$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: 6+1glpU8aCRX8TaXgXwRSkT5jWVaxLHT6S3w50Xmbig= Subject key identifier: 55:5E:C0:6B:B5:9A:7D:E5:1C:07:9F:72:4E:D9:49:4D:46:1A:93:50 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 045C Signing time: Tue 05 Aug 2025 00:41:58 +0000 Manifest this update: Tue 05 Aug 2025 00:41:58 +0000 Manifest next update: Tue 12 Aug 2025 00:41:58 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: /E85UkrJhmwtMhnR+1DM5MwMKBRpUQaNFiWXCT+SObY=) 2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: wqkVYDxZ6HBCzKePRiH5zEB/9I/WLKOX58mvYx8PpGA=) 3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Aug 5 00:41:58 2025 GMT Not After : Aug 12 00:41:58 2025 GMT Subject: CN=68915356-57bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:99:f4:13:1d:fe:83:39:a0:e7:41:fc:61: 4b:10:58:0f:6b:3e:20:e2:25:4d:0e:30:9c:ab:c0: 2c:88:7b:c9:04:a4:2d:4f:77:31:75:45:93:ee:54: aa:5d:c0:c5:74:bc:c8:41:1b:25:63:c0:95:50:b7: 0d:e1:39:ff:11:13:e5:e8:73:94:f0:b7:41:08:10: f3:39:fe:c6:3d:63:2c:eb:cd:e4:13:a1:f7:08:12: 5c:08:90:95:f5:8b:db:c6:67:55:d5:35:72:a2:bc: bc:ff:ea:f5:65:c9:5c:2f:c7:3e:86:fa:9d:62:c3: e2:fc:9e:1a:a3:ef:05:36:69:ff:44:b3:7a:8e:71: 0e:a6:e6:bc:6a:e2:49:27:bf:81:c4:92:06:7a:f6: ba:9a:09:2d:bc:38:18:a7:51:aa:01:bb:f7:a7:75: 8e:25:68:bd:c9:4b:ae:a7:6d:6a:10:1e:27:7a:31: 5d:73:9e:5c:6a:41:43:42:f0:a3:de:26:d9:fb:b8: 19:b0:cd:a2:6c:cf:7b:6d:59:e4:1b:65:48:54:56: 96:e1:8c:d8:11:87:be:bb:55:6b:32:5b:a9:7c:2d: 1d:a3:5e:e1:7f:df:c5:79:7b:c7:40:6f:2d:b1:d7: 5b:a3:bf:0e:90:36:fe:9b:0b:ef:0d:58:a7:7b:0e: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5E:C0:6B:B5:9A:7D:E5:1C:07:9F:72:4E:D9:49:4D:46:1A:93:50 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cb:01:f2:46:39:a9:49:95:1d:a3:3d:02:f6:90:ba:7a:4f: e1:7b:b0:6c:7b:b2:e6:0d:0f:b9:aa:58:9e:c4:34:b1:2d:4f: de:d2:4f:2a:c5:f1:e2:e3:f3:a6:05:fe:b9:71:e7:c0:e3:08: 17:ae:0b:32:af:f1:0c:06:d3:6e:5d:35:b5:b3:aa:93:e0:e1: c2:19:29:4a:99:2a:88:97:7e:c7:cd:97:a5:ec:25:d2:b7:29: 3e:d1:e1:ee:74:61:88:d1:97:05:5e:0d:09:0f:d7:5a:58:bc: f3:8f:83:23:62:b6:e7:53:ad:68:a3:29:ba:89:c7:f2:1e:f3: 64:fc:b3:78:41:e1:df:0f:54:dc:87:45:a4:57:91:52:81:45: ac:0d:d8:be:75:8a:12:ca:51:1e:73:2d:a0:c1:d7:75:59:19: 1a:1b:84:80:31:77:6c:1f:fd:b6:54:61:af:f3:0c:72:58:e8: 12:40:6d:35:ee:ff:7f:68:a0:8c:e5:1a:1d:f6:1c:81:4f:6d: a8:6a:0a:a8:f9:5d:88:9a:8b:50:b5:09:76:bc:64:1f:28:5f: 49:ee:2d:14:a5:20:ef:8c:21:8a:11:ea:fa:ec:27:be:19:e6: 01:1d:8c:35:27:73:89:70:df:00:c1:96:47:87:86:3f:65:b8: c8:39:30:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUwODA1MDA0MTU4WhcNMjUwODEyMDA0MTU4WjAYMRYwFAYD VQQDEw02ODkxNTM1Ni01N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukKZ9BMd/oM5oOdB/GFLEFgPaz4g4iVNDjCcq8AsiHvJBKQtT3cxdUWT7lSq XcDFdLzIQRslY8CVULcN4Tn/ERPl6HOU8LdBCBDzOf7GPWMs683kE6H3CBJcCJCV 9YvbxmdV1TVyory8/+r1ZclcL8c+hvqdYsPi/J4ao+8FNmn/RLN6jnEOpua8auJJ J7+BxJIGeva6mgktvDgYp1GqAbv3p3WOJWi9yUuup21qEB4nejFdc55cakFDQvCj 3ibZ+7gZsM2ibM97bVnkG2VIVFaW4YzYEYe+u1VrMlupfC0do17hf9/FeXvHQG8t sddbo78OkDb+mwvvDVinew76UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVewGu1 mn3lHAefck7ZSU1GGpNQMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZywHyRjmpSZUdoz0C9pC6ek/he7Bse7LmDQ+5qliexDSxLU/e0k8q xfHi4/OmBf65cefA4wgXrgsyr/EMBtNuXTW1s6qT4OHCGSlKmSqIl37HzZel7CXS tyk+0eHudGGI0ZcFXg0JD9daWLzzj4MjYrbnU61ooym6icfyHvNk/LN4QeHfD1Tc h0WkV5FSgUWsDdi+dYoSylEecy2gwdd1WRkaG4SAMXdsH/22VGGv8wxyWOgSQG01 7v9/aKCM5Rod9hyBT22oagqo+V2ImotQtQl2vGQfKF9J7i0UpSDvjCGKEer67Ce+ GeYBHYw1J3OJcN8AwZZHh4Y/ZbjIOTAH -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:01 2025 by rpki-client