$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: iF4D/AMDzbWknKYkvgrdZXlIMqSwC5dtMN9ALZrkoR4= Subject key identifier: 8D:5B:F9:29:C3:CD:21:60:F8:60:22:96:B2:B0:A3:A2:19:D7:D1:32 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01C5 Signing time: Thu 21 Aug 2025 03:02:22 +0000 Manifest this update: Thu 21 Aug 2025 03:02:21 +0000 Manifest next update: Thu 28 Aug 2025 03:02:21 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: MGSNF3ZbsDpxctqe4gf+zyGEPr8F+++QhkkH8PYUuNM=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Aug 21 03:02:21 2025 GMT Not After : Aug 28 03:02:21 2025 GMT Subject: CN=68a68c3e-d5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:26:cf:48:3a:74:e7:fd:16:a6:ab:f1:45: 27:dc:f1:b3:94:b7:ca:b7:25:4e:17:e7:7d:2b:fb: 80:c4:fe:80:ae:75:04:f3:b5:2a:85:98:ba:81:95: 8f:ea:65:65:b5:6a:fd:95:d2:35:f5:1e:06:64:59: 28:b3:4f:ff:46:a9:e7:79:50:42:b3:d3:40:e1:9b: f7:7c:06:80:9c:2f:2c:59:06:9a:95:c1:ea:af:9d: 21:d1:2e:8e:6e:32:75:8e:fe:06:24:25:33:04:ee: 15:6b:8b:dd:65:a2:8d:b5:8c:28:81:ff:a4:95:e5: da:04:59:0f:a9:99:d0:32:eb:99:99:49:4e:17:ac: 70:e6:a7:eb:0e:78:ec:60:8d:14:8b:43:17:e9:3d: 8f:62:f0:63:64:fb:1a:f8:0c:9d:82:89:ff:7f:f1: b6:cb:79:35:0c:90:d1:86:3b:5f:68:35:ac:1c:c1: d8:76:47:b4:f1:ad:0f:4e:01:c3:9c:b6:73:2b:1a: 08:bc:de:79:b3:45:7b:0f:d7:24:08:0e:ee:fc:76: ef:8a:08:93:cd:b1:69:8b:29:11:4d:70:ee:ee:29: e1:df:95:e1:ce:bb:ad:e9:01:d9:45:d4:2e:b4:e9: 6f:36:e0:a3:c4:63:b2:a0:46:25:10:cf:6d:c6:54: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5B:F9:29:C3:CD:21:60:F8:60:22:96:B2:B0:A3:A2:19:D7:D1:32 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:98:ee:54:ab:92:f9:72:48:a6:ab:51:81:fc:fc:91:cd:3e: e3:0b:18:c7:62:d0:17:61:fc:a7:b8:81:3d:61:de:5b:23:97: 5b:02:69:87:f8:3b:d1:b6:dc:94:cf:45:38:cf:4a:03:b5:c6: 91:d7:ae:5d:98:4c:0f:c4:c6:08:7e:ec:35:dc:41:93:69:b5: de:69:44:45:ba:bf:b4:50:0c:bc:ae:6a:c6:7f:81:02:1a:c9: ec:55:a4:59:99:77:df:1b:5b:b4:3d:ea:78:69:56:ef:34:5a: a8:9f:cc:b0:24:83:3e:90:61:0f:57:a6:82:e4:9b:63:b3:4c: c6:9b:c5:73:60:33:22:eb:8a:95:ac:d6:65:0a:0e:3d:76:85: 86:80:ba:57:45:b4:47:2a:c9:4a:ee:35:12:42:13:6f:9b:da: f9:4b:95:e3:2b:cb:a9:d8:73:76:e9:a7:b6:02:20:ce:36:cf: c3:70:73:c1:9b:18:24:df:d7:e6:fb:1f:b1:8d:83:85:3b:d0: 1e:4c:a2:c3:25:75:e2:c2:85:0d:f9:4f:5e:ee:8b:d9:18:f2: 58:60:63:c9:93:c5:45:76:52:6e:c5:71:00:82:aa:63:89:0f: 64:61:53:ec:ed:93:ef:d2:e3:1c:fe:51:53:af:d0:61:c3:da: 12:c3:76:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUwODIxMDMwMjIxWhcNMjUwODI4MDMwMjIxWjAYMRYwFAYD VQQDEw02OGE2OGMzZS1kNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Bomz0g6dOf9Fqar8UUn3PGzlLfKtyVOF+d9K/uAxP6ArnUE87UqhZi6gZWP 6mVltWr9ldI19R4GZFkos0//RqnneVBCs9NA4Zv3fAaAnC8sWQaalcHqr50h0S6O bjJ1jv4GJCUzBO4Va4vdZaKNtYwogf+kleXaBFkPqZnQMuuZmUlOF6xw5qfrDnjs YI0Ui0MX6T2PYvBjZPsa+Aydgon/f/G2y3k1DJDRhjtfaDWsHMHYdke08a0PTgHD nLZzKxoIvN55s0V7D9ckCA7u/HbvigiTzbFpiykRTXDu7inh35Xhzrut6QHZRdQu tOlvNuCjxGOyoEYlEM9txlSdvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1b+SnD zSFg+GAilrKwo6IZ19EyMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmmO5Uq5L5ckimq1GB/PyRzT7jCxjHYtAXYfynuIE9Yd5bI5dbAmmH +DvRttyUz0U4z0oDtcaR165dmEwPxMYIfuw13EGTabXeaURFur+0UAy8rmrGf4EC GsnsVaRZmXffG1u0Pep4aVbvNFqon8ywJIM+kGEPV6aC5Jtjs0zGm8VzYDMi64qV rNZlCg49doWGgLpXRbRHKslK7jUSQhNvm9r5S5XjK8up2HN26ae2AiDONs/DcHPB mxgk39fm+x+xjYOFO9AeTKLDJXXiwoUN+U9e7ovZGPJYYGPJk8VFdlJuxXEAgqpj iQ9kYVPs7ZPv0uMc/lFTr9Bhw9oSw3Yl -----END CERTIFICATE-----Generated at Fri Aug 22 16:32:16 2025 by rpki-client