$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: qWrPaP2wHs3VnHWgRJXe4L4Y1z4b9+ohiHTxOylkOEc= Subject key identifier: C7:66:63:AE:3A:21:F0:D8:C4:88:9D:01:E7:29:B7:4A:21:75:C8:0A Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03E2 Signing time: Mon 11 Aug 2025 00:43:28 +0000 Manifest this update: Mon 11 Aug 2025 00:43:28 +0000 Manifest next update: Mon 18 Aug 2025 00:43:28 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: mfnHIZ3+3sjxGMCFLqqsZI17h/t9FQFN+wWRJnHy8s0=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Aug 11 00:43:28 2025 GMT Not After : Aug 18 00:43:28 2025 GMT Subject: CN=68993cb0-d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:5b:c8:e0:24:97:eb:1a:40:c3:cf:c5:81: cb:4d:2b:f3:c3:04:b2:fb:88:7b:5e:20:d8:85:76: ed:3b:f3:d4:13:cb:05:aa:70:c4:ff:42:09:28:8a: 98:cf:a3:69:3b:a4:c1:39:e8:02:d7:46:0f:1d:d9: 9b:a5:24:43:9b:1a:89:7d:23:23:b2:c4:86:d3:a0: ce:11:fd:58:07:07:ce:be:0c:e4:8f:93:9d:14:ea: a9:d8:54:8b:e1:da:da:17:fe:b3:ec:a3:3f:ec:37: be:1b:9e:78:b1:31:a9:d6:88:85:da:53:b7:9f:0d: e2:46:0a:b5:30:74:71:49:27:44:7f:f4:1b:e5:dc: 49:a5:88:cd:59:79:4b:88:7d:62:49:39:78:44:94: 4b:08:86:d1:f9:38:75:01:d8:dd:31:27:e8:b7:89: 03:bb:d0:ae:33:45:05:05:4a:d2:3c:5b:4f:ab:12: 47:32:95:1e:40:23:e8:16:dc:07:0a:b4:3d:a5:19: ed:73:48:1d:c9:49:7e:9a:50:6f:ef:62:21:bf:68: 70:e2:95:94:2b:d0:ad:be:00:4c:f2:18:d5:39:e0: 1d:0b:c0:f6:4f:80:ce:7f:a1:cf:fb:8e:a8:ba:f6: 02:85:a0:5b:1b:fe:6b:cd:84:04:e3:4e:5c:9e:0a: 3c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:63:AE:3A:21:F0:D8:C4:88:9D:01:E7:29:B7:4A:21:75:C8:0A X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d1:67:f5:84:95:5a:7d:1a:38:b2:b7:05:62:a7:da:62:90: f5:d0:41:32:5b:e4:e0:e8:e3:79:2e:9f:b1:78:bb:44:04:e3: fb:fd:ee:5b:3a:30:a5:21:22:33:39:80:e1:d2:7b:55:54:05: 51:38:9e:d8:04:82:fb:7f:8e:a3:d0:62:8f:1d:5f:fa:ff:9f: 8f:f6:20:07:c8:1d:90:c2:43:e4:fd:b6:82:ab:91:c1:6a:59: ff:3f:fe:91:26:58:85:7f:3c:8b:4a:3a:fd:18:d1:97:9b:a5: 61:df:1f:58:69:49:a7:71:88:5c:9e:d5:cb:84:88:07:2f:d2: c5:9e:2e:a0:d4:6f:42:58:cc:af:e2:29:b7:5f:fd:28:12:81: 49:16:6e:f4:fd:11:ca:23:e1:71:ba:a9:42:57:d7:c1:2a:30: 63:46:91:98:e7:38:ff:d5:f4:b3:4e:00:eb:ab:86:e9:56:06: 20:33:fd:93:5d:00:67:37:0f:65:f1:d0:b0:46:1a:a7:39:65: d6:df:89:0a:db:95:9e:f1:38:f8:1e:e2:70:5e:f8:c0:92:9a: 98:f6:ee:6b:69:59:3d:83:62:c1:e0:62:ee:66:47:e8:8e:ea: 5b:76:97:53:52:56:ab:ea:df:85:cc:75:ce:32:98:03:1e:75: 3c:3f:bd:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwODExMDA0MzI4WhcNMjUwODE4MDA0MzI4WjAYMRYwFAYD VQQDEw02ODk5M2NiMC1kMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4dbyOAkl+saQMPPxYHLTSvzwwSy+4h7XiDYhXbtO/PUE8sFqnDE/0IJKIqY z6NpO6TBOegC10YPHdmbpSRDmxqJfSMjssSG06DOEf1YBwfOvgzkj5OdFOqp2FSL 4draF/6z7KM/7De+G554sTGp1oiF2lO3nw3iRgq1MHRxSSdEf/Qb5dxJpYjNWXlL iH1iSTl4RJRLCIbR+Th1AdjdMSfot4kDu9CuM0UFBUrSPFtPqxJHMpUeQCPoFtwH CrQ9pRntc0gdyUl+mlBv72Ihv2hw4pWUK9CtvgBM8hjVOeAdC8D2T4DOf6HP+46o uvYChaBbG/5rzYQE405cngo81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdmY646 IfDYxIidAecpt0ohdcgKMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW0Wf1hJVafRo4srcFYqfaYpD10EEyW+Tg6ON5Lp+xeLtEBOP7/e5b OjClISIzOYDh0ntVVAVROJ7YBIL7f46j0GKPHV/6/5+P9iAHyB2QwkPk/baCq5HB aln/P/6RJliFfzyLSjr9GNGXm6Vh3x9YaUmncYhcntXLhIgHL9LFni6g1G9CWMyv 4im3X/0oEoFJFm70/RHKI+FxuqlCV9fBKjBjRpGY5zj/1fSzTgDrq4bpVgYgM/2T XQBnNw9l8dCwRhqnOWXW34kK25We8Tj4HuJwXvjAkpqY9u5raVk9g2LB4GLuZkfo jupbdpdTUlar6t+FzHXOMpgDHnU8P70O -----END CERTIFICATE-----Generated at Mon Aug 11 04:28:42 2025 by rpki-client