$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: Vv+P9veBstiBzrZymJi9BYmrSqdPfGLcUvWETU8mfkw= Subject key identifier: 63:C0:37:39:31:8F:A6:EF:8B:21:10:71:D9:5A:65:07:AA:E6:93:2F Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: A8 Signing time: Thu 03 Jul 2025 06:16:51 +0000 Manifest this update: Thu 03 Jul 2025 06:16:51 +0000 Manifest next update: Thu 10 Jul 2025 06:16:51 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: NN+NZjW/slWIa9daQuClmGJKMspEbjWkrx/ngTejskg=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Jul 3 06:16:51 2025 GMT Not After : Jul 10 06:16:51 2025 GMT Subject: CN=68662053-66de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:20:41:53:22:fe:5e:1f:88:7d:ae:55:40: d3:e8:90:aa:6a:9c:d7:36:b1:6e:da:4d:25:28:4d: 09:18:7b:65:b1:03:a1:60:79:c6:af:2d:ad:99:bf: 74:3d:31:7e:bc:03:5c:13:3d:7e:c2:15:c2:7a:a9: 79:ca:8f:70:36:cf:4d:8c:0a:80:dd:76:63:4d:6d: fb:9d:da:0d:de:94:98:ad:58:0a:79:93:0c:73:ae: 00:ef:20:68:b3:40:bc:19:6c:a5:4b:9e:11:7c:5b: bb:33:f8:43:04:bb:50:9d:9f:a4:ef:d6:eb:f9:34: 70:47:d3:5f:7e:ef:75:d5:26:32:6d:ee:c1:46:dc: cb:4f:0a:b7:bf:73:2c:35:b2:f1:2c:77:ba:8e:5c: 67:e3:84:05:b6:33:aa:e0:f6:07:13:60:64:b7:90: ef:80:b1:28:28:4e:51:a6:27:0c:25:0f:34:27:b4: 1d:3e:20:72:c3:32:41:1c:a3:56:19:d1:63:58:09: 31:e0:ba:7f:5e:59:13:11:34:94:15:3f:1f:04:7d: 62:8e:18:d1:67:8d:1b:23:1a:45:f1:b4:a6:03:50: 01:c2:05:90:78:67:97:82:85:a2:15:81:a5:04:48: 8e:d4:7e:09:81:af:0a:54:ea:47:4c:84:da:a1:66: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:37:39:31:8F:A6:EF:8B:21:10:71:D9:5A:65:07:AA:E6:93:2F X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:bf:34:bb:9e:ec:fa:d7:3c:c7:7b:a9:41:5e:b2:19:b6:dc: 88:51:09:89:0e:00:c4:fc:54:5d:d3:53:1e:31:c7:37:ef:b5: dc:01:db:e9:50:14:f1:b8:84:ed:42:ae:9c:b7:e2:db:12:34: 8e:f6:09:e4:39:b4:f2:56:27:58:5e:0c:aa:ad:e3:b6:cb:7c: d1:d1:f9:76:7c:6b:5f:5e:30:ac:8c:92:4a:65:89:9d:9c:94: 89:e6:6c:1d:0b:d5:78:eb:3a:b1:79:19:18:f9:aa:e5:9b:27: ba:aa:3e:76:36:64:18:0a:b8:c5:18:d0:54:27:c4:c1:13:19: d4:ca:ab:82:ee:7e:c5:d8:9e:23:da:40:fc:c2:b1:1b:aa:b0: de:9e:f1:56:4d:67:5f:da:0c:a3:e4:1e:67:d2:6d:65:07:4c: 0c:54:bb:a1:5d:de:32:80:a0:cf:f7:2e:c8:30:d4:3c:e5:d1: 4e:63:f3:22:9b:de:91:49:5d:b5:24:16:ae:76:dd:e0:20:18: 85:77:94:ed:d4:e9:39:0b:ae:cb:7e:81:46:88:ff:79:42:61: f3:79:2b:2f:ea:f3:b9:ed:98:18:1d:0d:02:07:30:74:8d:58: a6:d8:c5:e7:55:b1:0f:8c:b5:00:18:d5:5e:8d:b4:d5:8d:b0: 33:b8:1e:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwNzAzMDYxNjUxWhcNMjUwNzEwMDYxNjUxWjAYMRYwFAYD VQQDEw02ODY2MjA1My02NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/4gQVMi/l4fiH2uVUDT6JCqapzXNrFu2k0lKE0JGHtlsQOhYHnGry2tmb90 PTF+vANcEz1+whXCeql5yo9wNs9NjAqA3XZjTW37ndoN3pSYrVgKeZMMc64A7yBo s0C8GWylS54RfFu7M/hDBLtQnZ+k79br+TRwR9Nffu911SYybe7BRtzLTwq3v3Ms NbLxLHe6jlxn44QFtjOq4PYHE2Bkt5DvgLEoKE5RpicMJQ80J7QdPiBywzJBHKNW GdFjWAkx4Lp/XlkTETSUFT8fBH1ijhjRZ40bIxpF8bSmA1ABwgWQeGeXgoWiFYGl BEiO1H4Jga8KVOpHTITaoWb7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPANzkx j6bviyEQcdlaZQeq5pMvMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWvzS7nuz61zzHe6lBXrIZttyIUQmJDgDE/FRd01MeMcc377XcAdvp UBTxuITtQq6ct+LbEjSO9gnkObTyVidYXgyqreO2y3zR0fl2fGtfXjCsjJJKZYmd nJSJ5mwdC9V46zqxeRkY+arlmye6qj52NmQYCrjFGNBUJ8TBExnUyquC7n7F2J4j 2kD8wrEbqrDenvFWTWdf2gyj5B5n0m1lB0wMVLuhXd4ygKDP9y7IMNQ85dFOY/Mi m96RSV21JBaudt3gIBiFd5Tt1Ok5C67LfoFGiP95QmHzeSsv6vO57ZgYHQ0CBzB0 jVim2MXnVbEPjLUAGNVejbTVjbAzuB5e -----END CERTIFICATE-----Generated at Thu Jul 3 21:07:41 2025 by rpki-client