$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: +Fc3o/e1xZV5OnprExUu809PqrKGo86bbZNPMCrsq+U= Subject key identifier: B9:05:D7:A2:F1:E9:C1:67:4C:44:5A:2A:C9:B5:EE:60:62:9F:42:9D Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 0657 Signing time: Sun 10 Aug 2025 22:40:21 +0000 Manifest this update: Sun 10 Aug 2025 22:40:21 +0000 Manifest next update: Sun 17 Aug 2025 22:40:21 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: V+SC7xktyta8875rFuuoZdrGS3xm0TKvSQp0p71e+S0=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: KMuh5ult9LiAce0tih+7IUcHZQamzlPDZPCJthZ1JAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Aug 10 22:40:21 2025 GMT Not After : Aug 17 22:40:21 2025 GMT Subject: CN=68991fd5-4c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:10:fa:ad:f3:bc:e1:87:37:6b:a1:a2:f6: bb:67:f0:71:c5:c5:5a:c9:99:36:9f:fe:17:32:bd: fd:79:4f:c5:51:af:ea:61:99:65:80:c2:ad:34:81: fd:96:05:d5:91:b6:03:8c:c1:d9:bf:27:e1:76:72: 09:43:59:1e:cf:d4:23:04:3d:5e:7a:fd:ae:ec:bc: 35:b6:93:50:5a:8f:94:f3:85:99:4e:23:3a:12:bc: 95:8b:1f:4c:8f:f2:82:8e:2f:db:c6:9f:67:a5:05: d8:a7:1e:58:1c:4b:32:55:4c:cd:8b:49:86:8e:9c: c1:39:ab:f1:44:b7:5d:bc:e0:77:e5:45:47:7d:59: a9:9c:15:d1:d8:14:6f:5c:c4:0e:15:39:a1:00:7a: 10:3f:7b:60:1c:06:69:42:80:b0:ea:52:03:dd:03: 9e:ac:dc:8d:cd:6d:11:12:60:b5:26:0c:2a:c1:9a: 77:bb:9e:d1:4e:85:22:67:f9:e8:dd:4a:a6:8b:8d: ac:1d:a0:e2:2b:b2:4a:a2:d4:24:bf:b0:bd:6a:5b: 8a:dc:ca:9f:7f:08:36:e4:e0:f1:80:5d:a0:da:2a: b1:e4:fc:1e:b1:74:c0:af:02:02:6f:c3:9b:af:e7: 48:92:8c:67:f1:e0:3b:5e:60:6a:91:8f:6e:15:28: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:D7:A2:F1:E9:C1:67:4C:44:5A:2A:C9:B5:EE:60:62:9F:42:9D X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:0d:bc:94:31:76:6e:b9:c9:70:49:38:00:0a:ed:3a:77: 0c:ce:06:5c:d5:b6:41:73:a4:fd:e3:ac:cb:f3:57:e5:32:0d: 5c:a1:66:1c:90:4e:5d:d6:00:b4:0e:07:4c:e2:3b:a3:f8:03: df:08:ad:28:83:3a:23:f5:9e:c8:82:58:31:54:ea:df:88:0b: 58:14:d0:33:4d:a5:b3:bd:b6:6f:51:20:18:d1:72:81:42:06: f5:f9:37:36:2d:48:70:c1:2d:c0:7c:ef:d4:98:6b:a5:1c:c8: 2c:ed:93:43:5d:c2:f9:95:e7:9f:50:21:65:2c:87:df:f0:d0: 10:53:d3:ab:b0:22:58:c5:8d:f2:68:58:ee:d1:04:af:a5:e6: 9c:1b:08:65:6c:65:50:93:61:9c:9e:4b:26:d7:30:91:8c:27: df:70:ba:90:23:1d:df:1c:41:c7:f9:d0:4a:93:24:e9:3d:98: 7d:72:f5:27:08:1b:05:98:0f:18:99:91:b7:f4:61:34:50:24: 29:c8:38:01:75:2c:77:a5:00:82:54:5e:5f:09:dd:cf:6b:d8: 9f:a4:b4:c6:37:f3:63:b9:0d:fd:73:79:90:a1:e9:90:b0:12: 44:e6:c5:02:9f:8e:69:d9:3e:24:a6:41:ef:0a:60:14:da:60: e0:a1:7b:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUwODEwMjI0MDIxWhcNMjUwODE3MjI0MDIxWjAYMRYwFAYD VQQDEw02ODk5MWZkNS00YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoW4Q+q3zvOGHN2uhova7Z/BxxcVayZk2n/4XMr39eU/FUa/qYZllgMKtNIH9 lgXVkbYDjMHZvyfhdnIJQ1kez9QjBD1eev2u7Lw1tpNQWo+U84WZTiM6EryVix9M j/KCji/bxp9npQXYpx5YHEsyVUzNi0mGjpzBOavxRLddvOB35UVHfVmpnBXR2BRv XMQOFTmhAHoQP3tgHAZpQoCw6lID3QOerNyNzW0REmC1JgwqwZp3u57RToUiZ/no 3Uqmi42sHaDiK7JKotQkv7C9aluK3Mqffwg25ODxgF2g2iqx5PwesXTArwICb8Ob r+dIkoxn8eA7XmBqkY9uFSgi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkF16Lx 6cFnTERaKsm17mBin0KdMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBpA28lDF2brnJcEk4AArtOncMzgZc1bZBc6T946zL81flMg1coWYc kE5d1gC0DgdM4juj+APfCK0ogzoj9Z7IglgxVOrfiAtYFNAzTaWzvbZvUSAY0XKB Qgb1+Tc2LUhwwS3AfO/UmGulHMgs7ZNDXcL5leefUCFlLIff8NAQU9OrsCJYxY3y aFju0QSvpeacGwhlbGVQk2Gcnksm1zCRjCffcLqQIx3fHEHH+dBKkyTpPZh9cvUn CBsFmA8YmZG39GE0UCQpyDgBdSx3pQCCVF5fCd3Pa9ifpLTGN/NjuQ39c3mQoemQ sBJE5sUCn45p2T4kpkHvCmAU2mDgoXv4 -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:21 2025 by rpki-client