$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: JIMaxORIdus5zZfiyiHQ6GHIuwhx+l83F2utzJxKFhY= Subject key identifier: D8:A0:98:1F:4B:19:9C:B1:C4:BC:12:A7:73:B7:B2:A0:D1:E7:26:E8 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 0459 Signing time: Sat 09 Aug 2025 00:41:29 +0000 Manifest this update: Sat 09 Aug 2025 00:41:29 +0000 Manifest next update: Sat 16 Aug 2025 00:41:29 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: i6Eb2U5PAqWlmZHqAlTZzTSsRxJ8GXCNrJvib/bCBaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Aug 9 00:41:29 2025 GMT Not After : Aug 16 00:41:29 2025 GMT Subject: CN=68969939-16ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:a8:5a:3a:ae:5f:bd:d5:8d:37:ba:2f:d6: ef:3c:b7:a3:09:d8:99:48:36:18:c9:ec:cc:18:5f: 7d:64:cb:7f:45:7c:1b:cc:76:11:9c:ef:5a:44:7a: 02:8d:e4:bc:8f:1f:2b:71:21:af:a6:e1:13:54:fe: 95:a6:82:3b:9a:79:77:5d:cb:d3:c6:e5:eb:bc:c5: 7c:26:2c:d4:74:6d:de:24:e2:9c:92:39:81:17:61: 85:07:e9:58:ae:df:9f:1e:86:11:2b:09:fc:ad:9d: 3c:4e:eb:7f:9d:7f:fc:e4:83:27:eb:37:82:0e:17: 2e:10:9b:8b:e4:ed:43:dd:92:68:4e:1b:27:de:11: 1b:c1:e3:3d:b7:24:25:9b:98:de:17:5d:3c:15:e1: df:11:e1:37:d7:fe:85:5e:6c:57:b1:fd:34:e1:16: 8e:3b:5d:45:cd:63:ce:2d:92:e5:ea:5a:ad:31:74: de:85:bf:91:ff:1c:1a:ff:ee:a0:6a:0d:56:c4:9a: fb:39:26:1a:49:95:84:d9:a5:aa:ff:46:67:ca:b2: 70:32:5c:42:41:9a:8b:36:55:89:88:84:cc:67:a0: 76:32:a8:8e:c7:2e:bc:72:c8:9f:d6:6f:de:ee:17: 99:cf:e7:00:f0:ed:dd:20:61:e2:66:a6:a5:99:0d: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:98:1F:4B:19:9C:B1:C4:BC:12:A7:73:B7:B2:A0:D1:E7:26:E8 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:95:d8:43:b0:25:6f:44:60:dc:26:a0:73:a3:48:f3:95:43: c4:18:29:68:9c:4c:10:a5:23:d4:da:c1:fa:45:a9:3e:a0:dc: ad:5e:22:49:45:bd:fb:26:37:bf:19:0d:0f:79:09:af:da:9d: 6c:d6:3a:11:ad:db:ab:78:95:15:d2:0d:56:89:eb:ae:5f:b1: a4:3e:44:f0:1f:e2:3f:a3:35:e8:a8:ac:38:17:20:f3:42:aa: b9:f3:c4:e1:27:67:95:04:f9:16:fd:6c:00:1a:c0:11:7b:a4: 5e:ad:12:52:54:1f:e2:be:ed:b3:4c:64:9f:c6:d5:b9:c1:f2: 53:9a:61:db:cb:0e:b6:b5:bb:b8:b4:0d:02:c3:a6:70:1d:1d: db:f6:de:25:73:b8:9d:5e:d5:ac:9f:32:61:e9:ce:ca:1c:73: 62:ce:02:04:1f:f8:a1:d2:9e:23:a9:1c:dc:1e:c0:56:83:82: 9e:48:f2:b3:73:61:af:3a:3c:96:30:d1:5b:bf:e2:2c:dc:e8: 88:82:c6:ea:e1:5c:84:a1:b4:4c:63:82:02:00:f6:b6:98:12: 74:b6:de:f4:d2:5d:28:e1:73:d0:39:2c:a8:73:37:7c:a7:1a: 64:e6:c8:17:52:10:e8:74:5c:d4:bb:ef:46:5e:c9:98:e5:39: f5:1f:07:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUwODA5MDA0MTI5WhcNMjUwODE2MDA0MTI5WjAYMRYwFAYD VQQDEw02ODk2OTkzOS0xNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kmoWjquX73VjTe6L9bvPLejCdiZSDYYyezMGF99ZMt/RXwbzHYRnO9aRHoC jeS8jx8rcSGvpuETVP6VpoI7mnl3XcvTxuXrvMV8JizUdG3eJOKckjmBF2GFB+lY rt+fHoYRKwn8rZ08Tut/nX/85IMn6zeCDhcuEJuL5O1D3ZJoThsn3hEbweM9tyQl m5jeF108FeHfEeE31/6FXmxXsf004RaOO11FzWPOLZLl6lqtMXTehb+R/xwa/+6g ag1WxJr7OSYaSZWE2aWq/0ZnyrJwMlxCQZqLNlWJiITMZ6B2MqiOxy68csif1m/e 7heZz+cA8O3dIGHiZqalmQ04jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNigmB9L GZyxxLwSp3O3sqDR5yboMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQColdhDsCVvRGDcJqBzo0jzlUPEGClonEwQpSPU2sH6Rak+oNytXiJJ Rb37Jje/GQ0PeQmv2p1s1joRrdureJUV0g1WieuuX7GkPkTwH+I/ozXoqKw4FyDz Qqq588ThJ2eVBPkW/WwAGsARe6RerRJSVB/ivu2zTGSfxtW5wfJTmmHbyw62tbu4 tA0Cw6ZwHR3b9t4lc7idXtWsnzJh6c7KHHNizgIEH/ih0p4jqRzcHsBWg4KeSPKz c2GvOjyWMNFbv+Is3OiIgsbq4VyEobRMY4ICAPa2mBJ0tt700l0o4XPQOSyoczd8 pxpk5sgXUhDodFzUu+9GXsmY5Tn1HweQ -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:08 2025 by rpki-client