$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: 2YbHWWiO/HqiKU/1cqmDmbcheYlQVjfvspJoN2+d3Q8= Subject key identifier: 00:06:1D:F5:2E:1E:21:59:7F:DD:80:B5:1D:D2:6F:15:49:76:5F:B1 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02F8 Signing time: Thu 21 Aug 2025 01:24:43 +0000 Manifest this update: Thu 21 Aug 2025 01:24:43 +0000 Manifest next update: Thu 28 Aug 2025 01:24:43 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 7TVGAeTZEdEnrRwoXOtTebP8eXFH/IVQcvlXT4cahtg=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Aug 21 01:24:43 2025 GMT Not After : Aug 28 01:24:43 2025 GMT Subject: CN=68a6755b-46ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:00:5e:3b:9d:b9:87:ee:4a:d7:1b:8b:c0: c6:71:b1:72:fc:d5:c6:72:0a:90:52:0d:52:ee:6e: a9:a5:2f:c8:bf:02:02:28:46:c3:2b:17:5f:41:e6: ff:42:b0:2a:2d:df:45:83:8c:d0:11:39:bc:e0:a8: 38:e2:74:9d:6d:ed:ff:21:3a:00:59:a0:ae:5a:ab: f6:46:a2:a1:47:c9:ca:25:22:03:0a:c6:7b:ff:3f: 11:08:3e:09:13:0e:aa:4c:a1:10:d3:4d:05:00:97: c3:d2:bd:e3:0d:d0:6a:86:ce:c7:4a:60:b5:58:9f: b6:e9:bb:fb:b1:00:3b:ad:72:3a:40:e2:31:0f:64: 2e:a7:bd:0a:40:75:bc:89:bc:eb:65:b8:17:35:cb: 77:cc:ef:28:0b:da:91:20:00:01:fd:81:30:4e:cd: 15:51:79:de:c2:a8:f5:d1:c9:eb:e7:90:bb:ec:80: 3e:4b:6c:1a:dd:f3:81:63:34:34:82:00:ef:4f:91: 2c:5b:57:cd:e7:74:6a:fc:ce:6f:17:07:db:c1:17: 42:88:74:7a:e3:7e:12:bd:21:f4:8d:a5:70:62:f1: 8f:e8:c7:9d:61:6d:03:a7:a1:9f:0e:58:2c:49:f8: 08:0c:59:43:7d:31:f7:04:e3:12:4d:38:b9:5c:05: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:1D:F5:2E:1E:21:59:7F:DD:80:B5:1D:D2:6F:15:49:76:5F:B1 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:5c:b7:02:2b:42:3f:b0:38:40:ff:1e:53:05:00:8a:60:ea: f7:15:2c:ef:08:ee:b9:c2:c7:8a:b1:c1:eb:28:c0:f9:3c:1a: 5b:24:be:0f:be:3a:ee:4a:62:93:32:fc:e6:d6:11:8a:27:ba: 3c:1d:12:8e:f7:71:82:66:b0:38:87:e5:64:c5:59:b0:71:6f: c8:ea:02:91:9f:63:29:a0:f4:cf:1a:ae:9b:ab:62:74:37:34: a9:93:33:c9:13:87:7c:d4:5a:c9:6a:53:f4:66:3a:d9:4f:1c: 09:00:e2:92:ce:b4:51:8d:de:36:7c:63:4e:ab:33:03:ac:89: 04:56:1a:1e:31:96:bd:ab:7c:bb:46:d0:52:c4:ba:f0:a5:6c: 1a:6d:92:49:3c:82:ad:73:34:9c:3e:d0:1c:a5:94:c2:a2:8b: 5d:1b:c1:96:35:2e:4e:d7:9c:9d:5d:f3:e8:3f:de:b3:de:49: a3:59:68:12:e6:32:4e:b7:cd:60:cd:41:4b:04:9d:0b:84:7b: bb:b5:84:fc:fe:e4:38:87:88:07:c8:f1:42:fe:79:80:d5:7f: ed:43:a9:99:df:51:25:ea:a9:61:54:3c:9e:09:72:69:f4:a8: b3:1e:8b:d0:1f:ac:18:e6:4d:e1:f5:4d:63:71:fa:00:17:bf: 35:18:0a:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwODIxMDEyNDQzWhcNMjUwODI4MDEyNDQzWjAYMRYwFAYD VQQDEw02OGE2NzU1Yi00NmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFAAXjuduYfuStcbi8DGcbFy/NXGcgqQUg1S7m6ppS/IvwICKEbDKxdfQeb/ QrAqLd9Fg4zQETm84Kg44nSdbe3/IToAWaCuWqv2RqKhR8nKJSIDCsZ7/z8RCD4J Ew6qTKEQ000FAJfD0r3jDdBqhs7HSmC1WJ+26bv7sQA7rXI6QOIxD2Qup70KQHW8 ibzrZbgXNct3zO8oC9qRIAAB/YEwTs0VUXnewqj10cnr55C77IA+S2wa3fOBYzQ0 ggDvT5EsW1fN53Rq/M5vFwfbwRdCiHR6434SvSH0jaVwYvGP6MedYW0Dp6GfDlgs SfgIDFlDfTH3BOMSTTi5XAUodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAGHfUu HiFZf92AtR3SbxVJdl+xMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmXLcCK0I/sDhA/x5TBQCKYOr3FSzvCO65wseKscHrKMD5PBpbJL4P vjruSmKTMvzm1hGKJ7o8HRKO93GCZrA4h+VkxVmwcW/I6gKRn2MpoPTPGq6bq2J0 NzSpkzPJE4d81FrJalP0ZjrZTxwJAOKSzrRRjd42fGNOqzMDrIkEVhoeMZa9q3y7 RtBSxLrwpWwabZJJPIKtczScPtAcpZTCootdG8GWNS5O15ydXfPoP96z3kmjWWgS 5jJOt81gzUFLBJ0LhHu7tYT8/uQ4h4gHyPFC/nmA1X/tQ6mZ31El6qlhVDyeCXJp 9KizHovQH6wY5k3h9U1jcfoAF781GAqn -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client