$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: aJwJA7NkDf9vW18HPxSa0N02KAOMrunReFeHu4AmBzY= Subject key identifier: CA:F2:87:D2:C1:0B:D7:26:34:BC:EA:A0:DB:63:CD:9E:21:84:75:35 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0644 Signing time: Fri 22 Aug 2025 23:07:43 +0000 Manifest this update: Fri 22 Aug 2025 23:07:43 +0000 Manifest next update: Fri 29 Aug 2025 23:07:43 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: wPwokrtpmw1e0MnT1ifzYO+fK/RXNjLms9aQgBne9ag=) 2: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: CKUqvOaMRoHUuvk0O3ZRuqOU8HxzjagSOpCtfnM7DSk=) 3: 2A82E0387E4711F0A2B60323C4F9AE02.roa (hash: qb0EHDFIzmqfKNl8IAMuPMfq3EfTGa4BgSnK9ylRRhg=) 4: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s=) 5: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI=) 6: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: 50SJ1VD5Mg9u7/s+ykx+b/EGgkeu1R+I/i5QtPiDi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Aug 22 23:07:43 2025 GMT Not After : Aug 29 23:07:43 2025 GMT Subject: CN=68a8f83f-1710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:36:2d:f6:68:9c:48:5d:8d:9d:73:ca:b9: 5f:42:ae:c9:d3:2d:85:13:9c:4f:c9:3e:25:59:98: 54:fe:90:82:2e:f5:29:4f:05:57:a7:89:85:e7:cb: f8:d6:5c:8b:07:65:c2:22:dd:34:f8:47:fe:87:6e: 80:7f:f4:27:77:a5:ad:ec:9e:bd:6b:5b:40:ff:e4: 49:7c:59:c5:88:66:e9:f7:b3:39:3c:dc:32:4b:c4: 20:13:b9:9c:d6:e8:7b:75:1e:5a:9e:45:3d:70:42: 8e:8b:51:e9:8e:c8:e5:a8:79:d3:3c:8b:d4:f8:d7: ef:7e:aa:d8:29:89:c2:3d:28:d0:82:88:44:4a:2c: 01:4d:4a:61:e2:ad:82:71:65:a3:e0:32:3b:06:fa: b7:3d:fb:51:42:b5:79:37:b1:bf:22:ab:7c:24:c8: 6f:6c:00:84:3c:dd:97:c1:ca:a7:32:a7:2f:08:63: 87:9b:e8:71:2d:93:8f:04:68:5c:28:22:0d:52:14: df:65:e1:6a:fd:4b:1a:99:0d:49:38:16:23:c0:cc: ea:29:c4:56:32:e2:5a:02:c5:93:e9:6a:ae:61:99: 73:c9:cb:37:66:31:ff:c9:a2:24:3b:b0:3f:2d:3b: 96:dc:64:72:55:38:a1:62:5e:f5:85:3f:eb:eb:4c: 95:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F2:87:D2:C1:0B:D7:26:34:BC:EA:A0:DB:63:CD:9E:21:84:75:35 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:88:dd:5a:96:b4:80:c8:95:eb:cb:0c:b7:a9:07:bb:38:52: c6:70:d5:95:9a:e4:b6:22:01:a2:20:e6:69:b9:1c:7d:79:57: db:3b:2a:e6:22:f4:ad:06:0e:3d:a7:5d:5f:a9:29:ec:6e:c7: 54:6b:5f:96:85:80:d0:3e:fc:7b:98:32:9c:10:ed:46:04:bc: 1a:0e:9a:d4:3d:3a:71:0c:cb:c9:ff:70:67:e3:5a:c3:63:55: 76:e6:f1:c9:4f:c4:6f:99:09:71:b6:1b:69:5f:62:21:df:9c: 52:0f:d4:26:2b:19:2a:25:0c:2b:20:ad:59:f2:3a:25:e8:b2: f9:b6:52:de:d2:4a:6c:0b:df:9a:5d:ed:4a:fb:ec:13:c8:1d: ef:34:b3:82:ab:41:1a:f7:73:2e:30:82:78:a5:4d:35:fe:88: 6c:be:be:96:7d:cc:93:d8:49:c3:2c:52:1f:e6:ba:63:ae:d9: ca:2c:23:7f:89:4d:a2:1f:12:46:e5:c8:bc:8f:83:40:84:87: 40:ef:c0:27:56:65:5f:3a:a4:ce:4f:ff:80:41:e5:ac:4e:b1: 89:e3:cd:9f:9d:ed:f7:90:e0:48:10:b3:bb:b3:8e:c5:2b:fb: 77:b2:6b:43:19:a2:c0:c3:a5:a5:ae:fc:e4:12:7a:27:6f:a0: 78:18:1e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwODIyMjMwNzQzWhcNMjUwODI5MjMwNzQzWjAYMRYwFAYD VQQDEw02OGE4ZjgzZi0xNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquQ2LfZonEhdjZ1zyrlfQq7J0y2FE5xPyT4lWZhU/pCCLvUpTwVXp4mF58v4 1lyLB2XCIt00+Ef+h26Af/Qnd6Wt7J69a1tA/+RJfFnFiGbp97M5PNwyS8QgE7mc 1uh7dR5ankU9cEKOi1HpjsjlqHnTPIvU+NfvfqrYKYnCPSjQgohESiwBTUph4q2C cWWj4DI7Bvq3PftRQrV5N7G/Iqt8JMhvbACEPN2XwcqnMqcvCGOHm+hxLZOPBGhc KCINUhTfZeFq/UsamQ1JOBYjwMzqKcRWMuJaAsWT6WquYZlzycs3ZjH/yaIkO7A/ LTuW3GRyVTihYl71hT/r60yVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMryh9LB C9cmNLzqoNtjzZ4hhHU1MB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoiN1alrSAyJXrywy3qQe7OFLGcNWVmuS2IgGiIOZpuRx9eVfbOyrm IvStBg49p11fqSnsbsdUa1+WhYDQPvx7mDKcEO1GBLwaDprUPTpxDMvJ/3Bn41rD Y1V25vHJT8RvmQlxthtpX2Ih35xSD9QmKxkqJQwrIK1Z8jol6LL5tlLe0kpsC9+a Xe1K++wTyB3vNLOCq0Ea93MuMIJ4pU01/ohsvr6WfcyT2EnDLFIf5rpjrtnKLCN/ iU2iHxJG5ci8j4NAhIdA78AnVmVfOqTOT/+AQeWsTrGJ482fne33kOBIELO7s47F K/t3smtDGaLAw6WlrvzkEnonb6B4GB4E -----END CERTIFICATE-----Generated at Sat Aug 23 20:20:11 2025 by rpki-client