$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: WL9fFmFzycpOpE4jYI8dmyUOL2Ib7PxbtGEvsNWuV6c= Subject key identifier: 12:B0:F7:AD:0C:51:8F:C0:EA:46:6C:21:F6:82:CC:A1:1C:BB:0A:0B Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0D03 Signing time: Mon 18 Aug 2025 18:22:32 +0000 Manifest this update: Mon 18 Aug 2025 18:22:31 +0000 Manifest next update: Mon 25 Aug 2025 18:22:31 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: AHkBrHN7M5WCtHTSk2MGu/4nWVagHWakkPsyuhY/jNY=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: LD0ithX2780J0eLYJ+pZjxCf/VO5UT20hM3rBP9oW8s=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: PkBHUrnClJtIRj3hyvhFOR74ygd0IwmSJ02fNGArhbM=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Aug 18 18:22:31 2025 GMT Not After : Aug 25 18:22:31 2025 GMT Subject: CN=68a36f67-98f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:3b:5f:f4:8c:cd:35:86:76:5c:51:7f:b1: e7:95:81:83:13:e8:e9:a2:f8:4d:86:fa:30:a5:da: bd:61:fa:a0:7f:ac:90:9b:45:a1:2a:17:cd:18:bb: 58:44:28:f0:68:86:c1:76:33:fb:7b:d5:48:07:e2: 9b:58:32:3f:3a:da:5e:57:d1:c1:f1:c7:6e:68:db: 54:8d:b1:00:5d:1a:b9:85:af:f3:77:97:09:5c:f4: 8b:21:30:7e:6b:9e:b2:7e:1d:9a:5c:dc:b1:a7:d1: 0c:6b:bf:cc:11:77:b6:65:de:0e:af:9f:f3:5c:d8: 50:c0:29:f0:b1:bd:ba:ec:1b:4a:d8:71:88:03:c3: 18:3f:80:95:2b:07:5c:f9:97:1b:69:ec:db:ba:77: 95:84:4e:b0:16:d5:b4:93:05:fe:25:44:6e:38:4c: e1:90:47:13:39:4b:00:d2:02:8d:3d:62:99:e7:10: be:bd:df:e1:20:40:60:79:66:49:31:de:65:6f:12: cb:16:cc:c6:a4:d5:46:14:ec:01:9e:8b:eb:b1:7f: e1:d7:1d:ab:8e:06:8a:e8:f5:f5:c5:bc:10:78:f9: 2c:ed:e5:96:70:26:09:fa:04:46:fb:a1:c8:06:97: ee:d9:90:30:4c:61:fb:9a:33:d5:1e:dc:2e:45:18: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B0:F7:AD:0C:51:8F:C0:EA:46:6C:21:F6:82:CC:A1:1C:BB:0A:0B X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:82:09:11:97:b0:4e:8a:e1:61:bb:59:19:b2:36:1b:a6:e5: 25:bf:d0:bf:22:55:88:5f:68:4b:11:61:59:9c:78:9a:bb:52: bc:71:66:15:f4:a1:6a:56:63:b7:0b:3c:66:3d:57:03:22:61: 58:50:c8:a6:65:3c:33:90:24:53:5b:2b:71:a7:ad:d6:5c:4b: 20:44:9b:2e:68:70:72:db:54:a5:13:28:2c:4f:9a:67:5f:76: 52:d7:b5:0a:12:16:5b:a0:5c:d7:82:6d:55:28:5c:e2:96:1f: fb:55:02:a7:76:73:0d:a2:71:03:df:36:57:ce:11:1c:3e:a0: 94:d1:80:8f:e5:b1:91:3b:44:e8:97:f3:bf:ec:dc:83:ef:8a: 25:ab:5b:6e:28:df:b2:b3:ec:98:55:a6:a2:41:ae:bf:78:7e: b3:e9:fd:27:3f:dd:56:8d:fc:06:16:42:8a:c8:a5:06:87:57: 7a:5d:45:a4:2a:9c:0c:be:43:a5:1e:19:88:fe:55:0c:10:a8: f4:48:c5:7b:21:58:12:9d:5b:d2:f2:fa:70:a9:37:32:3f:bc: 66:39:b4:1b:02:f5:bf:26:a6:a3:c8:6d:bf:b8:67:2d:8d:90: cb:98:3b:0b:53:e7:13:67:d5:56:25:a4:33:0c:4e:61:8b:00: c7:f7:5c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwODE4MTgyMjMxWhcNMjUwODI1MTgyMjMxWjAYMRYwFAYD VQQDEw02OGEzNmY2Ny05OGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXc7X/SMzTWGdlxRf7HnlYGDE+jpovhNhvowpdq9Yfqgf6yQm0WhKhfNGLtY RCjwaIbBdjP7e9VIB+KbWDI/OtpeV9HB8cduaNtUjbEAXRq5ha/zd5cJXPSLITB+ a56yfh2aXNyxp9EMa7/MEXe2Zd4Or5/zXNhQwCnwsb267BtK2HGIA8MYP4CVKwdc +ZcbaezbuneVhE6wFtW0kwX+JURuOEzhkEcTOUsA0gKNPWKZ5xC+vd/hIEBgeWZJ Md5lbxLLFszGpNVGFOwBnovrsX/h1x2rjgaK6PX1xbwQePks7eWWcCYJ+gRG+6HI Bpfu2ZAwTGH7mjPVHtwuRRiEOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKw960M UY/A6kZsIfaCzKEcuwoLMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiggkRl7BOiuFhu1kZsjYbpuUlv9C/IlWIX2hLEWFZnHiau1K8cWYV 9KFqVmO3CzxmPVcDImFYUMimZTwzkCRTWytxp63WXEsgRJsuaHBy21SlEygsT5pn X3ZS17UKEhZboFzXgm1VKFzilh/7VQKndnMNonED3zZXzhEcPqCU0YCP5bGRO0To l/O/7NyD74olq1tuKN+ys+yYVaaiQa6/eH6z6f0nP91WjfwGFkKKyKUGh1d6XUWk KpwMvkOlHhmI/lUMEKj0SMV7IVgSnVvS8vpwqTcyP7xmObQbAvW/JqajyG2/uGct jZDLmDsLU+cTZ9VWJaQzDE5hiwDH91yo -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:18 2025 by rpki-client