$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: l9kSG3P3zi+hxjfIWXusEgGRwHVa6LkPT8PL3bNo0lU= Subject key identifier: 48:9C:CA:64:C6:11:D9:2E:8F:7D:79:55:61:B2:FF:B8:A1:FF:4F:A7 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 1614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 1603 Signing time: Fri 22 Aug 2025 16:52:15 +0000 Manifest this update: Fri 22 Aug 2025 16:52:14 +0000 Manifest next update: Fri 29 Aug 2025 16:52:14 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: rZ3OiUCq3AZ0Tx/mteg5tmMVxvytIGadToIYrs26GHY=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5652 (0x1614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Aug 22 16:52:14 2025 GMT Not After : Aug 29 16:52:14 2025 GMT Subject: CN=68a8a03f-536e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:f6:a3:97:c8:5e:bd:d3:b1:4f:77:b9:7a: 25:8c:ce:bc:a1:89:ea:51:09:48:3e:ca:71:91:bc: e7:32:b3:98:8f:1b:9c:f3:f6:47:a4:66:f9:45:01: 63:f1:f4:ac:42:d7:c3:e7:ff:c3:37:44:d2:d0:d1: 49:e7:20:ea:0a:7c:43:7a:a4:4d:18:9b:30:b5:a5: ed:83:4e:00:a6:4d:c9:a1:9c:dc:e8:b2:68:3d:1e: 62:5c:ab:3c:50:c5:c8:6f:64:c4:df:b2:fd:67:8b: 54:d0:8e:ad:8a:65:4b:aa:79:a5:69:ae:3a:70:39: e3:2e:f4:93:88:fa:40:3a:92:7d:16:71:f8:b6:e7: f7:c7:ca:71:5f:58:75:e6:43:46:8e:52:26:43:e4: 0f:a8:8a:c3:23:4d:21:b7:a7:1b:c2:2d:06:22:d5: f9:79:e1:f4:f5:40:f3:4f:40:d9:1e:a5:80:ee:ab: 87:4f:3a:6f:a5:93:39:e2:46:ba:e0:0a:f1:81:a0: 5e:e8:5f:69:ec:12:4c:3b:05:78:3d:c3:d5:43:a4: b2:2f:2d:2a:c5:f2:1c:ad:76:6f:73:7b:43:83:27: b2:36:d1:ce:d2:60:dc:59:55:76:3f:1e:22:71:96: 78:3b:34:72:a0:a6:a8:85:ce:6b:97:aa:8c:cc:66: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9C:CA:64:C6:11:D9:2E:8F:7D:79:55:61:B2:FF:B8:A1:FF:4F:A7 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7d:fe:45:d8:65:b4:f8:a6:fa:54:90:88:3a:5f:28:5b:73: c1:29:13:ca:8f:97:b0:59:d4:63:9e:5d:f4:ef:a8:d9:55:d7: 92:92:8a:2c:b0:12:d6:c6:08:1f:3a:d4:08:1c:2e:70:4f:87: 0a:11:c1:d4:67:6c:2f:25:ce:5d:d8:bd:08:e1:33:f4:4a:4e: a5:f6:4e:a5:bb:e0:77:b9:dc:a3:08:16:47:d5:b3:5a:cf:d7: f2:df:4a:4e:3c:cf:e3:9f:79:7d:2b:36:cc:65:d9:dd:86:e7: 1b:d2:54:63:8c:de:a8:8e:72:4e:8a:dd:81:57:30:aa:cd:c7: 91:8d:45:93:9b:47:c3:be:77:10:44:26:05:ef:a0:73:42:dd: 4e:d5:b1:82:2f:49:73:a0:66:b6:c0:96:ba:1b:d9:d9:96:4a: 59:b6:67:24:fb:6b:5c:7e:72:6f:d7:66:25:de:be:13:4f:a9: a9:06:fe:1b:84:66:e3:83:41:0e:da:70:a6:c4:f9:50:3a:c3: 93:92:64:b7:71:d6:43:f8:08:9a:63:58:f8:1c:9c:08:a2:fb: db:7c:6e:e2:d8:48:87:b0:26:cc:1c:22:7f:cd:74:fb:a2:13: 3c:a7:58:87:4e:ac:17:4e:79:3d:31:a3:15:a6:45:75:ab:40: b6:3d:9f:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwODIyMTY1MjE0WhcNMjUwODI5MTY1MjE0WjAYMRYwFAYD VQQDEw02OGE4YTAzZi01MzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqp32o5fIXr3TsU93uXoljM68oYnqUQlIPspxkbznMrOYjxuc8/ZHpGb5RQFj 8fSsQtfD5//DN0TS0NFJ5yDqCnxDeqRNGJswtaXtg04Apk3JoZzc6LJoPR5iXKs8 UMXIb2TE37L9Z4tU0I6timVLqnmlaa46cDnjLvSTiPpAOpJ9FnH4tuf3x8pxX1h1 5kNGjlImQ+QPqIrDI00ht6cbwi0GItX5eeH09UDzT0DZHqWA7quHTzpvpZM54ka6 4ArxgaBe6F9p7BJMOwV4PcPVQ6SyLy0qxfIcrXZvc3tDgyeyNtHO0mDcWVV2Px4i cZZ4OzRyoKaohc5rl6qMzGZ5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEicymTG Edkuj315VWGy/7ih/0+nMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAff5F2GW0+Kb6VJCIOl8oW3PBKRPKj5ewWdRjnl3076jZVdeSkoos sBLWxggfOtQIHC5wT4cKEcHUZ2wvJc5d2L0I4TP0Sk6l9k6lu+B3udyjCBZH1bNa z9fy30pOPM/jn3l9KzbMZdndhucb0lRjjN6ojnJOit2BVzCqzceRjUWTm0fDvncQ RCYF76BzQt1O1bGCL0lzoGa2wJa6G9nZlkpZtmck+2tcfnJv12Yl3r4TT6mpBv4b hGbjg0EO2nCmxPlQOsOTkmS3cdZD+AiaY1j4HJwIovvbfG7i2EiHsCbMHCJ/zXT7 ohM8p1iHTqwXTnk9MaMVpkV1q0C2PZ9i -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:09 2025 by rpki-client