$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: pg3n05Ct7wT+LdZV0hrbq5lf3wbLlW0uRyKZpoiaBcA= Subject key identifier: 3C:8D:97:F0:EC:1A:35:86:83:B9:14:17:13:C9:31:22:0F:70:08:21 Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E42 Signing time: Sun 10 Aug 2025 17:47:34 +0000 Manifest this update: Sun 10 Aug 2025 17:47:33 +0000 Manifest next update: Sun 17 Aug 2025 17:47:33 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: FYF3kiWUm/TskD8MjSCEAFthOa9yFuGAeHuNSRVbZcg=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3659 (0xe4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Aug 10 17:47:33 2025 GMT Not After : Aug 17 17:47:33 2025 GMT Subject: CN=6898db35-9e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:87:ce:85:84:1b:ec:f8:3a:92:e6:42:ac: f8:c5:e3:ca:f2:f8:21:ce:0a:1f:27:15:b6:8d:16: 64:03:5b:fe:cb:52:6b:0c:f8:e1:ea:a9:97:54:29: 34:2c:19:74:7b:0e:d3:21:36:03:1f:e1:2d:f1:a0: 84:9e:5d:0a:47:cc:43:ea:69:e9:70:35:47:22:17: 3a:98:3c:f1:31:18:ce:69:f4:6a:7a:ad:2d:b7:d0: de:53:be:15:bc:17:a9:aa:5f:05:c5:cd:12:4f:26: 4b:be:76:eb:78:08:81:23:75:5b:b9:de:79:11:d4: 50:b4:41:35:26:13:b7:7d:e9:5f:3d:7c:99:09:d7: 39:ee:4f:76:29:f2:ed:01:4e:27:1a:66:51:a5:13: ab:bb:e3:12:ce:a4:f9:b5:d8:60:2d:78:0c:87:4e: b0:35:40:ab:5c:f8:a6:01:4f:7a:29:ff:f8:4d:b5: 25:0b:75:6d:9d:43:af:36:9f:94:a1:5b:d6:6b:a2: b1:06:c7:70:f0:f0:cb:da:b4:8f:d6:70:73:38:21: cc:b1:3b:4f:d0:93:fa:cd:e2:cd:6c:9e:c0:e3:67: 98:66:87:4a:ba:0a:92:62:c3:80:95:69:17:6a:3f: 28:8b:dd:3b:a2:62:0b:16:3d:74:00:49:4c:3e:ef: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8D:97:F0:EC:1A:35:86:83:B9:14:17:13:C9:31:22:0F:70:08:21 X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d0:13:20:d3:54:de:06:06:10:b5:ef:d3:2e:65:2a:5b:85: 9d:43:02:4b:61:f1:64:99:64:88:da:47:f6:74:f1:67:9a:4f: 4c:d7:36:b1:3c:50:c5:ca:52:73:f8:f1:b7:11:8b:61:3f:2a: 0e:ec:1c:6d:aa:10:61:e9:c3:29:5e:b9:cf:d6:9d:da:d9:a0: 7f:31:f6:c0:18:2d:2c:b7:aa:de:92:b7:5c:06:95:1d:0b:0e: b0:58:c6:91:eb:e4:94:21:d3:d0:de:4a:86:36:ac:c3:3b:e2: 8f:3d:a2:68:4d:47:67:d1:2b:e1:50:8b:86:02:0c:28:c9:30: ad:ad:b8:2f:e8:c4:2e:d2:df:31:33:06:3f:01:33:93:59:0d: db:e9:d5:4f:cb:7d:49:be:1d:23:87:d2:6d:5b:16:4a:40:65: 24:fb:2f:66:e6:8f:53:9a:15:88:ff:94:02:bf:d5:d4:28:9e: c5:93:61:a0:cf:6f:29:2b:a4:98:f4:e6:7c:a7:ce:e0:db:aa: 3f:74:81:ab:a7:b9:4e:d3:36:36:4b:62:76:a6:f0:09:a3:f1: d9:5a:72:85:79:5b:70:44:ec:e4:f5:0c:8d:f0:ac:a1:0c:c5: a5:55:9a:18:c0:10:ee:87:7e:28:5a:5d:2f:8d:c9:03:36:76: c9:05:a4:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUwODEwMTc0NzMzWhcNMjUwODE3MTc0NzMzWjAYMRYwFAYD VQQDEw02ODk4ZGIzNS05ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjOHzoWEG+z4OpLmQqz4xePK8vghzgofJxW2jRZkA1v+y1JrDPjh6qmXVCk0 LBl0ew7TITYDH+Et8aCEnl0KR8xD6mnpcDVHIhc6mDzxMRjOafRqeq0tt9DeU74V vBepql8Fxc0STyZLvnbreAiBI3Vbud55EdRQtEE1JhO3felfPXyZCdc57k92KfLt AU4nGmZRpROru+MSzqT5tdhgLXgMh06wNUCrXPimAU96Kf/4TbUlC3VtnUOvNp+U oVvWa6KxBsdw8PDL2rSP1nBzOCHMsTtP0JP6zeLNbJ7A42eYZodKugqSYsOAlWkX aj8oi907omILFj10AElMPu9WnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyNl/Ds GjWGg7kUFxPJMSIPcAghMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN0BMg01TeBgYQte/TLmUqW4WdQwJLYfFkmWSI2kf2dPFnmk9M1zax PFDFylJz+PG3EYthPyoO7BxtqhBh6cMpXrnP1p3a2aB/MfbAGC0st6rekrdcBpUd Cw6wWMaR6+SUIdPQ3kqGNqzDO+KPPaJoTUdn0SvhUIuGAgwoyTCtrbgv6MQu0t8x MwY/ATOTWQ3b6dVPy31Jvh0jh9JtWxZKQGUk+y9m5o9TmhWI/5QCv9XUKJ7Fk2Gg z28pK6SY9OZ8p87g26o/dIGrp7lO0zY2S2J2pvAJo/HZWnKFeVtwROzk9QyN8Kyh DMWlVZoYwBDuh34oWl0vjckDNnbJBaRi -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:51 2025 by rpki-client