$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: /fw1Enb1eCaTS5Mgcxd3iHLLh4FO+8qm72LJVzwNGo4= Subject key identifier: 11:05:D9:FE:EE:39:48:12:AE:63:8C:0E:32:07:F6:07:D3:28:82:F0 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0632 Signing time: Sat 02 Aug 2025 23:23:34 +0000 Manifest this update: Sat 02 Aug 2025 23:23:34 +0000 Manifest next update: Sat 09 Aug 2025 23:23:34 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: SJr6LS2UAgqRjsMYX8j993wzGfkSH5shLiYvxNg3cXo=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: tL4FpVgmNNY7jS9BQs7PmDKkC0MYf8VYGM2whKI+KMQ=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Aug 2 23:23:34 2025 GMT Not After : Aug 9 23:23:34 2025 GMT Subject: CN=688e9df6-df7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:90:4b:26:de:f9:ac:a0:07:57:65:8c:81: 48:41:8d:6c:49:29:a7:e5:c7:61:df:02:f7:34:77: 5b:59:57:18:8b:d7:14:d3:1c:2c:b7:71:2c:fc:b8: 7a:fe:56:ff:ad:11:12:e1:30:28:2f:9a:fe:83:1f: 9e:04:9b:76:25:05:09:7a:ff:19:a5:b7:b1:80:e7: 04:57:83:f7:22:57:63:35:fd:50:8b:60:60:b5:4e: 23:eb:75:b5:56:bf:4a:89:c4:e2:ec:3e:e7:95:b5: 57:8e:14:d6:7b:04:e2:5a:42:75:5c:87:f3:eb:00: 5e:30:4b:01:0a:ae:bb:26:9d:92:9f:dc:1b:bc:bd: 51:2a:1d:22:82:b4:42:da:78:e4:1f:5e:04:d8:6a: d7:c9:7e:2d:90:ac:66:4c:b0:b0:19:d9:af:13:38: d0:e6:28:5c:63:7d:25:e7:55:fb:59:a3:70:18:71: eb:d4:72:b6:e5:bd:6e:6d:c2:89:75:6a:e9:9d:d2: 09:c6:53:2e:6d:55:83:69:9a:48:9c:44:a6:c0:ef: 1e:42:f2:c0:d1:09:33:f4:33:1d:6f:b7:08:5d:ab: 31:25:59:fb:c5:96:76:7e:a3:a0:e9:f0:b6:8c:ed: 14:25:89:13:65:8f:6f:76:97:a9:46:0d:50:de:c1: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:05:D9:FE:EE:39:48:12:AE:63:8C:0E:32:07:F6:07:D3:28:82:F0 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4e:42:e3:0b:13:86:0c:4e:0e:2f:ea:c0:dd:4a:cb:33:49: ea:b1:da:12:a5:2d:1a:5e:10:e1:5e:ee:51:3e:6a:46:61:76: 89:93:62:da:62:bc:92:fb:d7:77:a6:34:46:a8:75:e1:38:71: e8:55:dc:fe:59:16:74:0e:90:84:24:35:f4:de:f7:94:21:9d: 21:ca:4f:45:8f:13:33:b1:e1:fe:f7:53:8a:f6:f4:26:6a:24: f5:3b:63:22:55:4b:e9:a1:3d:77:45:63:6c:d2:5d:73:da:a1: a1:77:df:15:77:4a:b8:7a:ac:f7:4b:92:8f:5c:f0:6d:da:b5: 0b:39:e4:fa:7a:da:7f:fc:86:81:e3:5f:fa:94:f1:68:9f:d6: e0:8f:ed:b0:b5:35:2e:c7:89:6d:e9:d4:63:b0:f5:b8:16:64: 31:91:17:83:24:42:3e:1a:9c:58:fd:e4:a0:eb:ab:21:13:93: d9:7b:e1:12:03:5d:57:c0:2e:df:0f:f2:03:83:08:f3:f7:4a: d4:88:fa:82:b4:3b:4c:5b:a9:16:07:cc:52:18:5d:88:10:78: bf:24:65:fa:78:ee:7c:13:8b:b9:c9:b0:c3:99:75:84:40:32: 9b:5b:1f:f3:9c:2a:d3:ae:bf:f2:a2:68:9f:e1:43:84:aa:a6: 9e:e0:e9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwODAyMjMyMzM0WhcNMjUwODA5MjMyMzM0WjAYMRYwFAYD VQQDEw02ODhlOWRmNi1kZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrOQSybe+aygB1dljIFIQY1sSSmn5cdh3wL3NHdbWVcYi9cU0xwst3Es/Lh6 /lb/rRES4TAoL5r+gx+eBJt2JQUJev8ZpbexgOcEV4P3IldjNf1Qi2BgtU4j63W1 Vr9KicTi7D7nlbVXjhTWewTiWkJ1XIfz6wBeMEsBCq67Jp2Sn9wbvL1RKh0igrRC 2njkH14E2GrXyX4tkKxmTLCwGdmvEzjQ5ihcY30l51X7WaNwGHHr1HK25b1ubcKJ dWrpndIJxlMubVWDaZpInESmwO8eQvLA0Qkz9DMdb7cIXasxJVn7xZZ2fqOg6fC2 jO0UJYkTZY9vdpepRg1Q3sGhpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEF2f7u OUgSrmOMDjIH9gfTKILwMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtTkLjCxOGDE4OL+rA3UrLM0nqsdoSpS0aXhDhXu5RPmpGYXaJk2La YryS+9d3pjRGqHXhOHHoVdz+WRZ0DpCEJDX03veUIZ0hyk9FjxMzseH+91OK9vQm aiT1O2MiVUvpoT13RWNs0l1z2qGhd98Vd0q4eqz3S5KPXPBt2rULOeT6etp//IaB 41/6lPFon9bgj+2wtTUux4lt6dRjsPW4FmQxkReDJEI+GpxY/eSg66shE5PZe+ES A11XwC7fD/IDgwjz90rUiPqCtDtMW6kWB8xSGF2IEHi/JGX6eO58E4u5ybDDmXWE QDKbWx/znCrTrr/yomif4UOEqqae4Omc -----END CERTIFICATE-----Generated at Mon Aug 4 11:23:15 2025 by rpki-client