$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: BC6W62QGvKJeK/y7d4n/aqfuS4cviYTneHzMA0t/cGU= Subject key identifier: 5F:9B:36:86:97:D3:E0:B4:69:6D:E9:1B:58:98:E7:AC:6A:66:78:6B Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 91 Signing time: Sat 19 Jul 2025 06:39:58 +0000 Manifest this update: Sat 19 Jul 2025 06:39:58 +0000 Manifest next update: Sat 26 Jul 2025 06:39:58 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: 1Q49KW2yOOeKjTjoVbaL+CMct7a1yzbJjqsiBA758tM=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jul 19 06:39:58 2025 GMT Not After : Jul 26 06:39:58 2025 GMT Subject: CN=687b3dbe-a97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:23:c9:ba:80:4a:72:c1:71:31:a4:64:a4: 3d:93:68:11:92:33:7f:15:9f:a3:23:d5:02:8e:5a: 69:9e:92:dd:ce:a8:0a:dc:1d:8e:36:a2:cf:a0:4d: 8c:e8:9e:fd:ad:52:60:b5:00:52:37:5d:d8:41:6e: 7c:19:29:f2:32:99:b2:9a:41:72:79:20:cb:a0:3c: 6f:32:c1:01:fa:87:39:0e:f3:75:a6:d8:ae:43:87: 20:1a:04:66:ff:2c:1e:70:5a:02:18:6e:ee:e9:09: fd:54:37:16:9c:14:c2:94:a4:5c:04:ba:f9:10:cf: f7:18:f7:42:fa:43:df:90:c4:e4:8a:15:18:11:c3: ed:d0:c2:c2:aa:3c:86:a6:c1:f2:2b:05:9e:6c:41: 88:21:92:ed:36:0c:88:1d:78:11:72:e3:1d:e9:1a: f8:31:7a:c0:6e:25:b3:ff:a1:61:e2:6e:36:a4:2e: 51:1a:9a:b1:df:c2:81:40:e7:6a:4a:ea:a3:a0:25: 3f:2d:94:7c:4f:3b:7c:ba:90:b9:6a:83:a0:cd:8e: 01:54:68:43:5e:fb:86:a2:ad:50:c2:75:dc:9a:ae: 29:75:fa:aa:72:03:8a:d6:c9:e0:b7:88:62:44:11: 9c:05:06:57:17:9a:f1:6d:7e:7e:9a:1c:96:67:70: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:36:86:97:D3:E0:B4:69:6D:E9:1B:58:98:E7:AC:6A:66:78:6B X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:45:8d:b3:9f:58:c3:ce:ee:b0:03:0f:68:21:ac:2b:fb:40: 16:0e:ec:49:25:ce:ae:38:83:5e:45:88:9e:cc:7b:83:f7:66: a9:56:2e:d0:58:bd:e9:75:84:be:78:5c:1c:5d:58:fd:fd:4d: c9:a0:18:f4:08:d3:d4:61:d4:cd:14:d7:94:b5:88:84:37:be: 3f:e2:c8:80:09:04:87:76:59:74:d5:f5:a7:db:bf:88:22:d6: d9:00:13:43:93:f7:f7:dc:12:5c:76:b4:23:41:03:38:d8:6f: 71:4e:4a:88:3c:b0:65:23:40:89:b2:ea:95:fc:40:b5:df:36: 2c:1c:67:f5:95:de:7b:07:ce:4f:66:3c:52:51:b5:4b:47:e7: 56:38:59:f3:c7:05:fb:f4:47:ed:1b:fa:e2:00:8c:bd:6b:b0: 79:73:36:94:50:2a:f2:c4:c8:7d:7d:12:fe:30:e5:3f:a6:66: 1c:db:f1:22:c4:34:9e:02:4a:a2:a0:a0:24:bc:8a:ad:2e:41: 23:b6:ce:db:1f:6c:6a:ad:cf:1b:1d:76:d9:8c:cc:2e:77:3b: 30:38:d6:0f:c3:c4:da:64:df:92:df:a4:61:7f:23:51:60:b2: eb:9c:52:2b:c7:08:b9:aa:de:2d:8d:62:9f:6e:6e:26:c0:24: 36:05:4e:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUwNzE5MDYzOTU4WhcNMjUwNzI2MDYzOTU4WjAYMRYwFAYD VQQDEw02ODdiM2RiZS1hOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hYjybqASnLBcTGkZKQ9k2gRkjN/FZ+jI9UCjlppnpLdzqgK3B2ONqLPoE2M 6J79rVJgtQBSN13YQW58GSnyMpmymkFyeSDLoDxvMsEB+oc5DvN1ptiuQ4cgGgRm /ywecFoCGG7u6Qn9VDcWnBTClKRcBLr5EM/3GPdC+kPfkMTkihUYEcPt0MLCqjyG psHyKwWebEGIIZLtNgyIHXgRcuMd6Rr4MXrAbiWz/6Fh4m42pC5RGpqx38KBQOdq SuqjoCU/LZR8Tzt8upC5aoOgzY4BVGhDXvuGoq1QwnXcmq4pdfqqcgOK1sngt4hi RBGcBQZXF5rxbX5+mhyWZ3CwXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+bNoaX 0+C0aW3pG1iY56xqZnhrMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHRY2zn1jDzu6wAw9oIawr+0AWDuxJJc6uOINeRYiezHuD92apVi7Q WL3pdYS+eFwcXVj9/U3JoBj0CNPUYdTNFNeUtYiEN74/4siACQSHdll01fWn27+I ItbZABNDk/f33BJcdrQjQQM42G9xTkqIPLBlI0CJsuqV/EC13zYsHGf1ld57B85P ZjxSUbVLR+dWOFnzxwX79EftG/riAIy9a7B5czaUUCryxMh9fRL+MOU/pmYc2/Ei xDSeAkqioKAkvIqtLkEjts7bH2xqrc8bHXbZjMwudzswONYPw8TaZN+S36RhfyNR YLLrnFIrxwi5qt4tjWKfbm4mwCQ2BU6j -----END CERTIFICATE-----Generated at Sun Jul 20 22:44:43 2025 by rpki-client