$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: n9FT7bWbtODk5ynwgYrqQuDyci/u724GfLw7YW6NSrE= Subject key identifier: 30:8A:9C:8F:B8:33:F8:A7:81:ED:5C:00:C4:63:93:30:ED:AB:B8:72 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: D2 Signing time: Thu 07 Aug 2025 06:13:59 +0000 Manifest this update: Thu 07 Aug 2025 06:13:58 +0000 Manifest next update: Thu 14 Aug 2025 06:13:58 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: TlTMN96181GiRlp2t6XGP6jJy1oUUQ9bJsc22I7Smlo=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Aug 7 06:13:58 2025 GMT Not After : Aug 14 06:13:58 2025 GMT Subject: CN=68944427-9e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:00:c0:b9:43:cd:f0:a0:ef:ae:97:db:9f: bb:12:2b:43:87:20:c3:bb:11:8f:33:72:d8:05:b0: 78:8e:5c:4f:42:e6:a9:36:50:35:b9:03:0a:88:40: f3:85:12:a6:46:a3:c0:dd:61:59:d8:09:0d:1a:ce: 50:f8:62:07:91:a0:03:56:fd:7c:7f:8b:4c:b6:f8: 3c:f0:a9:55:9e:12:e6:a9:f9:0d:70:aa:9a:ae:0e: f9:ee:26:b9:09:b5:74:74:05:4d:48:27:a7:5d:bb: 7a:98:85:20:90:fe:18:88:26:ac:cd:20:bf:01:be: 53:c8:ec:d1:43:0b:de:18:f4:4f:53:80:47:36:21: b5:72:d6:ab:b0:fd:30:57:0d:93:04:9e:b2:49:7c: 07:89:a0:70:dc:e7:3d:b3:e2:13:2f:ca:7d:05:cd: 6d:ca:f1:60:18:34:0a:78:aa:bc:fb:42:75:86:98: 07:9f:69:f1:c9:17:d8:15:23:0c:5b:66:e3:21:7b: 51:0d:1b:79:74:a1:bf:b6:78:f5:3a:ca:bd:8a:d6: 27:7e:8d:8f:55:67:05:ab:7c:75:8a:ef:de:23:3f: 1d:8f:26:08:e8:be:55:38:46:29:96:98:77:fd:d6: cb:42:af:d7:f0:4e:c6:65:f3:59:fa:ea:2b:74:da: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:9C:8F:B8:33:F8:A7:81:ED:5C:00:C4:63:93:30:ED:AB:B8:72 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:63:ba:26:4b:54:12:ef:36:4e:20:12:55:a1:94:96:c2: 4a:4f:cd:35:58:43:78:b5:2b:cf:6d:9a:68:ca:36:d9:98:7f: cd:44:49:38:8d:d9:73:50:36:99:01:ae:26:09:72:23:ee:5a: a8:5d:08:fd:99:83:b1:1d:7f:b1:74:ea:4f:8a:c7:0a:b6:cd: 1d:81:dc:9b:6b:25:b4:5a:7d:0b:a3:79:e2:a6:f6:58:02:e7: f2:11:ae:a0:52:04:db:bd:11:be:56:ea:df:bf:08:99:43:21: ca:83:f4:81:7c:41:63:8d:80:f7:e0:71:6c:65:08:21:67:40: 13:a5:94:8b:e4:bc:17:98:3d:b3:5e:f7:57:8f:b3:4f:64:f5: 2d:44:c2:e5:fc:b4:e3:42:f2:5c:6b:4d:fa:23:2e:98:85:b1: 9e:55:ce:7b:45:ac:9b:f3:5a:5f:4c:8b:7c:01:86:f2:70:64: c8:f1:8f:68:47:01:af:d6:28:69:be:c3:b6:e4:10:8a:34:26: 78:7d:da:8e:8a:d3:45:0a:cb:0d:de:c3:a5:d6:f8:d4:9b:f3: fa:17:47:c1:5a:c3:98:e5:41:ef:62:83:16:05:8f:71:47:81: bc:c2:86:14:ed:03:e4:7c:e0:f2:84:02:50:62:bb:45:0d:c9: ae:d9:e4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwODA3MDYxMzU4WhcNMjUwODE0MDYxMzU4WjAYMRYwFAYD VQQDEw02ODk0NDQyNy05ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYgAwLlDzfCg766X25+7EitDhyDDuxGPM3LYBbB4jlxPQuapNlA1uQMKiEDz hRKmRqPA3WFZ2AkNGs5Q+GIHkaADVv18f4tMtvg88KlVnhLmqfkNcKqarg757ia5 CbV0dAVNSCenXbt6mIUgkP4YiCaszSC/Ab5TyOzRQwveGPRPU4BHNiG1ctarsP0w Vw2TBJ6ySXwHiaBw3Oc9s+ITL8p9Bc1tyvFgGDQKeKq8+0J1hpgHn2nxyRfYFSMM W2bjIXtRDRt5dKG/tnj1Osq9itYnfo2PVWcFq3x1iu/eIz8djyYI6L5VOEYplph3 /dbLQq/X8E7GZfNZ+uordNrIvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCKnI+4 M/inge1cAMRjkzDtq7hyMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIFWO6JktUEu82TiASVaGUlsJKT801WEN4tSvPbZpoyjbZmH/NREk4 jdlzUDaZAa4mCXIj7lqoXQj9mYOxHX+xdOpPiscKts0dgdybayW0Wn0Lo3nipvZY AufyEa6gUgTbvRG+VurfvwiZQyHKg/SBfEFjjYD34HFsZQghZ0ATpZSL5LwXmD2z XvdXj7NPZPUtRMLl/LTjQvJca036Iy6YhbGeVc57Rayb81pfTIt8AYbycGTI8Y9o RwGv1ihpvsO25BCKNCZ4fdqOitNFCssN3sOl1vjUm/P6F0fBWsOY5UHvYoMWBY9x R4G8woYU7QPkfODyhAJQYrtFDcmu2eRL -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:10 2025 by rpki-client