$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: ysehsC3uCqSa0Aos89CvNMAtYDLSZV90EJkAOp3JmUs= Subject key identifier: D2:DA:E9:51:18:6B:3C:5D:BC:89:C2:73:46:84:12:48:4E:19:86:3D Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 0460 Signing time: Sat 23 Aug 2025 00:23:37 +0000 Manifest this update: Sat 23 Aug 2025 00:23:36 +0000 Manifest next update: Sat 30 Aug 2025 00:23:36 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: pSb9tDzRwmEzyosjYgOwjtIlheBSwpsBsi2yT517dow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Aug 23 00:23:36 2025 GMT Not After : Aug 30 00:23:36 2025 GMT Subject: CN=68a90a08-29e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:f3:09:50:4a:37:6a:4e:7a:7b:24:a8:2b: 17:6c:1b:f9:90:cf:70:66:77:30:91:f5:25:78:88: 45:03:7c:ca:89:79:9f:6c:61:1b:44:60:4c:84:51: e4:c6:ad:1a:27:b7:41:2c:d5:1f:76:96:50:54:3b: 09:65:ff:26:58:c6:fe:79:9a:f5:cf:1d:e8:c7:1d: e2:9e:06:4c:67:b7:75:09:16:d2:09:5a:58:1f:2e: a5:b3:24:a0:9b:4d:e1:18:17:b0:c8:65:9e:81:2f: b9:e7:ad:15:7c:d3:ce:11:cf:58:db:ce:7f:2b:9c: 97:f9:c9:aa:14:94:98:d1:3a:02:95:de:db:54:da: b1:12:e6:f0:d3:5b:63:0a:c4:c5:7c:8f:b3:2a:6e: 32:54:13:f9:8a:a1:a3:f4:90:2c:25:d4:0a:c0:a2: 6a:46:40:bc:17:52:33:56:6e:dc:ad:e9:df:ea:e1: a7:e7:db:f8:4f:0e:5a:88:52:f8:ac:57:ff:e8:5b: 6b:25:1e:11:3a:99:c7:10:cc:f7:62:41:5e:39:89: 72:1c:31:2a:fa:17:ee:12:f0:1e:fb:75:b1:a7:c6: 53:a9:77:9e:25:bc:29:e5:a2:55:6f:09:f6:da:b4: 8e:f2:d0:b3:71:93:b8:ef:38:8e:5e:0b:37:b0:0c: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DA:E9:51:18:6B:3C:5D:BC:89:C2:73:46:84:12:48:4E:19:86:3D X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:8b:92:20:6f:84:78:a1:5f:d5:52:ab:89:98:00:3e:51:4b: c7:b4:ac:1a:ca:5a:68:a5:47:f4:84:27:03:7a:8e:d2:dc:84: a6:60:69:4b:37:8e:8e:b5:f6:35:44:91:3f:6c:8d:a8:ac:c6: 02:25:60:fa:ce:bf:bf:2f:98:2d:1f:03:e8:3d:6f:49:66:5f: 97:ec:53:a3:2b:0f:41:97:bc:6e:eb:b2:c2:0b:fd:20:eb:6d: d2:4c:15:08:8b:b3:c0:dd:4d:48:b7:8b:ca:f6:7b:12:22:97: 2b:2f:5b:10:ce:e2:f8:45:75:66:08:b3:92:0a:da:54:01:cb: af:d7:cd:a5:87:e2:77:2f:27:27:39:7f:8c:24:29:5b:24:be: aa:34:da:bd:ef:6c:45:ed:63:a6:54:d3:8b:e5:6f:b7:1c:a5: 2c:d3:78:0f:d8:61:5e:56:4c:5a:18:11:42:d0:ae:12:0d:bc: 88:fb:21:ab:23:bb:c0:94:1b:e0:59:6c:66:1e:17:3d:1c:96: d6:9b:72:ed:0b:0b:d4:c0:67:48:12:ac:56:7a:e7:67:41:0a: 29:63:4e:f6:22:3b:97:fb:ff:58:44:18:3f:25:ef:7e:23:a1: c5:9e:d1:73:2b:e5:e4:5a:4f:39:a1:0a:e1:06:b1:a9:30:20: 02:88:1b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUwODIzMDAyMzM2WhcNMjUwODMwMDAyMzM2WjAYMRYwFAYD VQQDEw02OGE5MGEwOC0yOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRTzCVBKN2pOenskqCsXbBv5kM9wZncwkfUleIhFA3zKiXmfbGEbRGBMhFHk xq0aJ7dBLNUfdpZQVDsJZf8mWMb+eZr1zx3oxx3ingZMZ7d1CRbSCVpYHy6lsySg m03hGBewyGWegS+5560VfNPOEc9Y285/K5yX+cmqFJSY0ToCld7bVNqxEubw01tj CsTFfI+zKm4yVBP5iqGj9JAsJdQKwKJqRkC8F1IzVm7crenf6uGn59v4Tw5aiFL4 rFf/6FtrJR4ROpnHEMz3YkFeOYlyHDEq+hfuEvAe+3Wxp8ZTqXeeJbwp5aJVbwn2 2rSO8tCzcZO47ziOXgs3sAwWvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLa6VEY azxdvInCc0aEEkhOGYY9MB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQi5Igb4R4oV/VUquJmAA+UUvHtKwaylpopUf0hCcDeo7S3ISmYGlL N46OtfY1RJE/bI2orMYCJWD6zr+/L5gtHwPoPW9JZl+X7FOjKw9Bl7xu67LCC/0g 623STBUIi7PA3U1It4vK9nsSIpcrL1sQzuL4RXVmCLOSCtpUAcuv182lh+J3Lycn OX+MJClbJL6qNNq972xF7WOmVNOL5W+3HKUs03gP2GFeVkxaGBFC0K4SDbyI+yGr I7vAlBvgWWxmHhc9HJbWm3LtCwvUwGdIEqxWeudnQQopY072IjuX+/9YRBg/Je9+ I6HFntFzK+XkWk85oQrhBrGpMCACiBst -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:16 2025 by rpki-client