$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: 9YW7IGmcJywq0Qi2D1fsGZRHIcwtWU/vlR+SN0gV8zQ= Subject key identifier: 38:27:D6:A5:86:BB:D4:6A:EA:66:A2:65:14:B3:ED:00:1B:51:47:47 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01D8 Signing time: Sat 23 Aug 2025 02:50:23 +0000 Manifest this update: Sat 23 Aug 2025 02:50:22 +0000 Manifest next update: Sat 30 Aug 2025 02:50:22 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: wnKyX2pBI6U9u3YlEEZnXSrS30SBVZi3A5jbRlg84Rg=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Aug 23 02:50:22 2025 GMT Not After : Aug 30 02:50:22 2025 GMT Subject: CN=68a92c6f-5d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a2:38:27:5e:fd:4a:0e:a4:ab:da:13:22:0f: 75:4c:03:e4:a6:b2:c4:85:a5:d1:15:54:59:f4:69: fd:4b:28:9e:60:c0:ac:7f:4b:9b:0f:65:2f:ec:f1: 14:dc:16:2c:04:88:cf:5b:5b:de:6d:ba:e0:fc:2a: f7:82:f4:f9:15:ce:57:42:19:4d:dd:55:93:3f:a8: f8:5c:57:81:ab:65:19:1a:d2:55:37:25:4b:74:67: a0:6c:83:5e:e1:8b:f8:3e:7a:e3:a1:25:87:85:4e: 05:92:a3:bf:c2:b9:a3:b1:5e:85:c4:7e:4c:16:5e: 38:77:61:fa:ac:54:62:ae:33:25:b5:db:1d:11:14: c8:7d:8e:c4:31:46:a1:2b:b1:b1:e7:7a:6f:4b:83: a3:76:e8:e7:76:d7:0c:41:11:6e:94:d1:0e:76:e3: 0f:f9:04:3c:36:9e:29:39:d7:52:4a:a7:f5:70:5d: ca:2f:db:34:8d:4e:5f:2b:bd:45:ec:77:c9:e4:96: 44:6c:7e:7f:72:7c:0e:4f:81:63:68:6e:13:fb:9e: 4f:39:30:2c:54:07:02:7d:b8:8a:aa:41:e8:ea:97: 71:df:fa:e5:ed:2c:7b:31:9d:28:18:63:91:b6:8b: 42:a6:f4:0c:3e:aa:56:2f:17:b8:29:7c:dc:02:85: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:D6:A5:86:BB:D4:6A:EA:66:A2:65:14:B3:ED:00:1B:51:47:47 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:14:25:5e:22:31:be:a5:59:d2:2e:af:a3:55:46:5b:e0:b9: f4:06:93:36:b6:c4:ac:d0:cc:d9:39:a3:63:85:ae:14:6c:11: 57:5f:8a:fb:72:7b:56:74:47:d1:b6:36:15:78:a0:95:ca:36: f4:de:f3:08:82:cb:80:62:20:7d:f1:9b:5e:ac:1a:9a:43:9e: d0:53:53:b0:20:fd:6e:0d:51:1b:6d:c5:78:ee:7c:56:bc:a4: ea:0b:46:20:a2:69:ab:8e:87:e6:46:f7:f7:0e:e4:66:e7:fc: 44:08:c9:7d:d0:b1:62:34:50:48:22:90:1c:5b:45:1b:a9:70: e7:ca:c9:46:0a:66:2e:8f:e8:0c:0d:03:95:73:e4:76:8d:22: 78:58:13:81:0d:f7:f5:df:25:5f:3a:55:86:73:b6:a0:54:b7: e4:c8:53:f3:7a:91:82:c5:4f:c8:10:26:c5:db:65:19:10:d5: 2e:95:2d:9e:cd:e5:59:03:7c:46:74:6a:3c:84:6b:62:51:7f: f1:8f:78:81:87:4e:08:ff:6b:5a:73:4b:d8:e4:37:57:c7:1a: 14:4a:58:ce:42:a4:84:54:b2:9b:78:15:a2:4e:2e:bb:08:9f: 0a:17:16:a2:27:52:f5:c3:66:e3:1b:43:fd:e8:89:94:b6:6d: e9:f6:d4:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUwODIzMDI1MDIyWhcNMjUwODMwMDI1MDIyWjAYMRYwFAYD VQQDEw02OGE5MmM2Zi01ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqI4J179Sg6kq9oTIg91TAPkprLEhaXRFVRZ9Gn9SyieYMCsf0ubD2Uv7PEU 3BYsBIjPW1vebbrg/Cr3gvT5Fc5XQhlN3VWTP6j4XFeBq2UZGtJVNyVLdGegbINe 4Yv4PnrjoSWHhU4FkqO/wrmjsV6FxH5MFl44d2H6rFRirjMltdsdERTIfY7EMUah K7Gx53pvS4OjdujndtcMQRFulNEOduMP+QQ8Np4pOddSSqf1cF3KL9s0jU5fK71F 7HfJ5JZEbH5/cnwOT4FjaG4T+55POTAsVAcCfbiKqkHo6pdx3/rl7Sx7MZ0oGGOR totCpvQMPqpWLxe4KXzcAoWBHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgn1qWG u9Rq6maiZRSz7QAbUUdHMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFCVeIjG+pVnSLq+jVUZb4Ln0BpM2tsSs0MzZOaNjha4UbBFXX4r7 cntWdEfRtjYVeKCVyjb03vMIgsuAYiB98ZterBqaQ57QU1OwIP1uDVEbbcV47nxW vKTqC0YgommrjofmRvf3DuRm5/xECMl90LFiNFBIIpAcW0UbqXDnyslGCmYuj+gM DQOVc+R2jSJ4WBOBDff13yVfOlWGc7agVLfkyFPzepGCxU/IECbF22UZENUulS2e zeVZA3xGdGo8hGtiUX/xj3iBh04I/2tac0vY5DdXxxoUSljOQqSEVLKbeBWiTi67 CJ8KFxaiJ1L1w2bjG0P96ImUtm3p9tRM -----END CERTIFICATE-----Generated at Sun Aug 24 08:51:37 2025 by rpki-client