$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: AKBoQ4miuQ9m4nOfzvl56ZDv06aIJK3Li3Mls8OkObI= Subject key identifier: D4:E9:50:C8:64:40:93:E2:0B:2B:BB:E7:3D:78:E6:58:ED:E2:C0:AB Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0B28 Signing time: Mon 04 Aug 2025 19:41:52 +0000 Manifest this update: Mon 04 Aug 2025 19:41:52 +0000 Manifest next update: Mon 11 Aug 2025 19:41:52 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: dEX37+ReeO4XzeyqiHzeecr2lihaKA9rzOdZcWtH7+E=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: lgdsNT8nYBqcm8DCsobXOW7p2S7NgKOOoWUT5xQjbBE=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: 3JOJzRv4irtlrsMwD4nhQQebwbICPddO6QXSBTA7ZXU=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: eR1CwoT+DNfBY5Fom2xgTVdBct441pK1ZuTbHGG+Djc=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: mu1iARnCi5kA2mbUie8M1ra9hiXhkaHe7HXaTEKFUdU=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: TTlhGhUAD/2NGqtgzSrC9HKcOBdgmaTheq7ErX+FNZ4=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: YF3wvRDD0dzUZakdeFWJrsLYoJUpMBgClY/hZFPMmvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Aug 4 19:41:52 2025 GMT Not After : Aug 11 19:41:52 2025 GMT Subject: CN=68910d00-c449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:3a:e6:6e:f4:1b:85:7f:64:29:53:6f:dd: 09:1a:ac:0f:4e:4f:fa:0c:4f:e5:95:6a:99:8c:4c: 11:f1:ba:34:d6:13:1c:fe:d8:5a:29:b7:a9:81:e6: 60:da:af:bd:0d:cf:c1:ae:85:39:d9:15:3e:7c:6b: ff:20:bd:1a:81:49:26:bf:07:bd:54:5d:32:b3:b4: 86:e3:ee:6c:44:da:01:e4:56:27:cd:57:17:44:4f: 9d:00:8c:a4:b9:af:3e:1d:18:1d:e1:78:42:99:e4: df:79:0a:a4:57:1e:bc:94:d8:2e:20:b8:62:7b:27: a3:85:d5:d3:0a:40:6d:2a:0b:e2:75:22:11:8d:41: 75:69:05:54:0d:7e:39:96:52:df:8b:0e:64:3f:91: 17:aa:9b:9f:75:9d:b1:c2:f6:5d:92:46:2d:07:4a: d3:d1:f7:00:75:24:cc:39:34:9f:b8:c9:1e:4c:08: f3:dd:78:c9:82:79:6f:62:f7:d1:21:4f:75:43:28: ea:e1:d9:66:78:a5:79:e5:87:b8:81:85:e9:90:e5: 1e:13:d8:3b:25:ab:97:aa:33:7f:a4:4d:d7:2b:48: ae:42:0f:84:08:df:ef:15:91:e1:f6:62:25:28:90: f8:fb:5b:05:67:99:76:01:de:42:11:61:84:46:67: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E9:50:C8:64:40:93:E2:0B:2B:BB:E7:3D:78:E6:58:ED:E2:C0:AB X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:68:be:20:dd:f3:94:93:e9:58:d6:f4:de:dc:9f:2b:ea:de: a6:61:b1:d8:9a:62:a8:c9:15:05:9e:3b:82:58:9a:63:8e:9a: bb:f4:e7:76:5a:eb:05:38:72:59:6a:ec:90:69:e4:76:29:1b: 6a:c6:fc:d3:e2:aa:1a:bd:38:ce:e5:b0:c9:2d:50:9c:e0:fc: a2:3a:c6:b3:e3:ef:00:a7:6c:11:e7:fa:e4:96:1e:51:55:2d: 1b:3b:73:52:18:c6:6a:82:c5:9b:71:9b:e0:34:c4:0c:33:c4: c4:c5:41:5c:3e:d6:93:23:2e:58:bb:31:85:fb:31:f6:a0:0a: 82:c1:bf:b7:9c:a7:d7:2c:d1:eb:a3:3c:8b:38:8d:57:fe:77: 77:06:a7:ea:c9:94:18:e5:01:e2:cb:96:0f:e5:9c:2d:31:b7: 48:bb:0f:12:8a:23:55:34:07:99:a8:93:af:b1:c1:95:17:96: 0a:3b:21:99:17:74:04:67:02:2c:ba:0c:c8:74:f8:15:4c:48: 86:01:d4:f8:c2:f8:d3:02:4c:b3:99:44:00:6e:df:1a:87:e7: ce:c9:fa:a7:25:e2:41:50:b3:84:f8:80:75:80:3e:1a:f3:7b: 5d:dc:73:9d:ff:27:b3:8f:98:43:43:2b:ce:64:33:6c:f0:15: 8d:65:e1:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUwODA0MTk0MTUyWhcNMjUwODExMTk0MTUyWjAYMRYwFAYD VQQDEw02ODkxMGQwMC1jNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkc65m70G4V/ZClTb90JGqwPTk/6DE/llWqZjEwR8bo01hMc/thaKbepgeZg 2q+9Dc/BroU52RU+fGv/IL0agUkmvwe9VF0ys7SG4+5sRNoB5FYnzVcXRE+dAIyk ua8+HRgd4XhCmeTfeQqkVx68lNguILhieyejhdXTCkBtKgvidSIRjUF1aQVUDX45 llLfiw5kP5EXqpufdZ2xwvZdkkYtB0rT0fcAdSTMOTSfuMkeTAjz3XjJgnlvYvfR IU91Qyjq4dlmeKV55Ye4gYXpkOUeE9g7JauXqjN/pE3XK0iuQg+ECN/vFZHh9mIl KJD4+1sFZ5l2Ad5CEWGERmdZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTpUMhk QJPiCyu75z145ljt4sCrMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1aL4g3fOUk+lY1vTe3J8r6t6mYbHYmmKoyRUFnjuCWJpjjpq79Od2 WusFOHJZauyQaeR2KRtqxvzT4qoavTjO5bDJLVCc4PyiOsaz4+8Ap2wR5/rklh5R VS0bO3NSGMZqgsWbcZvgNMQMM8TExUFcPtaTIy5YuzGF+zH2oAqCwb+3nKfXLNHr ozyLOI1X/nd3BqfqyZQY5QHiy5YP5ZwtMbdIuw8SiiNVNAeZqJOvscGVF5YKOyGZ F3QEZwIsugzIdPgVTEiGAdT4wvjTAkyzmUQAbt8ah+fOyfqnJeJBULOE+IB1gD4a 83td3HOd/yezj5hDQyvOZDNs8BWNZeFZ -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:55 2025 by rpki-client