$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: i4g0LFIU0lFHEQBpxAFEWzVx9+Ro4uDQycAgNqYFyPc= Subject key identifier: C5:AE:86:35:59:6B:BF:73:7C:13:39:21:02:0B:97:E4:3A:69:17:22 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06FF Signing time: Fri 22 Aug 2025 22:04:28 +0000 Manifest this update: Fri 22 Aug 2025 22:04:28 +0000 Manifest next update: Fri 29 Aug 2025 22:04:28 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: sIUX7WKszNtRwos4IU5eAi99/3woVX7lP9SDkShzifY=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Aug 22 22:04:28 2025 GMT Not After : Aug 29 22:04:28 2025 GMT Subject: CN=68a8e96c-9a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:08:f3:06:e5:cf:2e:71:94:55:d8:15:38: d5:c9:79:c5:e9:7f:e5:0c:01:e6:7e:f4:ad:7a:1d: 08:53:5e:fe:9a:3d:05:e2:fb:1d:4f:b7:e0:5e:29: 89:98:15:ef:d0:ae:64:66:e6:31:ca:07:2d:e2:8f: 12:a5:b8:1d:d0:9d:6e:ab:07:1b:3b:46:d6:56:61: 66:e8:ef:ea:b1:ee:60:6a:f0:70:eb:f1:b4:d2:1b: a3:9c:15:f7:ec:ec:64:b8:52:d9:75:c0:77:36:ee: 0a:a5:71:f0:0d:53:e9:53:1e:43:7e:00:32:78:c5: 27:60:48:87:7f:e5:f3:b6:bb:68:43:f7:1e:aa:b6: b9:87:f9:a8:ff:e7:3e:6f:f3:dd:90:69:02:33:21: 20:33:b2:df:08:c7:21:df:71:54:98:39:5b:51:57: f7:da:14:72:c1:8b:ea:7c:90:be:64:c7:14:0f:80: 99:ee:0b:1f:97:2d:60:5a:fb:2b:d5:10:45:65:83: 26:18:c9:e2:20:83:77:90:a1:83:8e:84:62:0e:35: 8a:5b:39:58:d0:7c:02:a7:32:8f:8d:cd:63:fa:b7: 48:47:01:b2:07:7d:7f:e8:6c:41:25:0d:60:48:a0: aa:f5:08:83:1b:85:2f:a4:58:43:5d:e2:aa:a2:e6: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AE:86:35:59:6B:BF:73:7C:13:39:21:02:0B:97:E4:3A:69:17:22 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:69:de:69:fb:bc:f8:b2:c4:b5:5f:41:13:51:37:77:d0:ad: f9:83:4c:fc:17:37:4d:16:5b:7c:21:b7:1e:d7:65:b7:77:d6: e1:c8:3c:59:4d:79:2d:74:73:dd:35:6b:fa:6c:c4:ab:04:a2: 70:26:56:b8:35:52:0a:89:50:4f:d5:aa:9f:e0:f8:28:c9:1e: 80:c8:b3:06:93:f2:9d:49:e0:94:b3:1a:b6:60:58:d4:0d:b2: 9d:a0:ec:81:5b:f1:53:15:46:09:13:a2:27:48:c9:90:4d:29: 25:20:5e:ff:f1:ea:5e:00:f3:19:31:44:32:fc:2d:61:1f:96: 4b:99:69:99:7f:4f:5d:1d:2f:11:f7:c1:6b:9d:dc:56:05:ac: fc:42:9e:9c:73:66:8a:c9:0f:1b:fc:8d:80:2a:70:ef:ba:eb: 48:63:0c:15:ea:ac:e2:07:bb:32:c8:4b:79:ff:14:36:3f:db: fb:fd:14:2d:e6:4c:5f:d9:20:45:0d:83:13:17:ec:24:a2:42: e6:98:2d:3f:ae:09:6b:84:c5:f1:0e:40:d7:ce:8d:d7:d4:64: 32:43:12:13:22:03:c8:c0:06:68:e1:44:a3:d0:ed:47:24:5e: 80:7c:8c:b0:8e:72:2d:fa:88:b7:f7:54:a2:66:cb:6d:ac:a3: e1:8a:5e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwODIyMjIwNDI4WhcNMjUwODI5MjIwNDI4WjAYMRYwFAYD VQQDEw02OGE4ZTk2Yy05YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w8I8wblzy5xlFXYFTjVyXnF6X/lDAHmfvSteh0IU17+mj0F4vsdT7fgXimJ mBXv0K5kZuYxygct4o8Spbgd0J1uqwcbO0bWVmFm6O/qse5gavBw6/G00hujnBX3 7OxkuFLZdcB3Nu4KpXHwDVPpUx5DfgAyeMUnYEiHf+XztrtoQ/ceqra5h/mo/+c+ b/PdkGkCMyEgM7LfCMch33FUmDlbUVf32hRywYvqfJC+ZMcUD4CZ7gsfly1gWvsr 1RBFZYMmGMniIIN3kKGDjoRiDjWKWzlY0HwCpzKPjc1j+rdIRwGyB31/6GxBJQ1g SKCq9QiDG4UvpFhDXeKqouY4fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWuhjVZ a79zfBM5IQILl+Q6aRciMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEad5p+7z4ssS1X0ETUTd30K35g0z8FzdNFlt8Ibce12W3d9bhyDxZ TXktdHPdNWv6bMSrBKJwJla4NVIKiVBP1aqf4PgoyR6AyLMGk/KdSeCUsxq2YFjU DbKdoOyBW/FTFUYJE6InSMmQTSklIF7/8epeAPMZMUQy/C1hH5ZLmWmZf09dHS8R 98FrndxWBaz8Qp6cc2aKyQ8b/I2AKnDvuutIYwwV6qziB7syyEt5/xQ2P9v7/RQt 5kxf2SBFDYMTF+wkokLmmC0/rglrhMXxDkDXzo3X1GQyQxITIgPIwAZo4USj0O1H JF6AfIywjnIt+oi391SiZsttrKPhil7v -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:36 2025 by rpki-client