d:f1:79:aa:03:bc:67:c4:c7:81: 9c:52:38:b7:93:bd:c0:82:c7:c0:5c:10:52:4a:32: 0b:6f:29:b4:44:94:de:8a:29:71:6a:fc:73:99:93: a0:08:60:14:93:e0:1c:1b:d6:62:eb:8d:8c:16:d3: d8:4d:45:89:4c:e7:da:87:91:fd:ed:6f:35:02:40: 9a:56:fe:4a:60:12:7b:69:00:fd:2a:de:b2:5f:b0: 5a:37:0c:e7:1e:e6:4a:14:01:58:f4:ea:75:19:5b: 0c:47:d9:b6:c9:c3:a6:6c:31:9b:7c:53:af:39:ea: 3c:8c:19:44:df:3d:b8:cd:36:70:61:26:db:3f:86: e2:88:11:fb:ae:79:24:04:64:f8:44:6f:38:44:a3: 15:78:80:b2:33:46:52:14:63:e2:2f:e8:47:a5:d8: f2:01:ae:de:a5:53:32:f3:e6:4c:31:02:db:81:a6: e5:58:49:7d:eb:44:fe:52:cd:2f:cb:d8:1b:50:25: f1:9c:67:46:32:e1:83:2b:84:ef:23:23:99:fd:e5: 1e:1f:f0:62:b6:b9:98:a4:7f:d7:6a:99:e7:52:8b: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AB:B6:C4:96:05:FD:17:F8:ED:D6:63:34:D8:93:BA:AE:65:79:7A X509v3 Authority Key Identifier: keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:94:d2:61:07:05:b7:31:bc:b4:91:ac:dd:fd:90:f9:62: 97:e9:c9:a6:f9:f3:58:1f:5f:a8:48:47:1f:d0:85:0b:ec:15: dd:d5:63:b3:9c:f4:d5:b9:a0:e4:c4:9f:fc:e5:bf:47:34:b9: b2:0f:dc:8a:3b:8f:a9:e8:1c:cc:60:5f:52:f5:ec:50:c1:93: e1:ea:e7:5f:79:b4:17:3e:7c:db:7a:bf:e5:d1:b5:20:95:12: e9:92:9b:86:60:75:4d:83:41:dd:a4:be:94:4e:94:7f:33:6e: 0d:47:66:a5:92:e5:98:de:c4:8f:0c:49:da:3e:6d:14:12:ae: 8b:27:c0:72:e3:c0:13:ea:e7:9f:c2:af:84:a2:fd:aa:2d:f1: 2c:b7:6f:9d:e7:83:5a:65:da:40:94:bb:2d:2d:8c:dd:c6:77: 00:c2:76:d2:22:a6:35:6e:e8:f2:54:79:83:80:27:c5:22:58: eb:33:29:49:b4:32:28:98:1f:9b:8a:a3:1a:11:17:dd:f6:dd: ed:05:17:2a:09:05:7c:9f:f7:7c:13:f2:6c:aa:6a:67:cc:77: 7c:a0:10:72:01:15:f5:84:eb:8d:7c:69:2d:b2:59:70:7f:e3: 0d:19:59:c7:9d:35:9c:7d:04:50:13:9c:93:d9:94:44:be:0b: e5:17:ff:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGMkQxMTAvBgNVBAUTKEFGNjcyREE4QzVEMUQ2QzgwRDUwNjE3OEM5RTdDQjc0 NEY2RTM4RTYwHhcNMjUwOTA0MjMwODU1WhcNMjUwOTExMjMwODU1WjAYMRYwFAYD VQQDEw02OGJhMWMwNy1mMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I5CcgR3g4VBVAd6yeoq7Xn4LwlLs4oMcGj5JSxuyY7F423xeaoDvGfEx4Gc Uji3k73AgsfAXBBSSjILbym0RJTeiilxavxzmZOgCGAUk+AcG9Zi642MFtPYTUWJ TOfah5H97W81AkCaVv5KYBJ7aQD9Kt6yX7BaNwznHuZKFAFY9Op1GVsMR9m2ycOm bDGbfFOvOeo8jBlE3z24zTZwYSbbP4biiBH7rnkkBGT4RG84RKMVeICyM0ZSFGPi L+hHpdjyAa7epVMy8+ZMMQLbgablWEl960T+Us0vy9gbUCXxnGdGMuGDK4TvIyOZ /eUeH/BitrmYpH/XapnnUoteHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFertsSW Bf0X+O3WYzTYk7quZXl6MB8GA1UdIwQYMBaAFK9nLajF0dbIDVBheMnny3RPbjjm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkYyRC82RjgyMTE3OEFC ODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFzZ05VR0Y0eWVmTGRFOXVP T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkYyRC82RjgyMTE3OEFCODgxMUVGODBDNzVBNzRDNEY5QUUwMi9yMmN0cU1YUjFz Z05VR0Y0eWVmTGRFOXVPT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChWpTSYQcFtzG8tJGs3f2Q+WKX6cmm+fNYH1+oSEcf0IUL7BXd1WOz nPTVuaDkxJ/85b9HNLmyD9yKO4+p6BzMYF9S9exQwZPh6udfebQXPnzber/l0bUg lRLpkpuGYHVNg0HdpL6UTpR/M24NR2alkuWY3sSPDEnaPm0UEq6LJ8By48AT6uef wq+Eov2qLfEst2+d54NaZdpAlLstLYzdxncAwnbSIqY1bujyVHmDgCfFIljrMylJ tDIomB+biqMaERfd9t3tBRcqCQV8n/d8E/JsqmpnzHd8oBByARX1hOuNfGktsllw f+MNGVnHnTWcfQRQE5yT2ZREvgvlF/+o -----END CERTIFICATE-----Generated at Sat Sep 6 15:15:10 2025 by rpki-client