$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: FyPY2+nsWmuIuwl/KsXxDeFaX/S/A19D6+OWiothV14= Subject key identifier: 3B:FD:F0:78:98:A6:28:0D:CE:D4:8C:D0:67:17:D6:99:E4:9B:4D:12 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: BE Signing time: Sat 19 Jul 2025 06:04:44 +0000 Manifest this update: Sat 19 Jul 2025 06:04:43 +0000 Manifest next update: Sat 26 Jul 2025 06:04:43 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: /a3W7ZEqxQYyqLAFzaQrOszDZNEnRHVU3/nX5xFMClo=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Jul 19 06:04:43 2025 GMT Not After : Jul 26 06:04:43 2025 GMT Subject: CN=687b357c-57a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:f0:d0:a2:ab:fc:45:38:85:25:9f:dd:05: 77:f2:fe:c7:a9:a0:35:b3:b3:a6:79:fc:22:b2:1c: 28:9f:9c:ce:ed:81:08:e0:e5:81:f7:03:d3:22:e9: a0:e6:2a:2d:db:5b:8a:35:d1:81:2f:04:5e:c4:59: 7a:69:41:b7:ac:69:c8:5f:22:06:fe:38:2a:2d:d1: 39:5e:a2:70:f4:e7:73:b2:ab:a6:3f:a7:38:ca:40: 63:f5:cb:44:f3:1f:fe:d1:79:df:18:45:e1:e6:df: 54:66:51:b1:12:c7:7b:57:5d:c2:5a:97:f2:13:5b: 3a:ce:1c:fd:e1:55:d6:67:67:01:fc:a8:67:62:89: db:5c:c1:48:66:58:ca:04:fb:02:b8:15:bd:c8:9a: f1:e2:d1:36:dd:c6:c8:bd:11:c6:23:da:ef:99:ec: 00:75:d5:55:29:5c:90:51:cd:49:5a:a2:eb:7c:b4: 19:6b:87:ba:e9:91:69:26:42:07:b8:e1:f6:0f:64: 88:1e:bd:14:7a:96:28:14:27:6e:6a:ec:3e:9b:c5: 00:5b:6b:12:d7:d2:2e:06:1f:00:fa:0f:16:4c:62: 1c:7c:50:16:66:74:ee:2d:ef:58:49:46:87:c4:29: 1a:70:4c:07:9c:82:18:3d:c0:42:87:31:ba:1b:0d: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FD:F0:78:98:A6:28:0D:CE:D4:8C:D0:67:17:D6:99:E4:9B:4D:12 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:ec:8b:21:b7:33:7a:b2:28:cb:92:a2:86:fa:d6:3e:c9: 99:e6:9d:8a:ff:9e:72:a9:19:a8:e5:37:43:0a:ea:b0:a7:a8: 58:9c:c5:0c:fc:88:de:16:18:c1:db:75:19:a1:50:d3:0a:b6: 62:95:73:0e:99:f3:b3:88:c6:3b:e6:75:f5:3d:f2:60:2a:58: 4a:1c:26:76:ef:20:92:b4:61:55:ee:5c:55:c5:2d:e9:c9:04: ee:db:8a:e2:7c:87:aa:b5:02:f0:5c:49:7b:05:4c:0f:b8:b2: 30:a8:15:43:6e:50:31:38:bd:12:9c:a6:a5:89:a2:e0:a0:fb: c1:bd:e3:25:ea:a5:3d:58:8e:0e:7c:ef:37:63:fa:7b:96:b2: e5:ca:c4:f7:cf:c4:92:ee:be:6c:2c:6d:f9:68:94:0e:93:52: b9:7f:70:f1:46:11:7a:74:80:9c:59:f5:de:70:27:03:90:a9: 15:87:7c:6a:1f:0f:5e:e0:f3:68:73:c6:46:ec:81:3f:6e:a8: 2d:f9:f2:8f:7f:43:f8:d1:35:2f:60:0f:e0:fb:1e:e0:08:60: 6e:0f:5a:34:4a:57:b4:f1:a2:0a:ab:92:ff:7f:0f:b5:c5:c9: ff:72:70:6e:96:4f:2e:44:bc:f2:95:80:15:4c:40:e2:3d:e0: 25:44:5a:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNzE5MDYwNDQzWhcNMjUwNzI2MDYwNDQzWjAYMRYwFAYD VQQDEw02ODdiMzU3Yy01N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWTw0KKr/EU4hSWf3QV38v7HqaA1s7Omefwishwon5zO7YEI4OWB9wPTIumg 5iot21uKNdGBLwRexFl6aUG3rGnIXyIG/jgqLdE5XqJw9OdzsqumP6c4ykBj9ctE 8x/+0XnfGEXh5t9UZlGxEsd7V13CWpfyE1s6zhz94VXWZ2cB/KhnYonbXMFIZljK BPsCuBW9yJrx4tE23cbIvRHGI9rvmewAddVVKVyQUc1JWqLrfLQZa4e66ZFpJkIH uOH2D2SIHr0UepYoFCduauw+m8UAW2sS19IuBh8A+g8WTGIcfFAWZnTuLe9YSUaH xCkacEwHnIIYPcBChzG6Gw2z4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDv98HiY pigNztSM0GcX1pnkm00SMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4/OyLIbczerIoy5KihvrWPsmZ5p2K/55yqRmo5TdDCuqwp6hYnMUM /IjeFhjB23UZoVDTCrZilXMOmfOziMY75nX1PfJgKlhKHCZ27yCStGFV7lxVxS3p yQTu24rifIeqtQLwXEl7BUwPuLIwqBVDblAxOL0SnKaliaLgoPvBveMl6qU9WI4O fO83Y/p7lrLlysT3z8SS7r5sLG35aJQOk1K5f3DxRhF6dICcWfXecCcDkKkVh3xq Hw9e4PNoc8ZG7IE/bqgt+fKPf0P40TUvYA/g+x7gCGBuD1o0Sle08aIKq5L/fw+1 xcn/cnBulk8uRLzylYAVTEDiPeAlRFov -----END CERTIFICATE-----Generated at Sun Jul 20 20:37:40 2025 by rpki-client