$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: ed/iDaiwFYptTtvYafIewxVj4o59KvK15VpPtiWAYj0= Subject key identifier: CF:A5:D4:28:8A:03:B1:33:E5:64:01:B3:46:2D:66:51:B3:BB:EE:D0 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: CA Signing time: Mon 11 Aug 2025 05:55:25 +0000 Manifest this update: Mon 11 Aug 2025 05:55:24 +0000 Manifest next update: Mon 18 Aug 2025 05:55:24 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 2VHrbIP+PcDDS3Tr3paf9eW/9xYMRr2xd68DEE3E3H4=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Aug 11 05:55:24 2025 GMT Not After : Aug 18 05:55:24 2025 GMT Subject: CN=689985cc-fae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c0:9f:28:5e:a5:e8:b2:31:1c:d2:ec:ea:d1: 4b:f3:11:cb:08:2f:47:5a:7a:6f:3f:05:d6:6b:ef: cb:62:3e:8e:5b:c3:b8:ed:34:e9:ba:a7:de:aa:dd: 0e:01:4e:d1:54:9a:d6:d8:b8:99:bf:58:f2:da:8c: 0e:03:32:a3:44:61:d4:27:08:3f:9f:58:e2:8a:a5: 21:e2:82:85:76:d4:5b:ff:04:74:c3:a6:6b:1c:0b: 09:64:1d:79:11:97:3b:67:ab:b8:f8:70:da:52:55: 05:69:43:f7:47:a5:9a:0a:2c:22:3f:2e:17:4d:19: 10:81:3e:d0:05:27:7e:a1:56:e4:b5:db:07:16:c1: 0b:bd:4b:3f:fb:ad:da:41:8a:15:0c:3d:d0:0b:66: 23:3b:cb:6f:f9:4f:5e:31:90:dd:c0:a4:bc:4e:f2: 11:91:f5:65:39:4e:3d:1f:17:06:ee:94:45:74:36: 67:43:45:17:1e:f4:5d:b0:ad:e3:52:1a:7c:be:ce: a9:17:e0:95:b5:5a:db:9e:96:ed:fe:27:5b:f5:ed: 44:5b:09:26:bf:86:dc:dd:6d:1f:fb:ea:0f:57:3e: 68:7b:51:84:59:c4:03:25:6e:35:cb:50:85:dd:cb: 9a:f2:d9:e7:af:22:62:1a:8b:4a:74:55:64:b4:c7: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:D4:28:8A:03:B1:33:E5:64:01:B3:46:2D:66:51:B3:BB:EE:D0 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:27:e3:fb:80:4d:87:76:08:a2:5b:a9:9d:73:19:1b:ca: af:d2:cb:f3:84:23:a9:0b:57:20:c3:b3:31:e5:d3:85:cb:e0: 2a:b1:05:0b:92:56:1e:09:5a:99:f6:46:d3:97:8f:83:13:9b: 97:9a:7b:91:6f:12:ce:47:b1:26:bc:49:cb:bc:ed:86:98:2c: d1:79:72:2c:18:48:23:59:e8:74:19:15:f9:93:98:b6:79:07: be:b5:0d:c4:97:8d:c3:64:6e:5f:4d:fa:99:6e:2a:1f:2e:4d: b9:56:0b:e7:57:7a:58:b5:ec:af:7a:1f:27:56:b0:54:75:fb: bc:c0:7d:16:dc:f9:37:cf:3f:fd:a4:52:81:58:37:7b:43:18: c6:0f:40:6b:4b:05:1f:89:9d:fe:11:fe:59:ec:97:f9:6d:96: d5:c8:82:df:3d:5b:cf:47:d1:16:93:b1:b6:92:70:ab:af:da: 3f:e0:45:59:cc:87:5f:4e:ba:5d:e5:4e:4f:04:ef:d6:c5:d8: 41:50:dc:ec:d9:bc:da:73:a8:cc:43:e9:86:27:4c:2b:ce:fe: 55:5e:d3:22:63:38:f6:23:7b:be:5f:52:e1:71:4e:1e:59:2f: 7e:b5:ea:74:98:0b:d8:e7:6e:1f:0f:a0:92:38:c7:28:e9:be: 22:b7:46:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwODExMDU1NTI0WhcNMjUwODE4MDU1NTI0WjAYMRYwFAYD VQQDEw02ODk5ODVjYy1mYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sCfKF6l6LIxHNLs6tFL8xHLCC9HWnpvPwXWa+/LYj6OW8O47TTpuqfeqt0O AU7RVJrW2LiZv1jy2owOAzKjRGHUJwg/n1jiiqUh4oKFdtRb/wR0w6ZrHAsJZB15 EZc7Z6u4+HDaUlUFaUP3R6WaCiwiPy4XTRkQgT7QBSd+oVbktdsHFsELvUs/+63a QYoVDD3QC2YjO8tv+U9eMZDdwKS8TvIRkfVlOU49HxcG7pRFdDZnQ0UXHvRdsK3j Uhp8vs6pF+CVtVrbnpbt/idb9e1EWwkmv4bc3W0f++oPVz5oe1GEWcQDJW41y1CF 3cua8tnnryJiGotKdFVktMdQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+l1CiK A7Ez5WQBs0YtZlGzu+7QMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBvCfj+4BNh3YIolupnXMZG8qv0svzhCOpC1cgw7Mx5dOFy+AqsQUL klYeCVqZ9kbTl4+DE5uXmnuRbxLOR7EmvEnLvO2GmCzReXIsGEgjWeh0GRX5k5i2 eQe+tQ3El43DZG5fTfqZbiofLk25VgvnV3pYteyveh8nVrBUdfu8wH0W3Pk3zz/9 pFKBWDd7QxjGD0BrSwUfiZ3+Ef5Z7Jf5bZbVyILfPVvPR9EWk7G2knCrr9o/4EVZ zIdfTrpd5U5PBO/WxdhBUNzs2bzac6jMQ+mGJ0wrzv5VXtMiYzj2I3u+X1LhcU4e WS9+tep0mAvY524fD6CSOMco6b4it0YP -----END CERTIFICATE-----Generated at Wed Aug 13 00:25:20 2025 by rpki-client