$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: q3g3aMTV5836KQ+troNL/UwEXQgYhF5LDoY/PoAqP60= Subject key identifier: 69:A8:1F:17:1D:DE:54:E0:74:90:BA:07:26:F7:4B:16:8E:31:7A:B7 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: BB Signing time: Sat 09 Aug 2025 06:17:21 +0000 Manifest this update: Sat 09 Aug 2025 06:17:21 +0000 Manifest next update: Sat 16 Aug 2025 06:17:21 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: 7iMA7ZaEjN0TM9kq06d4gkszOC2AI7iSOyO4SM9ArNE=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Aug 9 06:17:21 2025 GMT Not After : Aug 16 06:17:21 2025 GMT Subject: CN=6896e7f1-181d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:4e:7e:e3:89:6a:63:22:12:3c:8f:fc:ce: 2d:f5:f4:57:76:bf:92:6c:6e:f6:32:de:a2:04:cc: 5e:5d:24:51:70:0a:ed:c8:cd:f0:ad:8c:76:08:df: c7:05:fb:9d:3c:8d:15:52:8d:2d:fb:2e:bb:20:7c: 7e:cf:d6:a2:b0:65:95:93:32:8a:50:b7:3f:25:19: 34:a2:62:28:1e:e6:f8:3c:27:4f:23:fc:cc:5d:f3: 91:5c:2d:bb:a0:c6:1d:89:58:90:76:37:53:72:a2: cf:53:e9:9c:c0:ec:a0:25:dd:02:e9:c9:44:7a:28: 84:3f:6d:b1:e7:0e:0c:4c:d7:f5:ce:3e:e9:77:6a: 9b:55:e6:2c:fd:11:e3:c2:7b:a7:60:c0:bf:81:a5: 0c:6b:43:4c:f6:62:9f:3a:fc:f3:ba:f3:2f:bb:5c: 15:31:f2:a6:ef:d5:e4:a8:97:e9:5d:55:24:26:7c: 3f:76:86:fa:c7:43:2c:a8:ed:eb:a9:83:95:c5:26: cd:af:86:74:1b:1b:f0:52:a5:45:be:43:b5:16:20: 9b:b5:6c:5a:c3:97:51:f0:c2:f5:73:7b:c2:3b:6c: ff:1e:ba:2f:4f:bb:26:84:64:1f:1e:b8:e7:a1:a6: dd:6f:01:f0:20:58:b0:2a:33:94:97:ae:21:21:a2: b2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:1F:17:1D:DE:54:E0:74:90:BA:07:26:F7:4B:16:8E:31:7A:B7 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cf:b7:5b:9f:5d:03:45:90:66:a0:83:c8:56:03:4f:53:a2: 70:49:22:d0:6f:d3:04:89:fb:6f:ba:71:96:7b:49:43:48:f4: 5a:10:de:0e:17:dd:cf:3f:c9:a1:51:ef:bf:ed:00:6c:fb:aa: 7f:1f:be:09:ec:51:88:01:01:8b:94:0d:d0:f5:f8:0a:99:5c: a5:58:13:38:c7:a6:5d:1b:53:4f:b1:c3:5f:49:13:0f:8f:ad: 06:1e:0c:0f:90:a5:7d:e0:3b:8b:a7:65:98:31:32:85:08:d8: c5:c4:8e:33:b8:f0:fc:2f:a6:6d:12:49:b4:19:98:f4:db:1e: 36:63:d1:5c:1f:8a:0f:29:e9:32:1c:94:bc:28:05:8e:d2:69: 4d:ee:fd:bc:16:0f:e1:f1:72:5b:6a:7c:42:cc:75:2a:ea:cc: 85:4e:cc:67:df:27:c4:74:f4:40:fb:69:d2:94:0a:f3:1c:b8: fb:16:35:d4:5c:ef:48:99:e5:df:50:73:33:59:d3:a3:f7:10: ae:f2:be:5f:84:57:bc:ce:22:70:a7:f2:e5:83:d6:21:92:94: ab:59:94:fe:28:57:ea:b2:5a:61:12:ab:28:35:f3:ba:46:3d: 0b:9f:ea:74:d7:9b:e7:36:38:fc:6a:6d:51:8f:a4:0f:e4:45: 1b:fc:34:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwODA5MDYxNzIxWhcNMjUwODE2MDYxNzIxWjAYMRYwFAYD VQQDEw02ODk2ZTdmMS0xODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA201OfuOJamMiEjyP/M4t9fRXdr+SbG72Mt6iBMxeXSRRcArtyM3wrYx2CN/H BfudPI0VUo0t+y67IHx+z9aisGWVkzKKULc/JRk0omIoHub4PCdPI/zMXfORXC27 oMYdiViQdjdTcqLPU+mcwOygJd0C6clEeiiEP22x5w4MTNf1zj7pd2qbVeYs/RHj wnunYMC/gaUMa0NM9mKfOvzzuvMvu1wVMfKm79XkqJfpXVUkJnw/dob6x0MsqO3r qYOVxSbNr4Z0GxvwUqVFvkO1FiCbtWxaw5dR8ML1c3vCO2z/HrovT7smhGQfHrjn oabdbwHwIFiwKjOUl64hIaKyuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmoHxcd 3lTgdJC6Byb3SxaOMXq3MB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsz7dbn10DRZBmoIPIVgNPU6JwSSLQb9MEiftvunGWe0lDSPRaEN4O F93PP8mhUe+/7QBs+6p/H74J7FGIAQGLlA3Q9fgKmVylWBM4x6ZdG1NPscNfSRMP j60GHgwPkKV94DuLp2WYMTKFCNjFxI4zuPD8L6ZtEkm0GZj02x42Y9FcH4oPKeky HJS8KAWO0mlN7v28Fg/h8XJbanxCzHUq6syFTsxn3yfEdPRA+2nSlArzHLj7FjXU XO9ImeXfUHMzWdOj9xCu8r5fhFe8ziJwp/Llg9YhkpSrWZT+KFfqslphEqsoNfO6 Rj0Ln+p015vnNjj8am1Rj6QP5EUb/DS5 -----END CERTIFICATE-----Generated at Sun Aug 10 21:18:58 2025 by rpki-client