$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: 7h06rnnUIl4AfRuchenwbeQ9NqZ/PiMvXFvtb29/Nfc= Subject key identifier: E8:7F:A8:D2:0B:06:D3:53:11:7E:CE:79:BC:8D:2E:09:3E:16:E9:3A Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 069F Signing time: Thu 04 Sep 2025 22:32:54 +0000 Manifest this update: Thu 04 Sep 2025 22:32:54 +0000 Manifest next update: Thu 11 Sep 2025 22:32:54 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: T8MEzE8DeP4Hd3wcnQYcGqkb7mh14s2bcstlcPQXDOw=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Sep 4 22:32:54 2025 GMT Not After : Sep 11 22:32:54 2025 GMT Subject: CN=68ba1396-c73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:5c:74:d5:01:5a:95:c6:fc:e1:40:45:47: 4b:09:94:d4:84:57:40:1e:46:45:c3:70:a6:47:3e: 02:c5:dd:8b:a6:69:60:b2:eb:5c:ad:ac:00:5f:ed: ef:b4:c3:a2:bb:c2:97:b3:e2:51:16:36:cf:79:d4: ef:1d:de:b7:dd:2e:cf:82:03:8e:1d:95:62:3b:41: 16:5b:56:20:dc:4c:de:5f:2b:56:48:96:77:ff:21: 01:42:dd:6c:7c:1b:4c:58:27:16:b2:66:80:c8:6f: a3:ac:1c:c2:4a:0e:0a:39:6a:97:7a:72:cd:38:6a: 72:b1:b5:ce:fd:d5:9b:6f:19:b1:05:cf:10:ff:70: 23:74:ca:58:3e:85:2b:bf:d2:86:ea:38:4d:c0:b4: ef:18:53:e3:02:f1:2c:f5:b1:3a:79:36:be:cd:c5: 4d:58:15:e0:93:95:75:86:99:98:6b:9a:16:08:47: d4:57:da:2d:08:a1:f4:c2:70:d9:07:89:6e:f7:a4: 40:e3:13:b2:6a:73:e6:8b:aa:8b:c0:eb:a5:7d:1e: b4:48:da:ec:fa:30:07:3d:11:57:38:95:8f:6d:83: 7c:49:93:cf:fd:72:99:7f:5d:c0:c0:dd:9c:f8:2d: ea:f9:27:e9:7d:a0:b6:76:04:d5:40:61:76:d6:bd: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7F:A8:D2:0B:06:D3:53:11:7E:CE:79:BC:8D:2E:09:3E:16:E9:3A X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:fa:92:61:d6:b1:ce:fc:5b:ee:df:69:15:43:ff:e7:d3:40: 93:77:6d:1d:3d:ff:30:96:32:22:d4:ef:0f:e6:31:6c:38:d9: 7e:83:25:54:bb:5d:2e:14:a4:57:18:bc:d4:6d:41:d2:f1:8e: a7:dd:cb:ac:1b:8e:2b:39:68:8f:4f:9b:3a:28:4e:27:4b:71: c5:0f:a0:f4:42:e2:9c:d3:d2:1a:a5:fd:ad:14:47:21:87:c0: 0d:1a:e4:3f:84:34:fe:df:12:7d:62:16:bd:a5:ad:4b:d8:e7: 77:92:46:3f:94:bd:4e:af:8b:25:7c:97:33:09:a1:10:41:14: f0:66:36:9b:d6:f0:e3:fa:d6:da:c3:a8:e7:c1:b9:9f:2d:f1: 6c:28:4c:18:f1:03:53:15:96:ce:76:bb:32:68:5c:52:c1:33: 1c:36:a2:7a:3e:0e:a3:75:58:53:f2:51:45:30:e7:e7:97:e2: a6:20:4f:11:f7:da:e7:94:6d:ef:15:37:fd:ad:3e:02:fb:cd: a4:28:9b:da:69:97:9c:5d:0a:bc:96:10:0a:75:0c:b7:53:b9: a9:37:46:1a:12:55:7a:50:66:3d:27:b8:b1:d9:94:d9:a3:74: d6:fd:7f:5a:a1:25:b1:76:82:72:92:b6:4f:11:02:b8:57:57: f3:e2:77:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwOTA0MjIzMjU0WhcNMjUwOTExMjIzMjU0WjAYMRYwFAYD VQQDEw02OGJhMTM5Ni1jNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0excdNUBWpXG/OFARUdLCZTUhFdAHkZFw3CmRz4Cxd2LpmlgsutcrawAX+3v tMOiu8KXs+JRFjbPedTvHd633S7PggOOHZViO0EWW1Yg3EzeXytWSJZ3/yEBQt1s fBtMWCcWsmaAyG+jrBzCSg4KOWqXenLNOGpysbXO/dWbbxmxBc8Q/3AjdMpYPoUr v9KG6jhNwLTvGFPjAvEs9bE6eTa+zcVNWBXgk5V1hpmYa5oWCEfUV9otCKH0wnDZ B4lu96RA4xOyanPmi6qLwOulfR60SNrs+jAHPRFXOJWPbYN8SZPP/XKZf13AwN2c +C3q+SfpfaC2dgTVQGF21r1f/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh/qNIL BtNTEX7OebyNLgk+Fuk6MB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm+pJh1rHO/Fvu32kVQ//n00CTd20dPf8wljIi1O8P5jFsONl+gyVU u10uFKRXGLzUbUHS8Y6n3cusG44rOWiPT5s6KE4nS3HFD6D0QuKc09Iapf2tFEch h8ANGuQ/hDT+3xJ9Yha9pa1L2Od3kkY/lL1Or4slfJczCaEQQRTwZjab1vDj+tba w6jnwbmfLfFsKEwY8QNTFZbOdrsyaFxSwTMcNqJ6Pg6jdVhT8lFFMOfnl+KmIE8R 99rnlG3vFTf9rT4C+82kKJvaaZecXQq8lhAKdQy3U7mpN0YaElV6UGY9J7ix2ZTZ o3TW/X9aoSWxdoJykrZPEQK4V1fz4ncO -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:58 2025 by rpki-client