$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json) Hash identifier: AwUv/7g2zNO6O7lR3SyCsIkIKsw8kgtMRVLyUvK1HHE= Subject key identifier: 3E:F3:28:6E:A4:E2:DA:7F:09:02:19:CD:20:C0:95:71:70:A7:1C:BC Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft Manifest number: 0669 Signing time: Fri 08 Aug 2025 22:56:48 +0000 Manifest this update: Fri 08 Aug 2025 22:56:48 +0000 Manifest next update: Fri 15 Aug 2025 22:56:48 +0000 Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: /Gizmjg6baAmw4X62M8QK5jIMxK3YXA9UP8o0XNdAEY=) 2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=) 3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=) 4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=) 5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Validity Not Before: Aug 8 22:56:48 2025 GMT Not After : Aug 15 22:56:48 2025 GMT Subject: CN=689680b0-c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:71:79:d1:aa:5c:c0:70:61:e2:dc:5b:8e: ce:72:b6:47:ba:a7:44:4f:fc:af:12:87:43:57:fc: bb:ab:29:f2:f0:d1:9e:68:8e:91:7b:70:6e:e4:20: d0:a1:c3:4d:91:7f:f0:78:84:08:27:bd:8a:35:cb: 91:ac:e4:8f:75:ba:20:ac:8c:6c:40:56:b0:51:2f: 95:2d:a8:a2:68:11:c5:aa:39:99:ce:4c:08:9a:5a: 1c:d5:e1:9a:e9:a2:5a:4b:a6:06:b1:6c:1b:97:ba: c2:62:1e:04:b2:3c:97:6b:7a:7c:9d:b7:c9:da:ae: 48:c4:6d:b0:a9:95:8c:c0:68:c6:cf:65:70:9f:43: 33:48:c1:c0:fa:79:ea:2e:3f:9b:eb:e7:0a:b6:e1: 17:d3:5e:cc:bc:47:d5:8e:d0:b5:c8:f0:69:8b:3d: a9:a2:c7:d5:b3:34:d5:54:2d:2b:56:b2:5b:a4:e0: cf:fe:83:fc:67:1c:f6:45:49:22:b3:6e:e2:49:0d: 1a:99:9e:da:78:54:94:53:ac:48:e2:03:04:f6:5a: 8b:95:90:65:19:bf:09:51:b9:36:03:21:ba:0f:c1: cf:36:1b:42:25:51:f1:3e:03:d3:48:47:17:e3:17: c6:e4:87:13:16:cf:5f:86:48:9f:70:19:9b:b6:34: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F3:28:6E:A4:E2:DA:7F:09:02:19:CD:20:C0:95:71:70:A7:1C:BC X509v3 Authority Key Identifier: keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:43:b7:a9:bc:2a:53:e4:8d:75:79:7e:04:fe:94:99:a2:3c: 9e:b0:50:29:19:5e:0c:55:4a:c8:3e:3c:cd:c3:4e:af:77:0d: 17:45:87:24:8e:c6:d4:f7:1c:74:5f:15:50:63:46:35:b8:5f: b8:b9:f0:73:b4:49:31:b5:f1:89:ea:39:55:03:22:e4:bf:71: 06:a9:8b:fb:c4:3f:4b:2b:17:07:47:b6:eb:7f:33:86:03:6b: 70:99:f5:0f:8e:21:af:d9:c9:b9:77:7a:a9:05:a9:8e:83:2d: a3:3b:e2:ab:d9:a8:99:c5:bf:d2:cb:2e:0c:49:83:6c:5d:e1: a2:45:48:00:c3:09:f3:27:33:c9:2a:bd:ce:23:68:ea:58:df: 08:fd:75:15:46:38:d1:15:c0:ed:f4:f4:47:8b:d4:50:79:74: da:4b:96:da:91:f5:c6:1d:4b:ad:95:b8:2f:96:6a:9b:c2:01: 25:c4:b6:1c:a9:1e:48:3e:fd:3c:73:99:95:09:45:78:9b:32: 81:9c:0f:68:85:b6:92:2c:38:49:b2:e2:19:29:90:f8:96:fc: 62:63:c5:1b:d8:d1:7f:fa:e8:ed:1a:7e:a5:a9:bd:32:cf:33: 7d:0b:1f:82:38:ea:f5:a0:3f:f1:45:85:d0:5e:2b:9f:c9:b0: 6a:72:d6:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVBNzQxQUYxNTlB RjdFQUY3QkEwHhcNMjUwODA4MjI1NjQ4WhcNMjUwODE1MjI1NjQ4WjAYMRYwFAYD VQQDEw02ODk2ODBiMC1jMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoN9xedGqXMBwYeLcW47OcrZHuqdET/yvEodDV/y7qyny8NGeaI6Re3Bu5CDQ ocNNkX/weIQIJ72KNcuRrOSPdbogrIxsQFawUS+VLaiiaBHFqjmZzkwImloc1eGa 6aJaS6YGsWwbl7rCYh4EsjyXa3p8nbfJ2q5IxG2wqZWMwGjGz2Vwn0MzSMHA+nnq Lj+b6+cKtuEX017MvEfVjtC1yPBpiz2posfVszTVVC0rVrJbpODP/oP8Zxz2RUki s27iSQ0amZ7aeFSUU6xI4gME9lqLlZBlGb8JUbk2AyG6D8HPNhtCJVHxPgPTSEcX 4xfG5IcTFs9fhkifcBmbtjTW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7zKG6k 4tp/CQIZzSDAlXFwpxy8MB8GA1UdIwQYMBaAFNq/s7WffXFv1S1Fp0GvFZr36ve6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUFFNy9FMTgyNTc5Njkw RjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNXX1ZMVVduUWE4Vm12ZnE5 N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyLXp0Wjk5Y1dfVkxVV25RYThWbXZmcTk3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNX X1ZMVVduUWE4Vm12ZnE5N28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHQ7epvCpT5I11eX4E/pSZojyesFApGV4MVUrIPjzNw06vdw0XRYck jsbU9xx0XxVQY0Y1uF+4ufBztEkxtfGJ6jlVAyLkv3EGqYv7xD9LKxcHR7brfzOG A2twmfUPjiGv2cm5d3qpBamOgy2jO+Kr2aiZxb/Syy4MSYNsXeGiRUgAwwnzJzPJ Kr3OI2jqWN8I/XUVRjjRFcDt9PRHi9RQeXTaS5bakfXGHUutlbgvlmqbwgElxLYc qR5IPv08c5mVCUV4mzKBnA9ohbaSLDhJsuIZKZD4lvxiY8Ub2NF/+ujtGn6lqb0y zzN9Cx+COOr1oD/xRYXQXiufybBqctaj -----END CERTIFICATE-----Generated at Sun Aug 10 18:47:59 2025 by rpki-client