$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: uxOqSt6acbmV9fLdzVhZ7MSl1kcXLuZWdC3z/DzdiB0= Subject key identifier: 8B:A0:EE:CF:BE:88:FB:3D:5D:00:0F:4D:A6:1B:B6:F6:61:2E:E0:C6 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 0271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 026A Signing time: Sat 09 Aug 2025 02:17:40 +0000 Manifest this update: Sat 09 Aug 2025 02:17:39 +0000 Manifest next update: Sat 16 Aug 2025 02:17:39 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: A6g8tZs+8gLmwEMr+4kbYSxn3fuN3QUT9AiqZMaEBVY=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Aug 9 02:17:39 2025 GMT Not After : Aug 16 02:17:39 2025 GMT Subject: CN=6896afc4-5dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c1:80:aa:83:33:17:24:7e:3b:da:3d:ba:8c: 48:79:e0:ad:6f:d6:ec:f5:84:c1:57:f2:46:cf:3f: 39:f9:a5:d3:28:b4:5a:38:36:14:91:d3:64:13:d9: 94:69:8f:45:20:db:4e:ab:a4:ac:fa:d6:fd:69:4a: 09:f0:35:95:df:2d:e2:3a:e3:78:b6:f5:85:a1:c6: cd:1a:c0:c3:2f:24:9a:bb:89:f2:61:ee:ef:39:a2: 33:05:5c:c4:d9:da:23:98:11:4b:50:49:c1:35:49: b3:68:f9:ca:20:1b:23:23:48:b9:3d:62:0d:06:ed: 46:cb:1b:f3:68:f6:14:61:2d:15:fe:47:d2:77:78: e8:19:05:12:89:0f:02:af:6c:5a:9b:c2:c5:34:f2: 34:3f:2b:af:73:cf:b3:90:eb:2a:b0:40:c6:de:26: 09:85:cb:f0:f2:5c:05:7f:b9:ea:17:fe:9d:35:01: b9:4e:c5:c2:56:6d:c3:f5:71:6b:28:ff:79:82:da: 93:ba:e8:8f:f8:25:f9:d4:32:7b:bd:51:8d:1c:4e: 69:28:63:83:8a:41:10:d2:5e:f5:a7:b0:28:fc:a3: b6:fa:c3:a4:c2:ee:43:44:b0:a2:65:ef:54:01:56: cc:5b:31:83:4e:9d:4e:3f:3d:d1:1f:f6:23:d1:31: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A0:EE:CF:BE:88:FB:3D:5D:00:0F:4D:A6:1B:B6:F6:61:2E:E0:C6 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:37:c0:6c:17:19:ed:07:a9:35:a3:e5:9c:fe:70:04:e8:3c: c9:f7:10:1b:d3:ff:0e:4b:90:8e:99:ac:43:45:59:55:be:98: aa:e9:fe:4e:74:a9:74:d8:d0:16:bf:b8:15:b5:34:0d:7e:3b: 74:d0:e4:2b:3e:fd:3a:c0:b0:c4:e7:1f:66:f2:94:f1:42:ca: 34:96:d2:88:02:73:40:d1:b1:17:02:e6:c4:44:18:58:3a:39: 95:7c:b2:db:0a:e6:ea:c9:42:fd:13:11:af:02:4e:a8:02:12: 16:2e:2c:34:83:d8:a4:0f:88:2f:5e:48:8f:88:26:5b:8c:f4: 2d:16:45:1d:aa:2f:57:c3:66:e8:d3:9a:46:a1:3d:13:a9:8e: 8a:d7:17:39:93:da:e1:88:41:97:41:66:79:c4:91:c9:85:2a: 91:5c:4b:cf:c9:75:ff:fa:0d:28:ef:1c:7f:69:4c:54:56:66: bd:d4:64:22:19:43:3e:49:31:3c:6f:b6:ac:5d:43:5e:dc:d3: 02:0c:9e:53:56:8e:63:2a:95:9b:43:04:93:84:a1:fc:b2:05: c2:07:a4:cc:5d:b3:65:97:8e:93:56:40:da:a1:b5:cd:1d:70: 9a:fb:b4:21:88:0f:15:d1:6c:f1:d0:65:dc:e9:07:fd:b3:59: f3:db:81:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUwODA5MDIxNzM5WhcNMjUwODE2MDIxNzM5WjAYMRYwFAYD VQQDEw02ODk2YWZjNC01ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sGAqoMzFyR+O9o9uoxIeeCtb9bs9YTBV/JGzz85+aXTKLRaODYUkdNkE9mU aY9FINtOq6Ss+tb9aUoJ8DWV3y3iOuN4tvWFocbNGsDDLySau4nyYe7vOaIzBVzE 2dojmBFLUEnBNUmzaPnKIBsjI0i5PWINBu1GyxvzaPYUYS0V/kfSd3joGQUSiQ8C r2xam8LFNPI0Pyuvc8+zkOsqsEDG3iYJhcvw8lwFf7nqF/6dNQG5TsXCVm3D9XFr KP95gtqTuuiP+CX51DJ7vVGNHE5pKGODikEQ0l71p7Ao/KO2+sOkwu5DRLCiZe9U AVbMWzGDTp1OPz3RH/Yj0TFBUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIug7s++ iPs9XQAPTaYbtvZhLuDGMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZN8BsFxntB6k1o+Wc/nAE6DzJ9xAb0/8OS5COmaxDRVlVvpiq6f5O dKl02NAWv7gVtTQNfjt00OQrPv06wLDE5x9m8pTxQso0ltKIAnNA0bEXAubERBhY OjmVfLLbCubqyUL9ExGvAk6oAhIWLiw0g9ikD4gvXkiPiCZbjPQtFkUdqi9Xw2bo 05pGoT0TqY6K1xc5k9rhiEGXQWZ5xJHJhSqRXEvPyXX/+g0o7xx/aUxUVma91GQi GUM+STE8b7asXUNe3NMCDJ5TVo5jKpWbQwSThKH8sgXCB6TMXbNll46TVkDaobXN HXCa+7QhiA8V0Wzx0GXc6Qf9s1nz24FT -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:59 2025 by rpki-client