$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: 0t14GU+okTi9DX+JGCazHFxyku0rIIlO/84SAaNBi9I= Subject key identifier: 28:D4:67:F6:E7:41:97:FD:B9:84:98:A5:19:AD:B5:4C:52:57:58:68 Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 011D Signing time: Sat 09 Aug 2025 05:12:49 +0000 Manifest this update: Sat 09 Aug 2025 05:12:49 +0000 Manifest next update: Sat 16 Aug 2025 05:12:49 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: oXrswj1rFVLqBlF71hYIhlLF/mi9xpO72ZrjbcO1Gi4=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Aug 9 05:12:49 2025 GMT Not After : Aug 16 05:12:49 2025 GMT Subject: CN=6896d8d1-a915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:46:c2:6a:43:47:30:8b:29:c3:91:9b:f1: 9a:c5:2b:3a:97:53:ad:b1:24:cf:c8:44:2b:0b:17: 84:45:d7:3a:e4:36:0e:db:c1:a0:01:34:18:cd:06: ea:02:5d:7d:4f:bb:87:e8:0c:5c:88:ee:2e:7e:d6: 16:33:72:65:6c:82:9d:0d:c0:16:12:ce:d7:47:84: a2:0c:27:78:87:95:72:93:66:b6:a9:43:ee:dd:45: c4:36:54:ad:d5:73:62:04:ba:a5:1e:ed:7e:28:91: c6:28:57:e3:93:22:4d:82:c1:e7:12:dc:f6:f5:dd: a8:06:7f:2a:99:06:1e:8a:42:20:14:4f:33:50:c1: f6:05:72:bd:a6:17:9e:df:20:d6:ae:39:6a:46:5c: 51:ec:53:45:1b:f8:fa:aa:42:c3:d7:53:dd:9e:ef: 95:b7:79:dc:9a:54:3f:84:db:3f:da:a1:76:7d:8b: 14:2a:8b:5f:2f:71:0b:22:12:78:e7:d1:33:db:cf: 86:8c:75:a7:a5:56:cd:be:3e:4e:3e:11:9f:64:d2: 4d:c4:5b:e4:a5:6c:14:1c:da:a6:ed:8c:94:cb:86: 8e:72:e3:83:6d:15:82:d2:bb:39:ce:ff:84:77:3f: 49:58:07:a1:bf:9d:8c:01:67:e2:ba:9e:ef:94:c0: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D4:67:F6:E7:41:97:FD:B9:84:98:A5:19:AD:B5:4C:52:57:58:68 X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ed:15:e7:7d:8b:3a:81:ac:4e:6d:d3:42:f8:bd:f7:f5:2e: 56:98:0b:57:fd:2b:05:d6:53:45:2f:c4:0a:2b:cb:dd:11:53: 2c:fc:85:79:e5:20:f4:36:43:db:56:26:c9:12:5b:95:b0:c6: 5d:2a:cf:02:57:03:7e:7a:a0:72:11:71:9d:e8:5c:8c:6a:15: 03:92:8f:9a:5a:14:96:5d:13:7a:05:cc:b9:37:2b:e6:13:7e: 48:9a:4b:6a:20:4a:aa:3e:ba:34:0e:94:7f:a5:68:be:94:4d: 71:78:cd:82:fd:e5:e1:d0:3a:a6:90:23:dd:6f:94:79:05:9a: fa:cc:22:e7:8a:3c:7b:0d:4b:f1:81:13:d1:d7:45:09:91:2b: 6d:84:ed:79:7f:a9:de:cd:d7:c7:f5:cf:e9:f7:9c:90:ff:f5: 76:71:be:e8:d5:42:88:5f:99:93:1b:a2:11:a7:54:39:83:72: e9:97:68:27:14:f5:a4:56:cd:d2:16:93:a6:c6:68:4b:d5:7f: 0d:20:00:95:7c:26:0f:b4:84:93:44:e3:0f:d9:40:cc:56:8a: ee:38:c8:54:72:04:b8:31:2e:ff:4d:8b:c6:89:76:11:07:a2: da:7c:63:aa:f2:44:d3:e7:c6:6f:d5:06:4a:b6:3d:30:36:68: 3e:c1:4b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjUwODA5MDUxMjQ5WhcNMjUwODE2MDUxMjQ5WjAYMRYwFAYD VQQDEw02ODk2ZDhkMS1hOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxppGwmpDRzCLKcORm/GaxSs6l1OtsSTPyEQrCxeERdc65DYO28GgATQYzQbq Al19T7uH6AxciO4uftYWM3JlbIKdDcAWEs7XR4SiDCd4h5Vyk2a2qUPu3UXENlSt 1XNiBLqlHu1+KJHGKFfjkyJNgsHnEtz29d2oBn8qmQYeikIgFE8zUMH2BXK9phee 3yDWrjlqRlxR7FNFG/j6qkLD11Pdnu+Vt3ncmlQ/hNs/2qF2fYsUKotfL3ELIhJ4 59Ez28+GjHWnpVbNvj5OPhGfZNJNxFvkpWwUHNqm7YyUy4aOcuODbRWC0rs5zv+E dz9JWAehv52MAWfiup7vlMCjKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjUZ/bn QZf9uYSYpRmttUxSV1hoMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT7RXnfYs6gaxObdNC+L339S5WmAtX/SsF1lNFL8QKK8vdEVMs/IV5 5SD0NkPbVibJEluVsMZdKs8CVwN+eqByEXGd6FyMahUDko+aWhSWXRN6Bcy5Nyvm E35ImktqIEqqPro0DpR/pWi+lE1xeM2C/eXh0DqmkCPdb5R5BZr6zCLnijx7DUvx gRPR10UJkStthO15f6nezdfH9c/p95yQ//V2cb7o1UKIX5mTG6IRp1Q5g3Lpl2gn FPWkVs3SFpOmxmhL1X8NIACVfCYPtISTROMP2UDMVoruOMhUcgS4MS7/TYvGiXYR B6LafGOq8kTT58Zv1QZKtj0wNmg+wUuI -----END CERTIFICATE-----Generated at Sat Aug 9 10:36:49 2025 by rpki-client