$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: SRRZJyQF4rPksSfNfPSzp5TlvJCPGMTdr0PXOUEQXKI= Subject key identifier: CE:DF:63:54:37:82:13:F8:95:46:B4:25:3A:95:A6:E8:3E:CF:A4:33 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 34B4 Signing time: Fri 22 Aug 2025 14:51:17 +0000 Manifest this update: Fri 22 Aug 2025 14:51:16 +0000 Manifest next update: Fri 29 Aug 2025 14:51:16 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: YNTAYfVXpogoJReFXbppmV/ueMggZhuMQZ1qHFPqz4M=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Aug 22 14:51:16 2025 GMT Not After : Aug 29 14:51:16 2025 GMT Subject: CN=68a883e4-5cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:d8:4e:7f:6a:69:68:13:dc:97:65:6b:85: 46:2d:21:da:31:d4:e4:63:13:2b:56:a8:ef:cf:1e: 9a:51:2a:d8:e6:48:28:7b:b1:ed:b0:fb:07:55:7d: 97:98:0e:23:2c:08:e3:08:b2:e4:0c:f1:ba:d1:8b: 4f:fb:c3:dc:5d:85:cc:c9:7f:92:b9:83:d9:e8:9d: 7b:13:aa:b2:c9:e1:a8:be:df:b1:72:bf:f7:b7:74: 0d:46:86:2a:e6:10:a3:5e:67:8e:a5:ff:ff:07:05: 49:10:9d:f9:c9:1d:24:f0:2a:0c:79:ec:6b:cd:59: 7f:64:57:6e:0b:d6:3c:f8:fd:84:52:a3:2b:54:47: 79:90:00:74:30:b4:47:ca:bd:c3:be:4b:1e:2c:41: a0:6c:9c:68:b8:27:a9:8a:a5:bd:94:82:da:e8:2a: e3:73:23:73:ba:3d:d7:c7:39:72:93:55:5a:84:7f: b4:c8:21:30:ca:63:8e:2f:da:43:78:82:c0:c4:78: ca:e5:9d:f6:c9:4a:00:33:91:13:89:ef:72:0d:99: 74:5a:26:99:05:4f:91:d8:e0:db:d2:73:db:d9:bb: 02:c2:cf:78:72:34:16:26:50:08:2d:4c:45:b7:29: 82:6d:0c:0b:ba:df:02:24:88:fb:9c:62:f8:ea:64: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:63:54:37:82:13:F8:95:46:B4:25:3A:95:A6:E8:3E:CF:A4:33 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:83:1c:2c:d6:f4:93:c3:49:9d:03:b8:34:58:c9:d5:b4: 64:9d:a1:3b:24:25:50:48:85:b1:96:7b:28:d4:7f:a2:cc:cb: 91:b4:bc:2c:66:8b:04:29:39:43:f4:6a:9a:85:c9:a9:92:21: 72:a4:7a:48:9f:ba:91:cc:83:cd:0e:21:01:1b:51:2e:7e:67: 53:2d:33:cd:cb:95:23:95:2e:9b:cc:66:f1:0e:fa:ac:9e:f8: 8c:54:59:e1:8d:26:46:13:76:f9:64:65:0b:27:d2:bc:bc:ea: 86:a2:2b:1a:59:41:53:15:b1:95:09:73:c4:aa:20:12:ad:5a: 27:fb:27:6d:f6:31:3b:94:be:fb:35:e4:fc:92:00:b6:4a:d3: 71:7e:ff:64:4d:14:e9:9c:97:e2:e0:c6:13:eb:13:1d:89:46: 67:89:8c:ff:70:63:57:75:51:6d:68:35:28:21:1b:2b:1f:c5: 0a:8a:ff:44:18:0f:ef:65:12:97:2a:a3:a5:7d:3c:73:20:37: 78:c4:1a:22:12:51:0e:65:0e:ce:dc:77:fe:53:eb:a2:82:91: ff:17:3b:34:f2:63:d5:71:fe:2a:f4:04:e2:e7:bc:4b:fc:d6: a3:97:c4:ae:c4:00:7a:c3:25:38:2d:e4:ad:a1:c3:a8:1d:25: 1d:da:d3:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwODIyMTQ1MTE2WhcNMjUwODI5MTQ1MTE2WjAYMRYwFAYD VQQDEw02OGE4ODNlNC01Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh/YTn9qaWgT3Jdla4VGLSHaMdTkYxMrVqjvzx6aUSrY5kgoe7HtsPsHVX2X mA4jLAjjCLLkDPG60YtP+8PcXYXMyX+SuYPZ6J17E6qyyeGovt+xcr/3t3QNRoYq 5hCjXmeOpf//BwVJEJ35yR0k8CoMeexrzVl/ZFduC9Y8+P2EUqMrVEd5kAB0MLRH yr3DvkseLEGgbJxouCepiqW9lILa6CrjcyNzuj3Xxzlyk1VahH+0yCEwymOOL9pD eILAxHjK5Z32yUoAM5ETie9yDZl0WiaZBU+R2ODb0nPb2bsCws94cjQWJlAILUxF tymCbQwLut8CJIj7nGL46mQ0awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7fY1Q3 ghP4lUa0JTqVpug+z6QzMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/YMcLNb0k8NJnQO4NFjJ1bRknaE7JCVQSIWxlnso1H+izMuRtLws ZosEKTlD9GqahcmpkiFypHpIn7qRzIPNDiEBG1EufmdTLTPNy5UjlS6bzGbxDvqs nviMVFnhjSZGE3b5ZGULJ9K8vOqGoisaWUFTFbGVCXPEqiASrVon+ydt9jE7lL77 NeT8kgC2StNxfv9kTRTpnJfi4MYT6xMdiUZniYz/cGNXdVFtaDUoIRsrH8UKiv9E GA/vZRKXKqOlfTxzIDd4xBoiElEOZQ7O3Hf+U+uigpH/Fzs08mPVcf4q9ATi57xL /Najl8SuxAB6wyU4LeStocOoHSUd2tPe -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:39 2025 by rpki-client