$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: 4z8KuWqmp9I+aCIioCR/R6tC787gEFuw1cqJRln4uw8= Subject key identifier: 59:BF:B5:19:E8:76:4A:B2:BE:54:BD:B2:B4:D8:17:20:8C:79:EF:F6 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2CCC Signing time: Sun 24 Aug 2025 16:25:14 +0000 Manifest this update: Sun 24 Aug 2025 16:25:14 +0000 Manifest next update: Sun 31 Aug 2025 16:25:14 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: HKSfnrxJoB7mYCX+X3K6PQFX3rtZzeSGx5tAsE91S4c=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: K0pMn3ybPgYAvgYIHKptYZvODgeJgnqA7J5JHWlu6c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Aug 24 16:25:14 2025 GMT Not After : Aug 31 16:25:14 2025 GMT Subject: CN=68ab3cea-1a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:e2:83:16:bb:e4:0c:26:66:a5:36:ac:a2: 41:17:65:c6:24:e3:b1:95:9c:43:4f:b1:20:79:4b: ae:0f:4a:62:ad:74:ba:a5:bb:56:cb:2b:7b:26:17: 83:92:b9:34:d1:54:aa:0e:be:0e:1e:b0:97:46:5c: 87:aa:53:4b:95:d6:ad:a4:cf:71:e0:97:e0:6b:48: 14:72:9a:7b:32:97:10:31:25:85:1b:ea:ef:d0:74: 1c:07:fd:cf:e8:02:b3:c4:63:9f:3a:e6:18:35:95: 92:7d:5a:2c:09:4a:34:3f:fc:ba:8f:b5:c5:e2:4d: 05:74:79:40:6e:b8:07:5f:69:65:e0:4c:65:08:79: 51:7f:3c:04:6d:64:0c:88:81:68:9c:5a:8b:10:4b: af:a5:e8:6a:38:d6:5d:f4:99:f2:a7:a1:ac:7f:88: 0f:4b:0a:9f:34:1b:e9:53:8e:e8:7b:77:64:0b:d2: 58:cb:9d:f3:4c:c6:a7:e6:57:23:65:fd:dc:50:5f: b3:e5:0d:d7:0b:5d:8a:93:82:38:d2:63:4f:72:c0: 26:64:90:2a:f6:dc:fa:18:f6:d2:72:d0:67:c9:10: c1:13:fa:f3:79:05:71:8e:5b:e3:ab:3b:90:4a:51: 51:ab:b8:ff:06:6c:fe:35:0f:70:e4:fe:26:1c:e9: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:B5:19:E8:76:4A:B2:BE:54:BD:B2:B4:D8:17:20:8C:79:EF:F6 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6b:c1:02:36:fd:38:19:63:2f:36:55:49:8d:b6:a8:11:58: 42:60:ad:80:82:42:d1:d9:3c:3f:5c:38:e6:7c:08:8b:f5:f5: f5:59:6d:6c:9a:a2:2e:a0:ab:4a:8e:db:ab:cb:1a:dd:f4:66: ff:3b:a0:e5:84:a2:12:12:be:bb:e9:56:02:6c:64:63:36:d6: 71:61:e0:4f:87:9a:9e:f6:cb:60:b2:15:d5:c7:e9:b8:69:dc: 33:c7:a3:0c:5a:49:13:8e:9b:c6:5a:84:29:55:c7:a7:47:a3: 2d:71:f6:9d:70:3e:15:4a:9d:55:17:cb:6a:42:d6:00:6d:3d: 56:71:7b:a3:86:2a:b7:cb:c6:24:f7:58:30:88:3a:74:26:ed: 14:12:3c:ad:d6:02:a9:a5:1b:59:cb:96:1e:1f:c8:16:e6:65: 43:e9:64:6d:0a:30:be:23:3c:2e:bb:30:3d:37:0a:07:d3:d6: c9:9d:ff:cc:58:1d:bd:0e:72:09:6c:8f:59:e5:ac:d1:d1:6b: e1:15:6f:79:ec:9b:b6:1d:8f:88:87:0a:f8:7d:d6:99:5b:d3: f8:60:84:43:9d:0f:16:7e:76:17:9c:e4:89:af:c0:2e:c9:e7: d8:3c:be:13:f7:29:c1:ef:e2:4b:c3:22:1f:79:e9:bc:ff:53: a3:45:4f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUwODI0MTYyNTE0WhcNMjUwODMxMTYyNTE0WjAYMRYwFAYD VQQDEw02OGFiM2NlYS0xYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyTigxa75AwmZqU2rKJBF2XGJOOxlZxDT7EgeUuuD0pirXS6pbtWyyt7JheD krk00VSqDr4OHrCXRlyHqlNLldatpM9x4Jfga0gUcpp7MpcQMSWFG+rv0HQcB/3P 6AKzxGOfOuYYNZWSfVosCUo0P/y6j7XF4k0FdHlAbrgHX2ll4ExlCHlRfzwEbWQM iIFonFqLEEuvpehqONZd9Jnyp6Gsf4gPSwqfNBvpU47oe3dkC9JYy53zTMan5lcj Zf3cUF+z5Q3XC12Kk4I40mNPcsAmZJAq9tz6GPbSctBnyRDBE/rzeQVxjlvjqzuQ SlFRq7j/Bmz+NQ9w5P4mHOnUewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm/tRno dkqyvlS9srTYFyCMee/2MB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBka8ECNv04GWMvNlVJjbaoEVhCYK2AgkLR2Tw/XDjmfAiL9fX1WW1s mqIuoKtKjturyxrd9Gb/O6DlhKISEr676VYCbGRjNtZxYeBPh5qe9stgshXVx+m4 adwzx6MMWkkTjpvGWoQpVcenR6MtcfadcD4VSp1VF8tqQtYAbT1WcXujhiq3y8Yk 91gwiDp0Ju0UEjyt1gKppRtZy5YeH8gW5mVD6WRtCjC+IzwuuzA9NwoH09bJnf/M WB29DnIJbI9Z5azR0WvhFW957Ju2HY+Ihwr4fdaZW9P4YIRDnQ8WfnYXnOSJr8Au yefYPL4T9ynB7+JLwyIfeem8/1OjRU/o -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:29 2025 by rpki-client