$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: 7fMR+PIfbJhWzNXw2ZRxuGf9DlxW68mpCFEC/kamyFM= Subject key identifier: 9F:F3:BB:1B:38:CF:06:E6:F7:60:48:DE:BE:CC:8B:53:14:D6:E2:44 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 34AD Signing time: Fri 08 Aug 2025 14:51:48 +0000 Manifest this update: Fri 08 Aug 2025 14:51:48 +0000 Manifest next update: Fri 15 Aug 2025 14:51:48 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: K02EJ56K1xvQnLur/CFgL6eDdXVeDEE5JC1Wq04wGgw=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Aug 8 14:51:48 2025 GMT Not After : Aug 15 14:51:48 2025 GMT Subject: CN=68960f04-7f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d4:25:d1:a0:24:a5:9b:f8:fe:a2:dd:17:04: 21:9d:8b:67:dd:4a:48:8d:ed:6d:c5:5c:ca:56:0f: a9:d6:44:39:22:d8:15:20:17:9f:f4:9f:61:5f:ee: ab:a8:0a:7b:dd:7b:42:86:28:9a:32:e3:98:05:6f: f7:78:4e:8d:11:9a:34:f8:c2:d7:76:b2:72:6f:e5: dc:1f:bc:72:90:b5:17:3e:e9:8e:6c:d7:01:06:a1: ba:a6:78:d4:24:f7:b0:ae:4c:27:67:1f:1b:e7:a7: 65:f8:36:36:37:90:36:e9:67:4d:25:82:62:d3:04: 5a:a8:db:a2:f0:c1:b6:0d:02:21:c5:90:c3:e1:ee: 7c:b4:c6:6f:b5:ba:32:03:19:52:03:ba:07:e4:96: e6:83:f3:1a:09:14:48:01:b3:74:a7:c0:14:03:7c: 9a:aa:3d:d6:5e:57:f2:ac:ca:e6:04:60:0e:a9:a8: 16:81:0a:8b:4c:81:76:37:80:83:b1:1a:29:e9:e6: f5:68:e7:cf:22:a3:97:0f:cb:bf:5b:9e:54:5d:ff: 0c:59:00:6a:a3:cf:22:73:25:5c:aa:f6:30:98:fe: a3:0b:a3:22:4b:5a:c1:56:bb:43:cc:61:22:6b:82: af:f3:25:db:5e:75:4a:e9:8c:0a:c4:46:60:54:51: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:BB:1B:38:CF:06:E6:F7:60:48:DE:BE:CC:8B:53:14:D6:E2:44 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:e8:ca:6d:7d:98:97:0f:d4:ff:83:2b:7a:0e:c6:63:e4: f4:a1:66:18:7b:a9:f3:38:1b:6c:36:8b:7d:df:1d:7f:08:62: 5e:b8:a3:f2:d3:70:1a:94:68:36:ce:b8:1f:ae:62:58:c7:85: 1e:05:af:c8:5f:a3:a4:be:80:31:41:86:f7:c4:ab:50:94:ae: 2d:3c:40:80:46:c8:92:bc:20:f1:31:0f:65:48:da:dd:70:29: 83:ef:78:db:79:d9:66:ef:f9:50:f2:b5:6d:fb:e3:3e:af:1e: 14:63:0e:ec:0e:66:cf:22:86:75:20:11:da:af:0b:80:48:64: c3:68:48:9b:34:d5:ee:18:c2:5e:4e:06:5d:1f:e9:c1:35:5e: d5:2e:e6:97:8a:b4:e4:e0:63:df:58:ab:1f:f2:82:c9:0d:a0: 34:62:30:98:bd:df:b2:f8:5d:b1:0b:d5:c7:ff:a0:7e:ee:56: 43:e4:71:57:70:22:5a:ab:ed:72:00:49:2e:64:50:a1:8d:24: 98:e0:5c:43:43:32:bb:7e:d9:e0:00:06:50:a1:4f:28:cc:91: 57:2e:35:ec:9d:d8:b7:fd:de:6a:38:ce:16:e9:45:34:24:60: 26:b1:03:fd:91:46:c5:17:f0:8a:21:39:25:71:18:8c:d8:f1: fa:9e:0c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwODA4MTQ1MTQ4WhcNMjUwODE1MTQ1MTQ4WjAYMRYwFAYD VQQDEw02ODk2MGYwNC03ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dQl0aAkpZv4/qLdFwQhnYtn3UpIje1txVzKVg+p1kQ5ItgVIBef9J9hX+6r qAp73XtChiiaMuOYBW/3eE6NEZo0+MLXdrJyb+XcH7xykLUXPumObNcBBqG6pnjU JPewrkwnZx8b56dl+DY2N5A26WdNJYJi0wRaqNui8MG2DQIhxZDD4e58tMZvtboy AxlSA7oH5Jbmg/MaCRRIAbN0p8AUA3yaqj3WXlfyrMrmBGAOqagWgQqLTIF2N4CD sRop6eb1aOfPIqOXD8u/W55UXf8MWQBqo88icyVcqvYwmP6jC6MiS1rBVrtDzGEi a4Kv8yXbXnVK6YwKxEZgVFE7EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/zuxs4 zwbm92BI3r7Mi1MU1uJEMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlVujKbX2Ylw/U/4Mreg7GY+T0oWYYe6nzOBtsNot93x1/CGJeuKPy 03AalGg2zrgfrmJYx4UeBa/IX6OkvoAxQYb3xKtQlK4tPECARsiSvCDxMQ9lSNrd cCmD73jbedlm7/lQ8rVt++M+rx4UYw7sDmbPIoZ1IBHarwuASGTDaEibNNXuGMJe TgZdH+nBNV7VLuaXirTk4GPfWKsf8oLJDaA0YjCYvd+y+F2xC9XH/6B+7lZD5HFX cCJaq+1yAEkuZFChjSSY4FxDQzK7ftngAAZQoU8ozJFXLjXsndi3/d5qOM4W6UU0 JGAmsQP9kUbFF/CKITklcRiM2PH6ngxw -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:24 2025 by rpki-client