$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: JsqkPT9REPjYNaDh18bH5On0gUSw4wgpVbLRG2EKpFQ= Subject key identifier: 78:C0:BA:C0:F7:98:B7:EE:50:FA:BB:51:A9:FC:A0:DD:D9:1D:30:3D Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03E8 Signing time: Sat 23 Aug 2025 00:45:45 +0000 Manifest this update: Sat 23 Aug 2025 00:45:44 +0000 Manifest next update: Sat 30 Aug 2025 00:45:44 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: JqDa0gd+3ItqY90JtN/+e8nudcDaMBx7K3FjX34Ktb8=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Aug 23 00:45:44 2025 GMT Not After : Aug 30 00:45:44 2025 GMT Subject: CN=68a90f39-3ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:9b:64:0e:53:db:cd:d3:ce:bc:43:c6:f0: 2d:ca:b3:d0:16:f5:1e:d2:b9:4f:49:af:41:4d:18: e1:4c:63:21:d0:73:00:e6:3b:24:49:87:70:71:17: d0:bf:9e:1f:1f:88:54:5c:0b:2a:a7:14:02:27:c5: 23:3b:bb:f7:79:01:03:51:9e:e0:a4:97:a7:8f:47: ae:a5:07:31:9d:65:d1:03:f7:98:c0:aa:0d:00:b1: 31:1c:7d:06:6d:af:b1:26:15:b9:29:ae:41:b5:b9: 09:6b:8c:be:07:52:bf:11:a9:a1:f9:e9:0a:aa:75: 29:76:36:d5:e9:b9:63:12:d6:66:fa:0d:7d:38:85: 80:c6:ee:0f:d8:88:5f:2d:80:09:68:dc:36:59:21: 2a:98:2a:cd:d7:78:94:da:dd:42:c3:76:8b:b9:df: 64:c7:0f:b8:78:f7:ae:12:55:3e:8c:1d:73:58:c9: 14:17:a5:7a:88:67:05:2c:a9:89:e4:70:c5:3d:58: 4e:46:e2:50:92:25:c2:98:01:6c:e5:45:57:26:42: 15:90:a9:1d:e4:60:e4:ba:0b:f1:d0:e1:2c:83:9d: 90:ff:cc:d4:c8:f4:e7:3a:ee:96:c5:a2:38:5b:cb: 82:86:01:2c:43:40:0e:95:a2:3c:ff:a7:20:28:ee: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C0:BA:C0:F7:98:B7:EE:50:FA:BB:51:A9:FC:A0:DD:D9:1D:30:3D X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:10:47:c8:79:61:4e:6a:51:4d:de:a9:b6:ac:41:ad:4d: 8e:bf:3e:aa:35:3a:3c:08:33:8b:16:d5:04:04:31:5c:26:1c: 30:95:82:e2:05:75:7a:98:f0:cc:4f:9d:8a:77:8f:d4:e6:9b: 6f:02:90:26:37:7a:98:64:72:f2:de:7b:c1:d2:f8:b2:59:a5: 67:81:6c:41:9e:0a:ab:a9:ba:5c:a1:38:b1:cb:6e:09:86:00: 20:29:4d:92:8d:f7:8b:cd:bf:4b:7c:c4:9d:8e:7d:97:08:65: e0:d1:95:51:c6:f5:a8:b1:ba:77:0c:74:2c:04:54:45:20:94: 02:bd:6e:fa:86:6a:47:26:59:93:8a:76:ad:bc:b5:24:57:ea: f4:10:d3:0b:f0:d6:2d:42:18:b1:ac:31:f8:1b:fa:c1:41:94: 8b:74:7e:e4:39:e8:e8:fd:4d:fc:bc:f4:28:b6:f6:3d:a5:70: f6:ee:25:5b:1b:f7:6b:db:52:dd:d8:bb:9e:a8:a4:a8:c3:1c: 58:62:76:36:d3:e1:0f:bb:1b:a0:93:5f:37:9c:dc:29:dc:15: 33:f5:d2:a0:80:8e:36:db:b3:35:ee:07:ac:76:09:3f:0a:e3: d1:ee:9a:6a:5f:d2:9c:d8:a9:e6:bd:29:db:9d:3d:7e:c8:5c: 3f:ef:49:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwODIzMDA0NTQ0WhcNMjUwODMwMDA0NTQ0WjAYMRYwFAYD VQQDEw02OGE5MGYzOS0zZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1WbZA5T283TzrxDxvAtyrPQFvUe0rlPSa9BTRjhTGMh0HMA5jskSYdwcRfQ v54fH4hUXAsqpxQCJ8UjO7v3eQEDUZ7gpJenj0eupQcxnWXRA/eYwKoNALExHH0G ba+xJhW5Ka5BtbkJa4y+B1K/Eamh+ekKqnUpdjbV6bljEtZm+g19OIWAxu4P2Ihf LYAJaNw2WSEqmCrN13iU2t1Cw3aLud9kxw+4ePeuElU+jB1zWMkUF6V6iGcFLKmJ 5HDFPVhORuJQkiXCmAFs5UVXJkIVkKkd5GDkugvx0OEsg52Q/8zUyPTnOu6WxaI4 W8uChgEsQ0AOlaI8/6cgKO76wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjAusD3 mLfuUPq7Uan8oN3ZHTA9MB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc9BBHyHlhTmpRTd6ptqxBrU2Ovz6qNTo8CDOLFtUEBDFcJhwwlYLi BXV6mPDMT52Kd4/U5ptvApAmN3qYZHLy3nvB0viyWaVngWxBngqrqbpcoTixy24J hgAgKU2SjfeLzb9LfMSdjn2XCGXg0ZVRxvWosbp3DHQsBFRFIJQCvW76hmpHJlmT inatvLUkV+r0ENML8NYtQhixrDH4G/rBQZSLdH7kOejo/U38vPQotvY9pXD27iVb G/dr21Ld2LueqKSowxxYYnY20+EPuxugk183nNwp3BUz9dKggI4227M17gesdgk/ CuPR7ppqX9Kc2KnmvSnbnT1+yFw/70l7 -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:21 2025 by rpki-client