$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: iaOOG9Ec3N2m0QT+EY5H6dZPfCbKk+lHD/zU4QDNx4w= Subject key identifier: EC:C1:D8:67:4D:5D:97:3E:D0:E7:3B:E1:51:EA:1D:9A:52:05:97:9F Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A35 Signing time: Sun 10 Aug 2025 15:32:38 +0000 Manifest this update: Sun 10 Aug 2025 15:32:38 +0000 Manifest next update: Sun 17 Aug 2025 15:32:38 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: 50yzefm1+N4M+XRq4zXXicIL2/W4XQ13uzA6orfdbW8=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10848 (0x2a60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Aug 10 15:32:38 2025 GMT Not After : Aug 17 15:32:38 2025 GMT Subject: CN=6898bb96-161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:a2:4d:24:88:c6:57:45:df:7b:d9:45:74: c9:81:27:35:ad:bd:f3:15:dc:db:7d:bc:ef:09:c2: d0:71:09:05:18:bf:bc:bb:be:8c:9e:ba:63:3d:1a: 12:16:37:15:68:7b:23:9e:72:e9:4c:52:bf:b8:ad: b0:80:1b:9b:41:53:9a:d6:cf:45:5b:2c:c9:f7:7a: 65:a1:6f:86:27:89:75:46:8c:1e:1f:df:e2:cc:c0: 2c:0a:ea:0a:5f:7d:22:bb:e1:16:44:5e:f7:87:64: 50:94:bc:52:a6:30:55:e0:b0:fb:34:76:ae:fc:ae: 46:12:cf:d8:33:8b:c7:62:a4:ae:a0:01:93:e9:98: 38:87:a1:6a:a2:54:c7:fb:10:bb:8f:85:35:dc:b8: 9b:d7:d1:64:f2:f3:4f:dc:39:93:c8:21:cd:1c:92: 45:c0:8c:f0:90:5e:00:19:d1:32:87:e4:eb:59:86: d8:35:79:4d:9b:1b:0f:5d:1d:dc:3d:8e:83:97:05: 87:72:3c:8e:53:56:e4:a0:96:dc:28:f6:da:87:47: b3:9a:3a:2a:d7:aa:d2:98:34:c3:b1:88:f7:96:35: 42:2e:b5:d3:11:b2:39:ab:56:36:51:b1:9e:05:d2: 42:2a:1c:7b:e5:52:1a:e2:3e:3c:46:b9:8b:d0:21: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:D8:67:4D:5D:97:3E:D0:E7:3B:E1:51:EA:1D:9A:52:05:97:9F X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4d:7c:9c:db:22:4f:d4:07:a6:58:30:87:b6:1c:b0:ab:6b: 99:74:9c:75:90:6c:a5:6a:c4:59:d5:d7:80:c2:1c:c5:23:91: f2:91:9b:2b:2c:91:98:80:4d:e5:c3:64:77:9f:4f:11:d6:81: d5:8f:9e:e6:2e:9f:19:8f:d7:22:42:25:8d:c8:14:71:00:16: 65:a6:24:38:87:86:34:31:0d:03:cd:a6:bd:38:31:c2:b2:22: 82:fd:54:e4:d7:1e:fd:a6:80:ed:b0:15:5a:a1:f8:42:fa:16: 5e:1b:0f:10:fb:a9:8a:12:3f:98:cd:8b:02:91:db:c6:1d:a9: 18:88:4b:80:11:d8:98:a8:fd:c4:4e:d4:13:2c:9b:e0:42:d6: cc:74:d3:0c:04:ad:6f:11:09:d4:37:51:01:38:c1:76:59:1f: 60:fd:d9:98:d8:cf:e9:80:41:e3:5b:6d:ca:e9:98:fe:34:f8: 71:11:a0:ab:96:35:ad:ab:e5:00:79:ab:42:06:63:56:14:0e: 5f:a0:70:5a:8b:a3:8e:f0:fe:fa:cd:09:c6:66:5f:a9:f9:8c: 5a:d8:28:5c:5e:f2:bc:fb:48:83:a6:9c:60:27:72:10:5c:f1: a4:22:a3:59:ce:54:5b:c2:4f:ce:5c:61:4a:6f:eb:41:be:36: ae:ff:ae:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwODEwMTUzMjM4WhcNMjUwODE3MTUzMjM4WjAYMRYwFAYD VQQDEw02ODk4YmI5Ni0xNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3aiTSSIxldF33vZRXTJgSc1rb3zFdzbfbzvCcLQcQkFGL+8u76MnrpjPRoS FjcVaHsjnnLpTFK/uK2wgBubQVOa1s9FWyzJ93ploW+GJ4l1RoweH9/izMAsCuoK X30iu+EWRF73h2RQlLxSpjBV4LD7NHau/K5GEs/YM4vHYqSuoAGT6Zg4h6FqolTH +xC7j4U13Lib19Fk8vNP3DmTyCHNHJJFwIzwkF4AGdEyh+TrWYbYNXlNmxsPXR3c PY6DlwWHcjyOU1bkoJbcKPbah0ezmjoq16rSmDTDsYj3ljVCLrXTEbI5q1Y2UbGe BdJCKhx75VIa4j48RrmL0CE5VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzB2GdN XZc+0Oc74VHqHZpSBZefMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnTXyc2yJP1AemWDCHthywq2uZdJx1kGylasRZ1deAwhzFI5HykZsr LJGYgE3lw2R3n08R1oHVj57mLp8Zj9ciQiWNyBRxABZlpiQ4h4Y0MQ0Dzaa9ODHC siKC/VTk1x79poDtsBVaofhC+hZeGw8Q+6mKEj+YzYsCkdvGHakYiEuAEdiYqP3E TtQTLJvgQtbMdNMMBK1vEQnUN1EBOMF2WR9g/dmY2M/pgEHjW23K6Zj+NPhxEaCr ljWtq+UAeatCBmNWFA5foHBai6OO8P76zQnGZl+p+Yxa2ChcXvK8+0iDppxgJ3IQ XPGkIqNZzlRbwk/OXGFKb+tBvjau/64k -----END CERTIFICATE-----Generated at Mon Aug 11 07:32:43 2025 by rpki-client