$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: 7jGNbIZjnSSr1gfx0jcz1WdH76dSPjzPkO+dfJn26zg= Subject key identifier: 34:F1:CD:95:11:6B:2D:82:F7:9C:A3:65:78:26:57:90:3A:84:50:D1 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06F7 Signing time: Wed 06 Aug 2025 22:18:19 +0000 Manifest this update: Wed 06 Aug 2025 22:18:18 +0000 Manifest next update: Wed 13 Aug 2025 22:18:18 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: 2f2z6OvOD2VS0kWmQhvWMSQiylOxufVCdUmBZ68F2t0=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1790 (0x6fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Aug 6 22:18:18 2025 GMT Not After : Aug 13 22:18:18 2025 GMT Subject: CN=6893d4aa-2df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:f3:1e:65:f3:02:5a:b8:e9:68:6a:05:f2: 84:51:27:41:e4:d0:97:52:b8:67:1e:86:9a:a8:58: 95:9c:bf:a3:35:6b:e1:8d:3f:ef:41:df:67:85:53: 97:9b:53:14:be:6f:49:7f:14:e4:a8:97:e3:4c:34: 9e:57:fa:e5:a1:9b:d3:a6:67:a1:db:1f:ba:b5:91: aa:d1:ac:f8:56:35:a8:95:b2:85:7c:92:72:0c:d3: 71:93:d9:01:ea:f0:fd:cb:ae:6c:c6:0b:06:5a:24: 8b:64:31:61:db:2d:5d:8d:01:e3:5b:ef:e4:ba:0c: e6:60:a3:47:e8:61:b8:2c:81:22:03:6b:f4:09:ac: 13:58:31:44:3c:50:d7:9e:c3:f9:c2:88:4a:45:c7: 30:63:fd:e8:bc:e2:ab:0e:a8:6e:e7:a8:b7:94:ce: 43:cc:ae:7d:77:0e:d5:f5:f5:8c:79:dd:81:24:4f: a3:ea:75:38:34:5b:8e:48:80:9d:84:f1:b9:c2:0b: 03:62:47:9d:d3:45:df:62:3f:7e:ca:6f:89:b3:3a: 49:79:cd:1e:04:b4:77:d7:60:60:11:3a:eb:5f:bf: dd:34:e1:23:f9:23:d3:f7:2f:bf:74:c7:32:f9:54: 12:24:9f:4a:2a:d0:69:19:d1:fd:a5:75:9f:c4:32: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F1:CD:95:11:6B:2D:82:F7:9C:A3:65:78:26:57:90:3A:84:50:D1 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b2:ad:88:15:21:6a:f1:1d:f2:0e:95:b8:58:1b:76:4e:85: 9f:a8:fb:28:0a:0e:2a:b7:b5:23:bf:43:b2:b8:d5:52:48:07: f4:a5:12:07:76:9b:7e:6a:7b:24:0f:61:f8:46:d7:f7:e2:d9: a8:c5:bd:06:5b:56:ac:dc:3f:c1:aa:86:a1:bc:28:1f:12:2e: 25:93:ae:dc:02:fc:49:9e:cf:2b:dc:b1:3c:d4:3a:5e:d0:57: fe:16:99:6b:aa:09:3d:f3:85:86:96:47:8c:75:87:b3:93:cb: df:22:5a:8e:82:74:56:70:05:e5:53:20:e9:71:3d:4d:4d:89: ab:bb:8b:8c:7c:c2:1a:a1:2d:77:2e:87:38:1b:71:0c:61:ba: 4f:b9:49:8f:c6:4c:c5:7e:47:3b:4d:fc:28:10:97:a9:d4:78: e6:a8:41:9c:b6:08:80:cf:8d:6e:62:e0:1c:43:d7:68:f6:07: a0:73:fa:a7:03:8c:d6:fb:e3:e2:78:0c:ea:1e:ab:ba:4c:1b: ed:f6:6f:99:f9:96:3d:74:42:d3:f7:02:7a:c6:fa:e4:f7:21: b8:f9:05:d0:b9:f9:43:42:d8:63:cf:64:9c:73:d4:63:5a:e1: e6:07:a3:47:d3:f8:4d:bd:f7:ec:fe:61:cd:7f:ec:92:b3:75: 1d:c2:7a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwODA2MjIxODE4WhcNMjUwODEzMjIxODE4WjAYMRYwFAYD VQQDEw02ODkzZDRhYS0yZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTLzHmXzAlq46WhqBfKEUSdB5NCXUrhnHoaaqFiVnL+jNWvhjT/vQd9nhVOX m1MUvm9JfxTkqJfjTDSeV/rloZvTpmeh2x+6tZGq0az4VjWolbKFfJJyDNNxk9kB 6vD9y65sxgsGWiSLZDFh2y1djQHjW+/kugzmYKNH6GG4LIEiA2v0CawTWDFEPFDX nsP5wohKRccwY/3ovOKrDqhu56i3lM5DzK59dw7V9fWMed2BJE+j6nU4NFuOSICd hPG5wgsDYked00XfYj9+ym+JszpJec0eBLR312BgETrrX7/dNOEj+SPT9y+/dMcy +VQSJJ9KKtBpGdH9pXWfxDIZ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTxzZUR ay2C95yjZXgmV5A6hFDRMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGsq2IFSFq8R3yDpW4WBt2ToWfqPsoCg4qt7Ujv0OyuNVSSAf0pRIH dpt+anskD2H4Rtf34tmoxb0GW1as3D/BqoahvCgfEi4lk67cAvxJns8r3LE81Dpe 0Ff+Fplrqgk984WGlkeMdYezk8vfIlqOgnRWcAXlUyDpcT1NTYmru4uMfMIaoS13 Loc4G3EMYbpPuUmPxkzFfkc7TfwoEJep1HjmqEGctgiAz41uYuAcQ9do9gegc/qn A4zW++PieAzqHqu6TBvt9m+Z+ZY9dELT9wJ6xvrk9yG4+QXQuflDQthjz2Scc9Rj WuHmB6NH0/hNvffs/mHNf+ySs3Udwnri -----END CERTIFICATE-----Generated at Thu Aug 7 13:04:59 2025 by rpki-client