$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json) Hash identifier: 9BejrZTF6Mwz4XPer/3aeqsuEiyRed+mV03uTOQwFbw= Subject key identifier: B4:4A:75:05:86:97:13:52:11:B5:A5:82:6E:24:FE:01:AD:56:FB:CA Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft Manifest number: 07A7 Signing time: Fri 22 Aug 2025 21:28:32 +0000 Manifest this update: Fri 22 Aug 2025 21:28:31 +0000 Manifest next update: Fri 29 Aug 2025 21:28:31 +0000 Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: KscQXy2O8WvhLnpLcVUxrOmYUTaczyk52UQsTlELfuA=) 2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: 9S4PdbQBnS1bjpFuDpIOJsT6W0eeeQu3f8/ulTYvG/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C Validity Not Before: Aug 22 21:28:31 2025 GMT Not After : Aug 29 21:28:31 2025 GMT Subject: CN=68a8e0ff-cc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:2c:f8:cf:3f:7a:77:7c:37:98:79:cb:67: 87:df:72:ca:36:1e:d8:d8:a3:3b:a2:11:88:49:d1: 83:52:47:15:ea:4c:6a:88:99:64:e3:b6:05:af:e5: 51:da:9c:fe:19:9d:d1:0a:a3:97:fa:64:f3:0b:bf: 43:9f:be:45:61:f2:89:5e:52:ef:ec:7a:76:2f:11: 2d:79:84:e5:10:e2:fb:2a:4c:71:f3:84:6c:3d:89: d2:d4:34:14:12:85:cc:47:89:33:72:9e:fd:9f:35: 51:f1:bd:eb:8d:66:d2:fa:d6:90:65:c9:12:0c:24: a2:59:21:42:80:a1:c6:cc:ad:6c:db:f8:02:8e:82: 4a:09:59:90:40:8f:97:98:09:d9:c4:ce:c4:68:85: 5d:85:57:64:7e:07:a9:7b:9f:43:ef:f8:00:2f:60: 13:20:f1:97:0a:73:da:11:2d:7f:19:8c:ae:0f:21: 49:f6:b0:a4:b4:b0:d0:88:fc:3d:fc:15:71:2b:ee: 98:d2:0b:a0:ec:c0:49:5c:f9:13:3a:e1:83:db:b6: bb:44:9f:4a:81:3a:b2:85:f5:1f:1f:6b:41:a7:d9: 49:d7:e5:cb:d3:f9:14:32:f8:0d:9a:85:12:3e:ee: 70:16:90:18:69:8d:ef:db:09:a7:14:fb:ac:c6:d3: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4A:75:05:86:97:13:52:11:B5:A5:82:6E:24:FE:01:AD:56:FB:CA X509v3 Authority Key Identifier: keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:c7:50:db:c3:af:10:44:0a:fe:67:9f:e9:78:6f:f4:52: 2d:94:d5:10:db:49:5b:7c:ce:98:dc:61:d6:c6:bd:4b:d5:51: 05:16:5d:5e:54:f3:5c:b5:9c:c5:de:23:15:35:4c:ad:7a:d7: 02:fe:e3:43:ad:40:25:bf:90:85:a0:4e:22:4d:75:56:ad:d4: 2a:d4:82:8f:03:4a:8b:28:97:42:c0:48:af:58:d1:3e:cc:3d: 1d:a3:8f:25:37:d3:a5:84:c1:b9:60:54:07:ab:e2:9e:c9:c9: f2:6c:49:f0:11:2b:43:5a:84:5a:f3:28:ea:58:b2:2d:0d:d5: 00:7c:da:9d:f7:ff:05:70:50:46:9b:e9:c9:36:f5:44:3c:a9: 62:9c:93:cb:55:0b:c0:b5:46:6e:77:3b:07:5d:0e:44:18:d8: fb:5d:b7:ef:3a:7f:98:ba:e1:04:df:7e:48:1e:de:7d:9d:fd: 3e:c5:d7:68:6e:c2:46:53:f6:3d:bb:e8:90:e3:f4:bf:28:8e: 80:30:aa:fc:88:16:fa:88:b2:38:62:bd:da:e4:c4:66:44:cd: 2a:89:28:48:b1:1a:ce:93:e1:4e:0b:2f:18:ae:77:55:b9:79: 93:9c:b3:be:ad:56:5f:57:61:43:1b:c2:66:9e:b0:36:e4:0b: 34:4a:85:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEwQjcxMTAvBgNVBAUTKDkzNjhFQTQ5NEY1MTFFMjBDMUQ1RjczREQ1MzlFM0Q4 NDY1QkRBOUMwHhcNMjUwODIyMjEyODMxWhcNMjUwODI5MjEyODMxWjAYMRYwFAYD VQQDEw02OGE4ZTBmZi1jYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO8s+M8/end8N5h5y2eH33LKNh7Y2KM7ohGISdGDUkcV6kxqiJlk47YFr+VR 2pz+GZ3RCqOX+mTzC79Dn75FYfKJXlLv7Hp2LxEteYTlEOL7Kkxx84RsPYnS1DQU EoXMR4kzcp79nzVR8b3rjWbS+taQZckSDCSiWSFCgKHGzK1s2/gCjoJKCVmQQI+X mAnZxM7EaIVdhVdkfgepe59D7/gAL2ATIPGXCnPaES1/GYyuDyFJ9rCktLDQiPw9 /BVxK+6Y0gug7MBJXPkTOuGD27a7RJ9KgTqyhfUfH2tBp9lJ1+XL0/kUMvgNmoUS Pu5wFpAYaY3v2wmnFPusxtMUGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRKdQWG lxNSEbWlgm4k/gGtVvvKMB8GA1UdIwQYMBaAFJNo6klPUR4gwdX3PdU549hGW9qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTBCNy83NUFCQzlGQzEz QUUxMUVCQkM3QzY4MTVDNEY5QUUwMi9rMmpxU1U5UkhpREIxZmM5MVRuajJFWmIy cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2syanFTVTlSSGlEQjFmYzkxVG5qMkVaYjJwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTBCNy83NUFCQzlGQzEzQUUxMUVCQkM3QzY4MTVDNEY5QUUwMi9rMmpxU1U5Ukhp REIxZmM5MVRuajJFWmIycHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAChcdQ28OvEEQK/mef6Xhv9FItlNUQ20lbfM6Y3GHWxr1L1VEFFl1e VPNctZzF3iMVNUytetcC/uNDrUAlv5CFoE4iTXVWrdQq1IKPA0qLKJdCwEivWNE+ zD0do48lN9OlhMG5YFQHq+KeycnybEnwEStDWoRa8yjqWLItDdUAfNqd9/8FcFBG m+nJNvVEPKlinJPLVQvAtUZudzsHXQ5EGNj7XbfvOn+YuuEE335IHt59nf0+xddo bsJGU/Y9u+iQ4/S/KI6AMKr8iBb6iLI4Yr3a5MRmRM0qiShIsRrOk+FOCy8YrndV uXmTnLO+rVZfV2FDG8JmnrA25As0SoUC -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:34 2025 by rpki-client