$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: Ki0vGBA3TgwhKCLsm5oj7IpXpW/3ciBIiLGoVvNXgM8= Subject key identifier: F0:35:46:53:E6:5C:8E:93:72:A1:52:E5:BF:B5:E9:96:9D:F9:CE:B5 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01D0 Signing time: Sat 23 Aug 2025 02:55:34 +0000 Manifest this update: Sat 23 Aug 2025 02:55:34 +0000 Manifest next update: Sat 30 Aug 2025 02:55:34 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: zVPu9ej+1s389AhE1T5xDcYBKLXP3WS0nzdjio7zkeI=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Aug 23 02:55:34 2025 GMT Not After : Aug 30 02:55:34 2025 GMT Subject: CN=68a92da6-0dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:ef:53:50:ee:c4:e1:23:b8:a7:43:94:e8: a5:55:89:58:5e:a6:c0:cd:18:8c:ef:1d:34:0d:21: 16:8a:c9:da:c1:27:21:35:a3:97:9e:0a:d3:d0:55: fc:38:81:79:aa:6e:ec:00:51:fe:d0:8c:ef:3f:42: af:74:e2:b2:e7:7a:22:5a:3f:27:52:85:6b:65:7b: 19:96:0b:bd:aa:f5:c2:d7:1e:ad:be:44:4b:b2:a6: b8:56:cf:c9:d8:f1:66:cc:4e:01:88:8d:4a:87:56: 29:eb:0d:8a:e9:19:c1:04:27:77:67:94:7e:23:9d: ef:2f:9c:58:76:4c:fe:32:1c:c5:92:f6:18:6b:22: 3f:c9:92:e4:67:41:ea:70:1b:85:f4:f5:ed:58:3c: cf:20:d6:40:fc:32:be:72:6a:7f:bc:96:1c:02:dc: b0:a8:c5:88:95:f1:9e:19:49:d6:8f:3c:1d:3c:fd: 52:81:b0:be:35:89:e0:af:8f:22:77:81:9a:df:03: da:55:d2:da:e9:b0:03:68:e4:e5:43:06:07:d8:0a: e1:2a:26:24:fc:6e:2d:b2:8b:91:a0:6f:4d:43:48: b4:7a:2f:4f:a3:10:97:ce:99:dd:0f:3c:55:2d:3a: a8:10:75:16:9b:9f:70:92:77:08:d4:5e:44:b0:ca: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:46:53:E6:5C:8E:93:72:A1:52:E5:BF:B5:E9:96:9D:F9:CE:B5 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:42:f6:9e:4f:03:9d:0f:be:98:a8:dd:32:c8:9f:5f:c3:50: 21:4a:93:4a:54:16:32:3a:ce:1b:c0:9f:1d:ed:a9:dd:5b:fd: 96:0f:61:e0:88:39:ef:52:66:60:0e:a0:81:6c:8f:5c:13:30: 13:f0:24:32:9b:c5:e9:37:78:38:dc:b3:2e:82:1c:00:89:55: 7b:5a:80:f7:bc:c2:c9:05:01:d9:5b:e2:4e:bf:ec:1c:22:6d: 15:0f:66:ff:c9:49:0a:ce:2b:79:f7:d7:41:87:b4:e9:7b:8f: 80:d0:a7:e1:1a:55:59:5e:0a:a7:f9:1b:93:e1:9e:0e:82:15: 94:6d:74:77:bc:3b:96:13:d7:80:ff:5c:e5:51:0f:3d:b7:61: 69:86:ff:de:1f:f9:0d:61:69:e5:56:bb:46:02:ba:30:49:9a: 3b:9e:80:86:a0:e7:38:b9:92:77:9c:ab:29:e8:01:28:b7:0c: 59:21:b0:40:78:c1:ae:29:37:60:d6:fb:3a:99:05:9f:d3:24: cc:73:ad:9d:69:5e:52:9e:7b:af:6b:c9:84:75:97:16:78:d4: ef:b1:ac:57:6f:86:77:41:69:ff:c7:45:ad:16:bc:6b:f9:65: a0:35:79:aa:14:a2:43:c3:5b:f0:16:ab:3a:09:ec:c6:ee:db: 53:11:df:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwODIzMDI1NTM0WhcNMjUwODMwMDI1NTM0WjAYMRYwFAYD VQQDEw02OGE5MmRhNi0wZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ/vU1DuxOEjuKdDlOilVYlYXqbAzRiM7x00DSEWisnawSchNaOXngrT0FX8 OIF5qm7sAFH+0IzvP0KvdOKy53oiWj8nUoVrZXsZlgu9qvXC1x6tvkRLsqa4Vs/J 2PFmzE4BiI1Kh1Yp6w2K6RnBBCd3Z5R+I53vL5xYdkz+MhzFkvYYayI/yZLkZ0Hq cBuF9PXtWDzPINZA/DK+cmp/vJYcAtywqMWIlfGeGUnWjzwdPP1SgbC+NYngr48i d4Ga3wPaVdLa6bADaOTlQwYH2ArhKiYk/G4tsouRoG9NQ0i0ei9PoxCXzpndDzxV LTqoEHUWm59wkncI1F5EsMrL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPA1RlPm XI6TcqFS5b+16Zad+c61MB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQvaeTwOdD76YqN0yyJ9fw1AhSpNKVBYyOs4bwJ8d7andW/2WD2Hg iDnvUmZgDqCBbI9cEzAT8CQym8XpN3g43LMughwAiVV7WoD3vMLJBQHZW+JOv+wc Im0VD2b/yUkKzit599dBh7Tpe4+A0KfhGlVZXgqn+RuT4Z4OghWUbXR3vDuWE9eA /1zlUQ89t2Fphv/eH/kNYWnlVrtGArowSZo7noCGoOc4uZJ3nKsp6AEotwxZIbBA eMGuKTdg1vs6mQWf0yTMc62daV5Snnuva8mEdZcWeNTvsaxXb4Z3QWn/x0WtFrxr +WWgNXmqFKJDw1vwFqs6CezG7ttTEd9w -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:51 2025 by rpki-client