$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: 0K6vV0/axKQOUXqCjjKUWnGq55bN3TKvA0WZtAJxmHw= Subject key identifier: 3D:5F:9D:52:6F:BF:8B:CD:B4:45:30:CE:92:C7:28:E9:5B:D8:B1:CB Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0C2F Signing time: Mon 04 Aug 2025 18:51:44 +0000 Manifest this update: Mon 04 Aug 2025 18:51:43 +0000 Manifest next update: Mon 11 Aug 2025 18:51:43 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: cONq9KoacwT1Vom19i3hVdotwq02YJsQ1i9G/WokI0c=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: TQZLfyrNNm4rH/joKuV/c0LtGb3rqWKsaid6lV6en3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Aug 4 18:51:43 2025 GMT Not After : Aug 11 18:51:43 2025 GMT Subject: CN=68910140-93f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:fe:a3:1b:88:01:fb:8d:87:9a:ee:c8:4a: 2a:f6:fc:5d:7a:c0:b2:f3:86:b7:80:fa:1f:f7:d0: 62:5b:1a:e4:bc:68:75:d6:ab:53:9d:97:83:6c:ca: b9:d3:71:91:43:3b:a3:88:9a:ae:c2:f5:33:b1:25: f1:b6:96:8b:d2:a4:2c:fc:8f:59:b7:19:81:37:0e: 47:9e:e4:20:42:dd:f5:27:4e:48:0d:04:4d:b8:79: 19:b7:b5:b7:e7:fb:e5:6f:c2:4a:39:5c:e5:17:6f: 54:5f:06:34:09:fa:28:60:93:7c:24:59:53:f4:c8: 50:bf:ce:fa:f2:8c:76:d5:f4:9c:33:80:f3:41:6f: ae:4c:31:5c:66:19:9e:81:9c:1b:8d:8d:ec:db:a6: cf:e4:ac:48:b7:5b:b3:eb:1d:d2:42:9a:cd:e9:48: 49:92:6a:80:c3:a6:fb:61:47:fe:eb:bb:a3:31:d3: dd:c7:ba:23:93:6c:96:e2:f0:21:95:92:a0:c5:7c: 45:b4:e9:8f:de:b1:96:01:4f:35:37:75:c4:6a:76: 60:96:60:c4:1e:ac:b9:1d:89:fb:f2:34:18:37:e9: 7e:e2:25:99:b3:aa:c5:1a:cd:f8:45:e5:e9:28:c8: b8:63:9c:4a:27:ba:8a:4d:24:c1:ac:bc:af:14:5d: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5F:9D:52:6F:BF:8B:CD:B4:45:30:CE:92:C7:28:E9:5B:D8:B1:CB X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b7:92:ac:c3:76:9d:08:31:f8:dc:f5:00:25:49:aa:65:ec: d6:3a:23:71:11:94:7e:b3:2f:47:b5:d5:7a:41:f2:37:27:7b: 8b:0a:4c:b6:18:3e:d5:fb:9a:e7:15:7d:24:74:6f:8e:90:b5: 8e:84:f0:15:0e:69:25:d6:ae:95:f6:d8:e3:54:8e:40:af:7c: 98:63:07:5d:63:3f:cf:9d:d0:af:da:bc:f3:36:bf:9e:6d:c0: 83:5a:26:cc:8d:bd:fa:38:80:73:12:e0:70:19:53:c5:f2:4e: c0:dd:12:b2:a4:35:69:08:a0:5c:b1:ad:6c:af:44:a5:6e:4a: fc:bc:23:db:b4:ad:da:60:9b:fa:da:67:61:12:a2:04:89:da: 05:0e:c7:9c:e4:fb:07:ca:74:5a:9d:c4:69:e3:b9:88:7c:a5: 3a:63:54:31:0d:0e:26:72:04:80:99:85:27:a9:86:b0:57:ad: c9:94:93:bd:df:1c:b9:5f:a5:00:7e:21:fb:02:46:4b:52:88: 74:77:59:27:46:7a:a9:2d:bd:83:12:ad:6f:ba:98:2f:ef:a2: 48:88:07:53:8d:8e:b0:17:96:3b:06:02:37:4f:5c:64:dd:3b: 5e:43:1e:31:ad:a3:9c:1a:d5:53:b8:93:df:60:5f:02:8a:a2: aa:77:81:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjUwODA0MTg1MTQzWhcNMjUwODExMTg1MTQzWjAYMRYwFAYD VQQDEw02ODkxMDE0MC05M2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwN7+oxuIAfuNh5ruyEoq9vxdesCy84a3gPof99BiWxrkvGh11qtTnZeDbMq5 03GRQzujiJquwvUzsSXxtpaL0qQs/I9ZtxmBNw5HnuQgQt31J05IDQRNuHkZt7W3 5/vlb8JKOVzlF29UXwY0CfooYJN8JFlT9MhQv8768ox21fScM4DzQW+uTDFcZhme gZwbjY3s26bP5KxIt1uz6x3SQprN6UhJkmqAw6b7YUf+67ujMdPdx7ojk2yW4vAh lZKgxXxFtOmP3rGWAU81N3XEanZglmDEHqy5HYn78jQYN+l+4iWZs6rFGs34ReXp KMi4Y5xKJ7qKTSTBrLyvFF0uIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1fnVJv v4vNtEUwzpLHKOlb2LHLMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQt5Ksw3adCDH43PUAJUmqZezWOiNxEZR+sy9HtdV6QfI3J3uLCky2 GD7V+5rnFX0kdG+OkLWOhPAVDmkl1q6V9tjjVI5Ar3yYYwddYz/PndCv2rzzNr+e bcCDWibMjb36OIBzEuBwGVPF8k7A3RKypDVpCKBcsa1sr0Slbkr8vCPbtK3aYJv6 2mdhEqIEidoFDsec5PsHynRancRp47mIfKU6Y1QxDQ4mcgSAmYUnqYawV63JlJO9 3xy5X6UAfiH7AkZLUoh0d1knRnqpLb2DEq1vupgv76JIiAdTjY6wF5Y7BgI3T1xk 3TteQx4xraOcGtVTuJPfYF8CiqKqd4H8 -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:20 2025 by rpki-client