$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: c7JtMO3ZJaQo4WD75+dhWB4YYTNzR9JCOI6TYf7f4To= Subject key identifier: 8F:AE:6B:E6:FE:DE:45:75:BE:4C:F6:10:8F:2C:60:69:B2:53:A2:56 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 01CA Signing time: Thu 07 Aug 2025 03:19:36 +0000 Manifest this update: Thu 07 Aug 2025 03:19:36 +0000 Manifest next update: Thu 14 Aug 2025 03:19:36 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: vTqaioxkStIUlHUrUJccbiJQLfnpoNwbw5YaDong+wg=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: Aug 7 03:19:36 2025 GMT Not After : Aug 14 03:19:36 2025 GMT Subject: CN=68941b48-7a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:e0:e0:e0:7b:7b:1f:7f:07:62:e1:17:d9: 4e:1a:3a:f2:5c:a3:0f:d8:a0:c2:40:7b:36:15:25: 5a:34:02:db:80:11:48:63:e2:99:fa:01:e0:da:75: 6d:86:df:3e:0a:7b:ab:3b:11:83:1c:9f:3b:8e:6b: 2f:c6:94:3b:e0:d1:a1:b5:ef:74:24:8b:11:a0:40: ea:35:3e:30:bf:2c:95:c2:3b:7d:99:75:13:de:df: 58:cf:fd:dd:f5:c1:bb:b9:96:0b:10:62:c3:0a:3c: c3:23:be:b8:56:50:81:ea:d2:41:3a:3a:04:f0:34: 98:bb:e1:fc:86:ac:27:5a:39:16:9c:0c:d4:e2:da: 4f:52:97:83:cb:99:94:e5:19:8c:ee:24:c8:43:0d: b8:e2:90:b9:ce:0a:f7:14:ec:02:0c:ab:40:82:83: ff:c5:51:f3:cb:19:38:29:cb:96:a5:64:5c:ae:cf: 88:2a:e2:d8:a6:9d:f4:b4:b9:ff:74:f5:f3:2a:72: 34:d9:85:e3:c6:71:dc:30:8a:0d:18:50:b0:9a:a1: ec:bc:eb:94:4d:5d:36:ce:97:e8:0d:53:e2:3d:fb: e0:89:0f:2d:a2:e4:8b:60:f1:67:32:90:c8:c2:b6: 97:b7:90:a3:99:ae:98:37:ac:10:ee:7d:3c:f0:7e: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AE:6B:E6:FE:DE:45:75:BE:4C:F6:10:8F:2C:60:69:B2:53:A2:56 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d7:2f:44:4e:ff:3f:32:23:2f:68:a2:a4:de:d3:b7:11:2b: 6c:ff:eb:56:46:15:5b:8f:22:65:6c:98:96:77:54:2f:16:9e: 0d:c7:9d:b6:7d:18:df:ee:75:cb:07:2c:7e:51:8e:be:90:2d: a4:40:4a:b7:3b:1f:05:e0:f2:c4:05:5b:ba:e5:4e:b5:08:99: 85:c7:74:43:3d:71:4a:c1:21:2a:22:c0:be:e0:47:bd:55:e6: 86:f5:56:a2:47:b5:a5:b7:b4:6e:de:51:18:eb:e2:fc:6b:b9: 76:01:fb:94:ba:53:bd:0d:e6:0d:d2:f2:7e:7d:9e:28:f6:f6: bc:9f:0c:98:0b:b4:f9:fb:99:3e:80:25:dc:17:55:49:f4:53: 35:12:14:ee:36:42:a4:65:a7:39:e6:bd:24:31:1c:22:e5:51: 0e:67:1b:39:fb:2b:f1:68:f2:8e:88:93:7b:53:79:50:4b:5b: 78:cd:bf:8f:aa:6f:9b:cc:fe:51:d3:80:58:94:d9:8a:f1:cb: 7f:68:da:18:2e:91:f0:e8:09:d9:eb:59:ea:2a:06:12:86:31: 8a:3f:5a:fd:d3:73:c5:4a:5f:54:84:42:db:4f:f0:56:3f:13: 50:21:30:23:9c:4e:81:ce:e6:a8:ab:02:2c:86:d8:b3:bc:9a: d2:75:46:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwODA3MDMxOTM2WhcNMjUwODE0MDMxOTM2WjAYMRYwFAYD VQQDEw02ODk0MWI0OC03YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZrg4OB7ex9/B2LhF9lOGjryXKMP2KDCQHs2FSVaNALbgBFIY+KZ+gHg2nVt ht8+CnurOxGDHJ87jmsvxpQ74NGhte90JIsRoEDqNT4wvyyVwjt9mXUT3t9Yz/3d 9cG7uZYLEGLDCjzDI764VlCB6tJBOjoE8DSYu+H8hqwnWjkWnAzU4tpPUpeDy5mU 5RmM7iTIQw244pC5zgr3FOwCDKtAgoP/xVHzyxk4KcuWpWRcrs+IKuLYpp30tLn/ dPXzKnI02YXjxnHcMIoNGFCwmqHsvOuUTV02zpfoDVPiPfvgiQ8touSLYPFnMpDI wraXt5Cjma6YN6wQ7n088H7J1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+ua+b+ 3kV1vkz2EI8sYGmyU6JWMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf1y9ETv8/MiMvaKKk3tO3ESts/+tWRhVbjyJlbJiWd1QvFp4Nx522 fRjf7nXLByx+UY6+kC2kQEq3Ox8F4PLEBVu65U61CJmFx3RDPXFKwSEqIsC+4Ee9 VeaG9VaiR7Wlt7Ru3lEY6+L8a7l2AfuUulO9DeYN0vJ+fZ4o9va8nwyYC7T5+5k+ gCXcF1VJ9FM1EhTuNkKkZac55r0kMRwi5VEOZxs5+yvxaPKOiJN7U3lQS1t4zb+P qm+bzP5R04BYlNmK8ct/aNoYLpHw6AnZ61nqKgYShjGKP1r903PFSl9UhELbT/BW PxNQITAjnE6BzuaoqwIshtizvJrSdUaB -----END CERTIFICATE-----Generated at Fri Aug 8 10:13:27 2025 by rpki-client