$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json) Hash identifier: m6Yf90f3jalI43HoCsoeEFxCO6xcmSIS1OhpCX75YmA= Subject key identifier: CD:FF:8A:55:D1:14:C5:52:5A:B9:14:51:74:C2:19:29:F5:8D:EB:41 Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft Manifest number: 53 Signing time: Sat 09 Aug 2025 07:45:24 +0000 Manifest this update: Sat 09 Aug 2025 07:45:23 +0000 Manifest next update: Sat 16 Aug 2025 07:45:23 +0000 Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: m3toNYBFh6QVos9nQq7HZYF74uUwbsCJgDQhuBS5DSA=) 2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: Ya8UAl3AvyfkYqVmnBZyGneXfArx61d1F2XHtbOSrtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Validity Not Before: Aug 9 07:45:23 2025 GMT Not After : Aug 16 07:45:23 2025 GMT Subject: CN=6896fc94-a61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:d2:d0:40:60:66:c5:55:ce:0c:47:7f:4a: 72:fb:1f:7d:b2:e1:53:9c:6e:59:21:f7:11:0f:93: 12:fe:38:5d:73:d1:26:d3:27:b2:5a:79:16:de:b4: e8:8e:02:93:cf:9a:91:2c:f3:f5:84:aa:ed:9b:da: 0b:bb:a5:ff:55:f4:0a:a7:51:11:4f:1a:b4:b0:2a: b1:a7:34:59:4b:5e:05:03:a5:af:4a:a1:7f:73:27: 08:d4:0e:92:07:8b:7a:a7:da:aa:57:4d:71:02:88: a7:58:38:7c:06:5b:83:4c:47:a8:dc:50:f0:3d:a7: 4a:c6:23:e5:12:2f:81:83:30:49:b0:0c:37:29:ed: df:5f:b3:f0:f6:37:dc:cf:18:67:f0:97:f9:d8:e3: 24:5d:b5:6a:71:e3:59:df:c8:ee:43:0b:ae:e3:f8: 1a:66:56:d8:e3:12:85:81:b7:7a:fe:e8:a4:17:59: e3:b9:ca:09:4c:38:b3:8b:73:f2:d1:1f:5b:40:ec: 18:c4:3e:c6:ca:51:39:22:d0:39:34:c6:3c:15:87: 2b:bb:0f:09:30:18:7a:3d:01:43:d8:52:69:4c:81: 47:3d:c7:14:bb:92:ca:4f:34:63:d8:8e:34:0a:91: 0d:85:0f:d4:ff:df:c0:ca:ad:8d:67:85:6f:04:bd: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FF:8A:55:D1:14:C5:52:5A:B9:14:51:74:C2:19:29:F5:8D:EB:41 X509v3 Authority Key Identifier: keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:67:4e:44:9e:8b:3d:ef:d9:09:3d:a2:c9:56:ca:1e:df:76: 61:de:2d:c3:dd:78:a3:c9:57:63:22:31:82:c3:a1:16:99:be: 89:e8:bf:83:df:b8:dc:e1:e7:49:9f:a7:32:0c:5a:ae:c9:0e: 67:38:56:14:09:21:d3:fd:a4:6f:d0:73:f3:e9:1f:3f:01:7f: 84:09:d1:a0:77:1f:27:d5:59:93:97:78:ba:74:93:47:83:b3: 1d:6f:8a:23:7f:77:a5:2e:ff:35:8d:44:49:16:3e:d7:7e:05: 72:6f:d4:7e:ec:90:2e:0c:0e:cd:93:80:46:a5:94:84:72:f8: ee:29:ae:d4:a2:bb:55:db:c0:2d:2a:9d:86:e4:37:16:70:14: ea:b1:15:96:ad:c8:8b:7c:4a:9f:00:d7:af:c9:cc:d9:dd:ad: 96:83:ee:a5:13:a8:a7:bf:da:b8:ea:a4:ec:01:88:c1:5d:97: f7:64:c9:b5:46:cf:dd:75:ac:04:42:3f:59:6f:04:8f:23:b2: 4b:5c:25:45:05:2f:60:0f:0f:55:b9:f0:76:ef:e9:5e:61:c8: 45:7d:8b:0b:c4:58:50:06:d3:43:a8:59:ee:b2:d2:21:91:43: a3:3f:0a:cc:79:b9:92:cb:89:30:ce:0c:97:80:df:fc:1d:c8: 77:32:ce:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUI2QzExMC8GA1UEBRMoNDc2N0I2OTNCRDg0NjJFRUFGQTgzRDlFODAzQzlEMjg2 QjYyMURDODAeFw0yNTA4MDkwNzQ1MjNaFw0yNTA4MTYwNzQ1MjNaMBgxFjAUBgNV BAMTDTY4OTZmYzk0LWE2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLodLQQGBmxVXODEd/SnL7H32y4VOcblkh9xEPkxL+OF1z0SbTJ7JaeRbetOiO ApPPmpEs8/WEqu2b2gu7pf9V9AqnURFPGrSwKrGnNFlLXgUDpa9KoX9zJwjUDpIH i3qn2qpXTXECiKdYOHwGW4NMR6jcUPA9p0rGI+USL4GDMEmwDDcp7d9fs/D2N9zP GGfwl/nY4yRdtWpx41nfyO5DC67j+BpmVtjjEoWBt3r+6KQXWeO5yglMOLOLc/LR H1tA7BjEPsbKUTki0Dk0xjwVhyu7DwkwGHo9AUPYUmlMgUc9xxS7kspPNGPYjjQK kQ2FD9T/38DKrY1nhW8EveR3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzf+KVdEU xVJauRRRdMIZKfWN60EwHwYDVR0jBBgwFoAUR2e2k72EYu6vqD2egDydKGtiHcgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QjZDL0Q3REIwQTA4RkE1 RDExRUZBRTM3NEQ2OEM0RjlBRTAyL1IyZTJrNzJFWXU2dnFEMmVnRHlkS0d0aUhj Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjJlMms3MkVZdTZ2cUQyZWdEeWRLR3RpSGNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 QjZDL0Q3REIwQTA4RkE1RDExRUZBRTM3NEQ2OEM0RjlBRTAyL1IyZTJrNzJFWXU2 dnFEMmVnRHlkS0d0aUhjZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBnTkSeiz3v2Qk9oslWyh7fdmHeLcPdeKPJV2MiMYLDoRaZvonov4Pf uNzh50mfpzIMWq7JDmc4VhQJIdP9pG/Qc/PpHz8Bf4QJ0aB3HyfVWZOXeLp0k0eD sx1viiN/d6Uu/zWNREkWPtd+BXJv1H7skC4MDs2TgEallIRy+O4prtSiu1XbwC0q nYbkNxZwFOqxFZatyIt8Sp8A16/JzNndrZaD7qUTqKe/2rjqpOwBiMFdl/dkybVG z911rARCP1lvBI8jsktcJUUFL2APD1W58Hbv6V5hyEV9iwvEWFAG00OoWe6y0iGR Q6M/Csx5uZLLiTDODJeA3/wdyHcyzv4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:08 2025 by rpki-client