$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: EDmdzLdEiAAvPKYx/INUuKUSfRQ06tnxm5Nig3V7L/I= Subject key identifier: 16:D6:5B:51:87:80:F2:D5:6C:D5:37:40:BC:71:4C:2C:71:72:E0:4E Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 0706 Signing time: Thu 04 Sep 2025 22:10:15 +0000 Manifest this update: Thu 04 Sep 2025 22:10:14 +0000 Manifest next update: Thu 11 Sep 2025 22:10:14 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: TacPzONUxmpzDBHUSKem0OI/z4yNPOHU3aLips+IfUA=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Sep 4 22:10:14 2025 GMT Not After : Sep 11 22:10:14 2025 GMT Subject: CN=68ba0e46-7a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:47:5a:89:c1:e6:5e:fe:7e:b9:08:56:89: 42:45:1f:7b:b9:4c:c1:8f:8e:78:5f:ce:35:8a:b4: 61:bd:2e:ee:ea:11:0b:cd:2c:14:44:0d:d8:76:fe: 63:12:a3:82:cd:43:5f:ad:77:a2:c2:06:17:d9:8a: 98:1b:8a:e2:51:57:26:19:87:fc:b0:af:c7:b5:e0: c8:00:6f:d0:50:b6:d3:1a:ab:53:6c:c3:18:50:df: ef:23:78:7c:02:21:c5:f7:2b:af:0d:d6:c4:50:08: 27:98:b2:c2:bd:13:bc:16:55:cf:8a:d1:92:c6:df: c7:5b:c8:68:9f:0c:36:a9:68:ac:64:c1:dd:6e:d1: e5:ed:3e:bd:cc:14:cf:99:86:b6:43:ab:75:c8:2b: 90:95:09:4e:56:66:67:93:89:06:8c:8a:f3:49:52: fe:4e:8f:94:8e:05:d2:9f:02:e2:72:06:59:09:98: 1c:a2:94:e3:8f:06:0f:ad:58:29:87:b4:3d:56:89: 7e:3e:43:70:da:e3:c6:b9:3e:bf:46:85:8f:7b:36: 85:3d:af:14:89:21:cd:76:51:39:c9:10:7e:40:9c: 31:ab:15:2f:06:2a:3a:d2:6a:30:88:47:fd:af:06: f9:03:b6:7d:88:04:f5:6d:c9:55:23:ef:28:65:88: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D6:5B:51:87:80:F2:D5:6C:D5:37:40:BC:71:4C:2C:71:72:E0:4E X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:ae:ce:8d:d6:ae:5b:aa:30:3d:e2:24:48:e6:66:c6:e7: b4:63:69:e5:9c:20:9f:24:85:63:0c:5f:a7:3d:05:82:e9:bb: 86:13:8e:5f:81:49:a8:5c:40:d9:8c:54:be:0b:f9:9f:00:41: 0a:47:8a:61:39:4d:a8:e6:b7:6a:d1:2f:13:44:c3:f1:ad:71: ab:4a:6d:c0:16:b4:dc:b0:7a:ad:6c:00:05:68:90:1d:c0:7d: 7f:25:94:b3:ea:ac:8b:44:bf:a3:38:13:ea:ad:7d:2f:02:2b: 67:89:33:e2:76:84:e0:17:1a:61:ec:9b:c0:0c:da:ef:bc:78: f7:f9:b5:12:7d:41:a9:4b:c0:87:f6:50:05:33:b4:ba:ed:ce: 48:fd:a8:5c:e2:62:63:3b:90:8b:53:d5:95:06:e2:f9:b9:d3: 4f:68:45:29:12:a6:18:6b:dd:61:64:56:ef:85:5f:80:01:08: 7e:de:80:e6:eb:30:a5:1d:54:8f:09:59:5c:a5:31:73:e4:18: 4c:ec:5e:3b:0c:8b:88:0e:56:a0:4c:b2:73:0a:25:eb:93:46: 9e:7c:64:fa:0f:88:53:89:4c:98:eb:7f:cd:49:90:2e:e8:86: 1b:ef:ad:fd:e4:4d:a6:37:1d:86:ca:ce:f8:1a:bf:82:49:85: f4:b7:4e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwOTA0MjIxMDE0WhcNMjUwOTExMjIxMDE0WjAYMRYwFAYD VQQDEw02OGJhMGU0Ni03YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJBHWonB5l7+frkIVolCRR97uUzBj454X841irRhvS7u6hELzSwURA3Ydv5j EqOCzUNfrXeiwgYX2YqYG4riUVcmGYf8sK/HteDIAG/QULbTGqtTbMMYUN/vI3h8 AiHF9yuvDdbEUAgnmLLCvRO8FlXPitGSxt/HW8honww2qWisZMHdbtHl7T69zBTP mYa2Q6t1yCuQlQlOVmZnk4kGjIrzSVL+To+UjgXSnwLicgZZCZgcopTjjwYPrVgp h7Q9Vol+PkNw2uPGuT6/RoWPezaFPa8UiSHNdlE5yRB+QJwxqxUvBio60mowiEf9 rwb5A7Z9iAT1bclVI+8oZYhI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbWW1GH gPLVbNU3QLxxTCxxcuBOMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYsK7OjdauW6owPeIkSOZmxue0Y2nlnCCfJIVjDF+nPQWC6buGE45f gUmoXEDZjFS+C/mfAEEKR4phOU2o5rdq0S8TRMPxrXGrSm3AFrTcsHqtbAAFaJAd wH1/JZSz6qyLRL+jOBPqrX0vAitniTPidoTgFxph7JvADNrvvHj3+bUSfUGpS8CH 9lAFM7S67c5I/ahc4mJjO5CLU9WVBuL5udNPaEUpEqYYa91hZFbvhV+AAQh+3oDm 6zClHVSPCVlcpTFz5BhM7F47DIuIDlagTLJzCiXrk0aefGT6D4hTiUyY63/NSZAu 6IYb76395E2mNx2Gys74Gr+CSYX0t054 -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:06 2025 by rpki-client