$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: RfgldTdSovx5AahSBkxkQokhAzhEAiWr0FPuCiHZ+m4= Subject key identifier: BC:F6:59:BC:9D:E1:B8:3C:13:C4:84:E4:A9:2E:C1:D5:62:60:56:8C Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0244 Signing time: Sun 03 Aug 2025 02:26:14 +0000 Manifest this update: Sun 03 Aug 2025 02:26:13 +0000 Manifest next update: Sun 10 Aug 2025 02:26:13 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: mgq5SzrLmP4Ak2ne1zWIndZ4e32K1uN4bZmh/6GOor4=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Aug 3 02:26:13 2025 GMT Not After : Aug 10 02:26:13 2025 GMT Subject: CN=688ec8c6-3c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:17:43:05:88:e1:e1:b2:72:23:fb:bb:7c: 09:fc:99:cd:b2:62:6d:45:39:a1:24:48:56:4f:cc: e2:5f:e6:45:d3:7e:91:73:62:65:aa:2d:ed:3f:09: e1:60:26:7d:c6:c4:f8:cb:c8:52:87:52:5f:9a:e9: b1:94:c4:fd:1b:08:23:ba:cc:54:01:10:1c:79:9b: 52:28:4f:c7:b7:fb:cf:ca:fe:a5:3a:41:a6:d5:01: d3:8d:3c:71:7b:0c:ec:c9:1e:57:43:12:a2:9b:bd: ba:55:f0:bd:86:74:08:bc:30:10:ca:58:1d:3a:03: 5b:af:0a:c7:e5:5f:2a:8a:c0:82:37:70:b7:29:58: 18:e0:e9:89:90:de:44:d6:9d:d3:be:44:0c:0b:8f: 0f:7d:c5:8a:3a:bc:74:89:77:da:e7:b7:5e:b5:45: 6d:ef:26:eb:f4:2f:15:04:b3:96:81:c3:bf:d2:19: b7:8d:70:65:dc:b9:e4:b7:1f:c0:2b:46:e9:12:61: 17:40:b9:5f:8c:d2:7c:5f:e2:08:e1:89:76:61:b9: c7:54:58:34:1c:06:bf:49:6f:5e:2f:d5:a8:d1:43: 9e:9e:5e:a9:ed:88:e6:55:56:b8:40:4e:d7:82:90: 25:f8:54:33:33:2b:b3:91:39:a3:f8:6b:0f:fb:9e: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F6:59:BC:9D:E1:B8:3C:13:C4:84:E4:A9:2E:C1:D5:62:60:56:8C X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:41:23:2a:96:79:5e:e2:11:74:ec:1e:e8:86:71:69:a7:61: ab:e7:b5:ec:f4:0f:46:5f:6d:20:5b:c4:cd:26:29:01:c7:41: 46:eb:82:4d:4d:d3:22:5a:fb:40:a3:0e:91:0b:ad:3d:47:87: df:34:1f:79:bd:9c:e5:86:87:2f:f2:f0:0e:5f:39:ac:44:d5: 40:b8:14:27:95:79:37:5c:3a:63:dd:ce:9c:90:88:60:0e:43: a9:80:ab:ac:48:ca:76:d1:79:90:f3:41:e8:5a:0f:c8:47:fc: 12:e8:a0:9f:36:41:7e:f0:3a:ba:bd:dd:c2:dd:39:e7:89:95: ac:f1:8c:68:e0:1a:5a:69:48:14:98:77:10:a8:e2:80:33:99: ae:72:b3:69:b8:53:5c:74:f8:3e:82:9b:be:b2:13:82:69:38: 65:85:51:4a:c5:a9:37:1a:90:6e:8a:05:a0:81:a2:11:ec:d5: fd:70:6b:21:e7:7f:9d:bb:23:eb:07:6c:0e:5c:f9:61:1b:79: dd:42:74:4e:97:2f:a1:98:6f:2c:73:da:ce:c0:76:5a:cc:02: 7a:fe:0a:0c:6b:74:d0:41:d7:7a:95:fb:9f:1d:c5:71:4b:77: f3:f3:f0:cf:36:47:12:7c:fb:9d:3c:e6:9e:5c:ae:44:ce:08: fd:eb:be:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwODAzMDIyNjEzWhcNMjUwODEwMDIyNjEzWjAYMRYwFAYD VQQDEw02ODhlYzhjNi0zYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtroXQwWI4eGyciP7u3wJ/JnNsmJtRTmhJEhWT8ziX+ZF036Rc2Jlqi3tPwnh YCZ9xsT4y8hSh1JfmumxlMT9GwgjusxUARAceZtSKE/Ht/vPyv6lOkGm1QHTjTxx ewzsyR5XQxKim726VfC9hnQIvDAQylgdOgNbrwrH5V8qisCCN3C3KVgY4OmJkN5E 1p3TvkQMC48PfcWKOrx0iXfa57detUVt7ybr9C8VBLOWgcO/0hm3jXBl3Lnktx/A K0bpEmEXQLlfjNJ8X+II4Yl2YbnHVFg0HAa/SW9eL9Wo0UOenl6p7YjmVVa4QE7X gpAl+FQzMyuzkTmj+GsP+57bSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz2Wbyd 4bg8E8SE5KkuwdViYFaMMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGQSMqlnle4hF07B7ohnFpp2Gr57Xs9A9GX20gW8TNJikBx0FG64JN TdMiWvtAow6RC609R4ffNB95vZzlhocv8vAOXzmsRNVAuBQnlXk3XDpj3c6ckIhg DkOpgKusSMp20XmQ80HoWg/IR/wS6KCfNkF+8Dq6vd3C3TnniZWs8Yxo4BpaaUgU mHcQqOKAM5mucrNpuFNcdPg+gpu+shOCaThlhVFKxak3GpBuigWggaIR7NX9cGsh 53+duyPrB2wOXPlhG3ndQnROly+hmG8sc9rOwHZazAJ6/goMa3TQQdd6lfufHcVx S3fz8/DPNkcSfPudPOaeXK5Ezgj9675e -----END CERTIFICATE-----Generated at Mon Aug 4 10:58:37 2025 by rpki-client