$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: w2jvTHs/Fn13RItH7LUjQI8V6XaJEigv4CbGKtfsInY= Subject key identifier: B7:3A:38:78:90:02:ED:4A:62:E0:34:3B:1B:94:0D:27:E2:D2:99:BB Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01C0 Signing time: Mon 11 Aug 2025 03:06:34 +0000 Manifest this update: Mon 11 Aug 2025 03:06:34 +0000 Manifest next update: Mon 18 Aug 2025 03:06:34 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 5tfk4PEEMErbTuHtkORxIQReiEeu9gFnBEvrhIplRk4=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Aug 11 03:06:34 2025 GMT Not After : Aug 18 03:06:34 2025 GMT Subject: CN=68995e3a-5433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:95:44:49:b2:ed:f6:dc:8f:96:98:e5:e8: 3c:ce:77:3e:f7:1f:17:c3:e1:ea:95:7b:10:1d:b2: 17:1a:26:79:19:16:3c:29:22:d0:88:08:d8:41:19: 95:24:da:33:2e:c8:f7:e4:f5:55:9a:11:76:8e:e3: ae:49:32:a5:21:90:f8:c0:7d:4d:d4:a9:88:a0:f5: 5f:f4:9a:6e:e7:a9:74:5b:5e:6e:19:8f:a7:49:25: 6b:7f:17:f9:39:76:7c:b7:99:e9:1d:1d:5a:e4:81: ae:59:0d:fa:0b:6c:16:09:e6:bb:31:43:4c:79:a4: 9b:04:d7:5b:b8:60:f8:1c:29:6a:81:f3:7d:87:f9: 0a:b6:11:4e:90:b1:0a:ff:cd:e9:0c:1c:e9:78:3d: f7:18:03:49:96:be:fc:3f:48:c2:38:92:3d:83:19: 5e:de:58:3a:f4:fe:9c:00:2a:1b:f0:f2:2b:8a:dc: 63:fd:30:ba:41:c0:b9:ff:dd:36:52:f8:a3:d7:83: 00:6d:a0:40:30:6d:fa:2b:95:f0:0e:ad:3c:00:97: f6:53:71:36:62:cb:7d:86:02:99:d5:cb:89:fd:b3: 77:f9:8d:87:5e:53:60:61:a2:94:9b:de:4c:34:07: bb:b3:0a:79:ae:ea:ed:9c:9f:f3:19:9f:18:d0:26: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3A:38:78:90:02:ED:4A:62:E0:34:3B:1B:94:0D:27:E2:D2:99:BB X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f7:9c:d7:0e:4a:8d:24:a4:27:9b:93:f5:c3:1c:e2:84:b7: 79:17:23:cc:a4:a9:05:bc:07:e8:74:0a:8f:cf:57:8e:7a:63: f5:83:44:f8:89:47:01:52:84:83:57:2a:ad:d2:0f:79:86:55: 03:54:ed:89:b4:72:24:0e:f1:e5:6a:b1:40:86:58:67:3e:90: 68:b1:50:87:5b:57:76:ad:98:2e:1a:b7:27:74:fc:b2:0c:9e: 22:44:b1:b9:02:61:47:de:5f:58:0d:8e:65:f5:07:0a:ca:76: 11:41:81:2b:2b:e0:f8:1c:f1:59:94:27:15:42:69:2b:63:f2: c6:c1:2f:b8:34:a1:f1:ba:99:7a:17:4e:4e:cd:42:da:6f:45: ec:15:e0:80:15:3a:25:9b:f2:3e:7f:d0:b9:8f:66:82:88:fd: a4:42:f3:85:f9:0e:2d:aa:36:c8:e2:cb:cd:ee:f5:86:44:3a: f2:bd:b1:ca:2b:00:a1:28:13:25:7b:ae:c3:96:b5:c8:77:99: fe:1d:5e:6c:db:24:8f:b8:c8:86:87:0c:3c:5f:e8:96:1d:50: ea:4a:20:4c:5e:7a:d5:75:10:09:fb:00:fd:5e:1e:2b:9c:bd: 84:f6:b8:37:0c:b9:f9:eb:c7:a7:50:af:d2:f0:c9:01:10:5b: 4a:bf:22:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUwODExMDMwNjM0WhcNMjUwODE4MDMwNjM0WjAYMRYwFAYD VQQDEw02ODk5NWUzYS01NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4WVREmy7fbcj5aY5eg8znc+9x8Xw+HqlXsQHbIXGiZ5GRY8KSLQiAjYQRmV JNozLsj35PVVmhF2juOuSTKlIZD4wH1N1KmIoPVf9Jpu56l0W15uGY+nSSVrfxf5 OXZ8t5npHR1a5IGuWQ36C2wWCea7MUNMeaSbBNdbuGD4HClqgfN9h/kKthFOkLEK /83pDBzpeD33GANJlr78P0jCOJI9gxle3lg69P6cACob8PIritxj/TC6QcC5/902 Uvij14MAbaBAMG36K5XwDq08AJf2U3E2Yst9hgKZ1cuJ/bN3+Y2HXlNgYaKUm95M NAe7swp5rurtnJ/zGZ8Y0CZBOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc6OHiQ Au1KYuA0OxuUDSfi0pm7MB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH95zXDkqNJKQnm5P1wxzihLd5FyPMpKkFvAfodAqPz1eOemP1g0T4 iUcBUoSDVyqt0g95hlUDVO2JtHIkDvHlarFAhlhnPpBosVCHW1d2rZguGrcndPyy DJ4iRLG5AmFH3l9YDY5l9QcKynYRQYErK+D4HPFZlCcVQmkrY/LGwS+4NKHxupl6 F05OzULab0XsFeCAFTolm/I+f9C5j2aCiP2kQvOF+Q4tqjbI4svN7vWGRDryvbHK KwChKBMle67DlrXId5n+HV5s2ySPuMiGhww8X+iWHVDqSiBMXnrVdRAJ+wD9Xh4r nL2E9rg3DLn568enUK/S8MkBEFtKvyIs -----END CERTIFICATE-----Generated at Tue Aug 12 14:39:49 2025 by rpki-client