$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: kFZN0UHD3pWCUhLJLm7v/p8qfNAjmriUuj8Ag/Dvz7A= Subject key identifier: 30:C4:6E:9E:40:13:44:52:9D:1F:00:05:59:81:95:71:DB:7B:84:38 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: AA Signing time: Fri 05 Sep 2025 06:34:43 +0000 Manifest this update: Fri 05 Sep 2025 06:34:42 +0000 Manifest next update: Fri 12 Sep 2025 06:34:42 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: tpmsKpWwWbZzxYYNbXCHnvKcSyA1AuckQegKpFff0UM=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Sep 5 06:34:42 2025 GMT Not After : Sep 12 06:34:42 2025 GMT Subject: CN=68ba8483-8f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:76:95:d9:95:de:37:1f:77:13:61:6b:79: f2:c3:0a:86:bf:b8:bf:27:53:c2:76:ea:2c:aa:e0: 32:a3:25:03:46:2a:4d:42:93:64:d9:e9:fa:e6:58: 1d:c2:9c:d1:b2:75:b2:48:7d:8c:bf:be:7f:90:b2: 1e:e6:c6:fa:1a:ba:28:b5:d0:7e:c4:0c:21:d3:7d: 7d:c0:e0:9e:0e:e1:d8:bf:c3:0f:c7:2e:da:ec:3e: bb:1f:a2:f7:1e:c3:0d:78:88:13:82:a9:35:23:af: 4c:b2:b1:40:dd:bc:07:57:ac:f8:21:60:80:5a:f1: 1a:4a:a2:9b:da:f4:2f:85:c8:31:51:13:24:0c:30: 87:69:26:47:b2:a8:3f:15:0b:7e:bc:e8:b7:76:75: 98:b8:63:23:1c:df:e7:a7:d8:55:4e:08:43:b5:28: e2:b6:03:8e:ed:0e:a3:be:5b:27:19:73:e1:f6:53: 92:5c:8a:fb:24:a4:b7:c6:91:08:63:51:bc:99:d6: 8e:9c:48:a7:c4:08:35:02:36:4b:bc:5e:7d:3f:90: 2e:bc:28:2c:b4:fb:ff:24:2b:18:8c:33:68:24:e8: f7:4c:32:e6:04:24:bd:07:b5:d1:82:de:82:c4:4a: d3:d1:6b:f3:78:68:56:14:43:83:7e:89:80:9c:21: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C4:6E:9E:40:13:44:52:9D:1F:00:05:59:81:95:71:DB:7B:84:38 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a8:47:f3:83:6d:69:a0:6d:07:d3:75:c4:fa:2c:76:08:de: c9:11:7b:9c:cb:5a:c1:4c:16:72:68:29:d1:60:bf:4f:fd:37: 15:d9:d9:b5:b8:c2:3f:50:75:a0:01:ce:37:48:82:db:60:d4: 95:c7:36:35:ae:ed:05:99:f7:6e:d7:a9:79:53:ed:13:3e:14: 25:75:f7:7f:cc:16:0d:6f:e7:e9:29:6e:49:84:93:15:7c:52: 6b:6c:30:df:09:23:b6:d9:a0:73:5d:fa:cf:00:a1:ef:30:c7: d2:89:31:f9:d1:59:e3:fb:d9:ea:3b:91:d4:fd:c2:8a:97:87: 25:e7:79:76:cd:30:c1:5c:6a:6c:f3:96:c5:5e:91:33:1f:47: df:d9:b2:04:ab:29:1d:ff:bf:98:af:cf:a7:c5:a3:0a:b2:18: 45:75:ef:ef:f6:8c:7c:c5:8d:c6:52:f5:ac:62:ec:cc:8f:54: ed:74:63:6f:3c:98:22:09:39:2d:e8:92:3f:f0:65:a7:84:00: 75:6f:d6:e4:70:43:03:ef:a4:dd:e4:16:38:2d:2d:a4:c1:6b: 3a:e2:4c:e0:43:37:24:0d:89:5f:de:a5:11:62:89:bf:bc:0a: 1c:b5:03:4b:7b:98:d7:8b:88:3a:c7:d6:2e:be:76:4e:9a:08: c9:39:b7:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUwOTA1MDYzNDQyWhcNMjUwOTEyMDYzNDQyWjAYMRYwFAYD VQQDEw02OGJhODQ4My04Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyd2ldmV3jcfdxNha3nywwqGv7i/J1PCduosquAyoyUDRipNQpNk2en65lgd wpzRsnWySH2Mv75/kLIe5sb6GrootdB+xAwh0319wOCeDuHYv8MPxy7a7D67H6L3 HsMNeIgTgqk1I69MsrFA3bwHV6z4IWCAWvEaSqKb2vQvhcgxURMkDDCHaSZHsqg/ FQt+vOi3dnWYuGMjHN/np9hVTghDtSjitgOO7Q6jvlsnGXPh9lOSXIr7JKS3xpEI Y1G8mdaOnEinxAg1AjZLvF59P5AuvCgstPv/JCsYjDNoJOj3TDLmBCS9B7XRgt6C xErT0WvzeGhWFEODfomAnCEtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDEbp5A E0RSnR8ABVmBlXHbe4Q4MB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKqEfzg21poG0H03XE+ix2CN7JEXucy1rBTBZyaCnRYL9P/TcV2dm1 uMI/UHWgAc43SILbYNSVxzY1ru0Fmfdu16l5U+0TPhQldfd/zBYNb+fpKW5JhJMV fFJrbDDfCSO22aBzXfrPAKHvMMfSiTH50Vnj+9nqO5HU/cKKl4cl53l2zTDBXGps 85bFXpEzH0ff2bIEqykd/7+Yr8+nxaMKshhFde/v9ox8xY3GUvWsYuzMj1TtdGNv PJgiCTkt6JI/8GWnhAB1b9bkcEMD76Td5BY4LS2kwWs64kzgQzckDYlf3qURYom/ vAoctQNLe5jXi4g6x9YuvnZOmgjJObfw -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:35 2025 by rpki-client