$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: TAuSAb7GrRi7E5N7ycRYbXSZdt9AV9Hz6FLTPG+d8u8= Subject key identifier: B1:B5:92:90:B5:79:AE:60:A1:2B:D3:24:E7:5E:D8:AF:BA:F9:EC:5A Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 160D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 15FC Signing time: Fri 08 Aug 2025 16:55:49 +0000 Manifest this update: Fri 08 Aug 2025 16:55:48 +0000 Manifest next update: Fri 15 Aug 2025 16:55:48 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: RFWeEPs4Gz1c4oz8LLm5bSvskJGNF1RwES5wFie8vVs=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5645 (0x160d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Aug 8 16:55:48 2025 GMT Not After : Aug 15 16:55:48 2025 GMT Subject: CN=68962c15-20ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:bb:c6:2b:9d:74:73:74:a9:c2:cc:eb:a2: 9c:e7:b5:ad:14:a6:14:71:04:97:c8:1b:24:79:ab: 1d:b0:fe:a2:0c:51:be:f3:fe:ea:e4:29:86:d6:b3: 95:a8:3c:0c:da:c5:43:ad:f1:54:0f:0f:89:aa:80: 51:75:11:dd:4e:e3:68:40:67:11:40:90:b4:c2:55: aa:e3:7f:a5:01:fe:18:50:b3:a9:cf:b0:ff:51:11: 4c:f9:de:d6:c1:a0:fd:b9:40:98:42:b7:b5:f3:ad: e2:b0:9d:62:23:5b:c4:fb:12:4a:59:f5:46:68:80: 44:2f:1c:7d:93:fe:4e:92:f5:9e:ff:d0:91:c5:e6: 35:59:03:7a:5a:2d:c0:f7:be:4a:19:60:a0:81:07: f6:ed:3b:88:61:6f:20:8c:ef:c3:50:9d:66:f5:d7: 01:09:ff:7f:e1:ad:7c:7f:fd:ac:73:f4:92:66:c5: 8f:97:76:99:f5:9c:86:52:dc:76:ab:4c:c2:b3:7b: 02:31:fe:39:74:03:f2:4f:a2:b8:e4:b3:e3:99:f6: 90:7e:3e:86:03:e6:76:d8:9a:16:ad:9e:fb:2a:3e: 65:b8:99:0b:04:6b:da:30:31:a4:e4:d3:78:3f:56: 4a:cc:4a:b7:73:d7:ae:c2:04:bf:5b:ef:1b:06:35: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B5:92:90:B5:79:AE:60:A1:2B:D3:24:E7:5E:D8:AF:BA:F9:EC:5A X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ca:61:94:ee:23:20:46:eb:f6:0e:17:36:92:be:16:b5:e7: 3b:25:6e:aa:50:d0:80:63:3d:20:8c:7c:e8:1e:b8:c4:03:78: 5e:de:5e:81:34:c5:7d:92:a6:8d:e1:33:1b:9b:51:34:9b:8f: 62:c2:9f:33:22:bd:4e:c6:18:ef:11:06:ab:46:af:07:3b:c7: f2:62:c6:b4:06:0f:57:44:25:f4:6b:b0:dc:ca:54:f6:e3:95: 0f:53:44:e0:01:56:a0:9d:3a:2a:92:ac:97:65:72:75:0b:f7: 9a:ca:7d:c4:92:eb:f6:75:64:fc:d7:47:3e:3d:50:e3:73:26: a0:7d:b2:4d:81:bf:e3:b3:dd:28:3a:53:ef:87:c2:18:1b:17: 96:45:c5:e9:17:72:01:19:5f:f0:89:33:a3:b9:d8:25:fc:62: e7:57:04:b0:d2:af:79:93:35:3f:21:39:e1:79:c6:7f:b1:75: 97:b0:22:88:6f:18:60:17:10:a9:05:f6:58:72:ab:2b:98:27: c8:30:70:04:87:54:ab:3c:2d:1f:cc:f7:89:0c:a9:85:8d:d8: a5:3c:69:06:c2:3a:92:e8:a4:17:53:ec:be:89:e3:41:cd:ec: 93:28:1b:4f:d7:c4:6c:c2:68:20:8e:cc:19:df:94:a1:a3:b6: 2c:d9:ca:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwODA4MTY1NTQ4WhcNMjUwODE1MTY1NTQ4WjAYMRYwFAYD VQQDEw02ODk2MmMxNS0yMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc67xiuddHN0qcLM66Kc57WtFKYUcQSXyBskeasdsP6iDFG+8/7q5CmG1rOV qDwM2sVDrfFUDw+JqoBRdRHdTuNoQGcRQJC0wlWq43+lAf4YULOpz7D/URFM+d7W waD9uUCYQre1863isJ1iI1vE+xJKWfVGaIBELxx9k/5OkvWe/9CRxeY1WQN6Wi3A 975KGWCggQf27TuIYW8gjO/DUJ1m9dcBCf9/4a18f/2sc/SSZsWPl3aZ9ZyGUtx2 q0zCs3sCMf45dAPyT6K45LPjmfaQfj6GA+Z22JoWrZ77Kj5luJkLBGvaMDGk5NN4 P1ZKzEq3c9euwgS/W+8bBjWMDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG1kpC1 ea5goSvTJOde2K+6+exaMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwymGU7iMgRuv2Dhc2kr4Wtec7JW6qUNCAYz0gjHzoHrjEA3he3l6B NMV9kqaN4TMbm1E0m49iwp8zIr1OxhjvEQarRq8HO8fyYsa0Bg9XRCX0a7DcylT2 45UPU0TgAVagnToqkqyXZXJ1C/eayn3Ekuv2dWT810c+PVDjcyagfbJNgb/js90o OlPvh8IYGxeWRcXpF3IBGV/wiTOjudgl/GLnVwSw0q95kzU/ITnhecZ/sXWXsCKI bxhgFxCpBfZYcqsrmCfIMHAEh1SrPC0fzPeJDKmFjdilPGkGwjqS6KQXU+y+ieNB zeyTKBtP18RswmggjswZ35Sho7Ys2cqA -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:24 2025 by rpki-client