$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: 6pAlVspdbVZ23V2K4+ml2LVbJQAJ4HZivV+IK0HR+y8= Subject key identifier: F5:23:A7:3B:F7:EC:BB:59:1C:16:A1:8C:ED:2B:7F:FE:19:74:17:3E Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 0263 Signing time: Tue 05 Aug 2025 02:24:16 +0000 Manifest this update: Tue 05 Aug 2025 02:24:16 +0000 Manifest next update: Tue 12 Aug 2025 02:24:16 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: Cqjle6pru5zi1sJBPcUEuuy7C8L5f+j8qqlevwF5SpY=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: ULGKwEOFyOrsmtR9RLcNHZ1T/UHrIBp7ZTGPrjal32s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: Aug 5 02:24:16 2025 GMT Not After : Aug 12 02:24:16 2025 GMT Subject: CN=68916b50-5921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:6f:7b:b0:54:43:7e:f1:70:d2:1e:63:1c: 0a:c6:d1:19:76:62:81:50:61:65:fa:9c:ac:9a:43: 7b:d6:95:aa:f9:1d:91:f2:17:7f:56:6a:f1:f7:63: b3:ff:09:ab:65:4e:5f:58:9f:87:50:30:a7:c3:91: 54:95:23:a3:e1:57:74:81:24:07:b1:42:bc:ab:03: e2:4c:b1:02:5b:6c:a4:f9:4a:c9:c3:ae:35:01:04: b6:aa:f0:3e:24:63:eb:99:10:44:f1:0e:01:f5:50: 6d:33:db:a6:78:61:81:c3:a3:60:88:ae:44:f0:2e: 02:c1:28:27:d0:be:bc:ee:5f:82:a5:70:94:29:a3: ee:96:6f:40:cf:ba:35:d6:cb:2a:6b:fa:69:77:a0: 4b:b8:77:48:a8:dd:5e:5d:42:dc:0c:24:75:d6:44: d2:50:d3:c7:ff:0e:75:f1:f8:4a:b8:63:76:0b:10: fc:e8:4c:39:2e:ca:82:11:05:d4:50:a6:ff:ec:0c: 4b:7f:13:b9:e7:9b:c5:52:50:3a:a6:1e:c9:d3:ae: 87:1a:17:dd:de:8a:06:3f:b2:d9:db:c0:0c:73:c4: 65:ed:89:3e:bd:3e:71:1d:f5:db:cd:9c:bf:7f:a1: 8c:5d:5c:c4:ab:20:ed:42:19:cd:05:94:c9:cb:03: 66:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:A7:3B:F7:EC:BB:59:1C:16:A1:8C:ED:2B:7F:FE:19:74:17:3E X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bd:fc:10:ae:b7:ed:04:46:02:7d:b9:e6:05:a1:6e:f1:55: 0b:0d:9f:1d:e8:6f:ea:dd:c3:b2:e4:96:3d:f8:ff:eb:93:77: 27:52:c6:8a:69:0e:da:87:78:3a:9e:f2:24:96:a0:8e:97:be: da:ca:90:08:36:86:ee:d0:e4:ae:a7:0a:87:04:3b:3f:99:9c: b1:9c:42:f9:28:95:f5:bc:bd:3d:0e:29:b0:07:97:fe:6b:a8: 10:38:52:71:c4:35:94:3e:d0:e9:27:69:a6:09:23:16:39:5d: 13:9e:ed:d1:5b:21:a5:e3:33:66:b8:c2:6d:49:e3:eb:77:03: 90:7f:56:82:71:15:d9:ed:bb:8b:ea:ce:c4:91:69:cb:ad:d6: 84:aa:f7:86:99:9d:81:fc:3c:38:54:93:d8:2b:98:c2:81:c9: 18:11:2f:85:5c:1c:0f:ac:e8:57:82:f3:c2:45:81:ce:9b:97: ef:a8:d0:33:8b:ef:f4:4d:d5:bb:c9:2c:2f:9a:54:5f:51:5d: 0c:2f:43:15:72:b5:c3:06:2a:84:d1:75:9c:2d:12:40:0e:9f: 0a:f2:a8:29:e9:4e:dc:a1:a3:a6:b0:27:6d:95:f0:c6:35:77: b2:9b:3c:b1:48:84:49:c2:83:e7:b6:cd:2f:10:45:22:ab:b5: 0d:8e:b2:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjUwODA1MDIyNDE2WhcNMjUwODEyMDIyNDE2WjAYMRYwFAYD VQQDEw02ODkxNmI1MC01OTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthpve7BUQ37xcNIeYxwKxtEZdmKBUGFl+pysmkN71pWq+R2R8hd/Vmrx92Oz /wmrZU5fWJ+HUDCnw5FUlSOj4Vd0gSQHsUK8qwPiTLECW2yk+UrJw641AQS2qvA+ JGPrmRBE8Q4B9VBtM9umeGGBw6NgiK5E8C4CwSgn0L687l+CpXCUKaPulm9Az7o1 1ssqa/ppd6BLuHdIqN1eXULcDCR11kTSUNPH/w518fhKuGN2CxD86Ew5LsqCEQXU UKb/7AxLfxO555vFUlA6ph7J066HGhfd3ooGP7LZ28AMc8Rl7Yk+vT5xHfXbzZy/ f6GMXVzEqyDtQhnNBZTJywNm1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUjpzv3 7LtZHBahjO0rf/4ZdBc+MB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRvfwQrrftBEYCfbnmBaFu8VULDZ8d6G/q3cOy5JY9+P/rk3cnUsaK aQ7ah3g6nvIklqCOl77aypAINobu0OSupwqHBDs/mZyxnEL5KJX1vL09DimwB5f+ a6gQOFJxxDWUPtDpJ2mmCSMWOV0Tnu3RWyGl4zNmuMJtSePrdwOQf1aCcRXZ7buL 6s7EkWnLrdaEqveGmZ2B/Dw4VJPYK5jCgckYES+FXBwPrOhXgvPCRYHOm5fvqNAz i+/0TdW7ySwvmlRfUV0ML0MVcrXDBiqE0XWcLRJADp8K8qgp6U7coaOmsCdtlfDG NXeymzyxSIRJwoPnts0vEEUiq7UNjrIB -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:20 2025 by rpki-client