$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: zgV4leoIsSmTvTIP9oizKDY1QbLEGALxqrtagcXzaVQ= Subject key identifier: 8D:29:EF:87:51:52:88:6C:1C:BC:F7:6D:B0:F1:FA:C3:FC:BE:B5:7B Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0247 Signing time: Sat 09 Aug 2025 02:25:50 +0000 Manifest this update: Sat 09 Aug 2025 02:25:50 +0000 Manifest next update: Sat 16 Aug 2025 02:25:50 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: KHGg8n17XT/8O+9zWkk1Jj8U1dTEuZ0uRtOf8AlTIik=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Aug 9 02:25:50 2025 GMT Not After : Aug 16 02:25:50 2025 GMT Subject: CN=6896b1ae-cfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:59:de:21:81:ec:90:d7:ba:28:4b:f7:c4: 70:ef:70:94:eb:e4:70:5f:01:14:9d:41:b3:6f:05: 35:b7:7a:de:c2:a2:99:55:e0:e7:00:3a:2f:b4:e2: 41:f6:dc:17:b3:d5:d5:b3:3f:19:b3:73:33:6c:0c: 32:79:01:c4:73:00:c8:fd:11:f4:a6:b1:e8:a2:08: 5d:d6:77:33:a4:46:77:41:9f:b8:d3:66:f5:cf:95: 06:11:00:ce:fb:a0:48:c7:23:21:d2:f0:6b:c8:48: bf:0d:cd:c2:b5:2b:24:ce:43:b2:7d:e9:08:66:e8: 76:51:f0:b0:45:61:f8:1e:b5:2c:df:ce:1f:3d:b6: ad:65:cd:65:af:1c:d3:c7:ba:10:1c:21:d2:0a:aa: b1:d4:9f:8a:da:51:d0:62:4f:90:94:06:2c:f9:a3: 13:14:1f:d1:be:e2:3e:a1:6d:c8:d7:ef:08:bd:91: a6:d6:82:a9:13:44:e6:2c:02:95:2b:eb:c0:14:49: 94:61:76:b2:60:81:7e:30:95:97:9f:7d:c5:ed:0a: 58:20:00:74:d8:81:74:8c:1b:3b:ce:27:11:2e:a1: a7:27:b1:7e:c6:28:fd:67:f3:b7:84:08:be:ae:92: a6:93:39:65:13:cb:08:fa:5f:d6:a9:05:7b:5a:30: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:EF:87:51:52:88:6C:1C:BC:F7:6D:B0:F1:FA:C3:FC:BE:B5:7B X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e3:b8:e3:7e:fa:50:e4:a6:92:b3:13:ab:3c:a5:2b:6c:af: f2:6d:78:95:ab:6e:bd:7d:27:2b:29:97:48:51:1b:d6:e4:d1: 01:c2:c7:ca:9a:83:99:24:b5:59:a5:c0:f9:1f:97:c2:c6:9a: 76:e6:46:a1:b3:27:7a:ab:f5:8e:2d:c9:3e:be:88:8d:cf:7c: 1e:0b:ce:ed:c0:07:9e:4d:9f:29:37:0f:a6:9e:6a:24:18:48: 21:ed:b9:82:e0:91:b6:77:1b:f6:46:0e:40:88:bd:03:74:fb: 1a:57:07:51:b2:64:bc:5e:c0:c7:9f:6b:ee:c7:48:21:41:41: 5c:29:f6:4e:a0:e9:17:15:58:95:b0:9b:d0:aa:0e:8d:74:d2: 0c:89:e0:cb:e7:d7:c5:4e:a6:94:15:8b:f4:57:a7:fb:2b:8c: 9e:45:e3:99:22:7a:7c:d3:8a:2a:db:d7:36:30:ba:f4:fd:27: ad:0b:09:55:76:6f:e8:5b:03:e4:0d:80:d6:0e:ee:97:a7:fe: d4:91:79:2a:2b:26:4d:56:bc:89:e9:90:76:a9:82:d3:41:34: 4c:20:a8:d1:89:59:a3:e8:82:5a:10:79:0a:9a:50:d9:b3:23: 48:26:a1:91:a7:50:20:fd:1a:bb:aa:6c:6d:88:6b:54:fa:72: b2:0e:bb:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwODA5MDIyNTUwWhcNMjUwODE2MDIyNTUwWjAYMRYwFAYD VQQDEw02ODk2YjFhZS1jZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYxZ3iGB7JDXuihL98Rw73CU6+RwXwEUnUGzbwU1t3rewqKZVeDnADovtOJB 9twXs9XVsz8Zs3MzbAwyeQHEcwDI/RH0prHooghd1nczpEZ3QZ+402b1z5UGEQDO +6BIxyMh0vBryEi/Dc3CtSskzkOyfekIZuh2UfCwRWH4HrUs384fPbatZc1lrxzT x7oQHCHSCqqx1J+K2lHQYk+QlAYs+aMTFB/RvuI+oW3I1+8IvZGm1oKpE0TmLAKV K+vAFEmUYXayYIF+MJWXn33F7QpYIAB02IF0jBs7zicRLqGnJ7F+xij9Z/O3hAi+ rpKmkzllE8sI+l/WqQV7WjApwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0p74dR UohsHLz3bbDx+sP8vrV7MB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq47jjfvpQ5KaSsxOrPKUrbK/ybXiVq269fScrKZdIURvW5NEBwsfK moOZJLVZpcD5H5fCxpp25kahsyd6q/WOLck+voiNz3weC87twAeeTZ8pNw+mnmok GEgh7bmC4JG2dxv2Rg5AiL0DdPsaVwdRsmS8XsDHn2vux0ghQUFcKfZOoOkXFViV sJvQqg6NdNIMieDL59fFTqaUFYv0V6f7K4yeReOZInp804oq29c2MLr0/SetCwlV dm/oWwPkDYDWDu6Xp/7UkXkqKyZNVryJ6ZB2qYLTQTRMIKjRiVmj6IJaEHkKmlDZ syNIJqGRp1Ag/Rq7qmxtiGtU+nKyDrsJ -----END CERTIFICATE-----Generated at Sun Aug 10 04:24:38 2025 by rpki-client