$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: PLvEiAmw6nYgzXd9MOejiSN2Fq8747fuQmF3YtQswBM= Subject key identifier: 25:41:44:F5:1F:CD:98:77:21:AE:DE:1D:97:10:29:8A:76:A0:D5:69 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 06:27:14 +0000 Manifest this update: Sat 23 Aug 2025 06:27:14 +0000 Manifest next update: Sat 30 Aug 2025 06:27:14 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: nFtu26zIU2WgPfHEZSwLaGxIbQDQusWBBSIEkyqE48g=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Aug 23 06:27:14 2025 GMT Not After : Aug 30 06:27:14 2025 GMT Subject: CN=68a95f42-9f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e7:90:c3:63:49:5b:09:41:97:86:96:87:3f: f3:00:f9:17:49:1a:c4:70:9a:3f:43:55:59:4d:94: 2f:5a:4a:5f:05:8b:f6:5e:98:10:ff:b7:56:33:55: ba:64:bd:ca:50:d5:f4:1f:ea:26:0f:6d:af:b7:21: 51:68:99:7e:5a:c9:af:20:90:64:cc:64:e0:e7:5a: bf:6e:eb:c5:76:c7:ed:ae:e8:75:61:89:f4:af:c6: 98:e0:be:1a:84:91:bb:a2:8c:91:fb:ae:1e:9a:b4: a8:e8:c7:0b:7e:04:65:db:ca:f0:32:ed:5b:08:ad: 27:d2:64:07:ae:ab:38:26:bb:81:dd:0e:22:ce:e2: b2:0a:66:0e:55:6f:82:98:7a:37:90:b1:a9:47:f6: 93:f0:26:64:75:c7:38:f3:13:cb:01:6c:15:39:51: 02:af:3f:66:df:f1:3a:52:ee:9c:55:76:75:68:52: f9:f6:3e:1e:ad:30:41:18:e5:b8:4f:0b:6b:8d:a7: ca:3f:0e:41:61:67:7d:3e:06:aa:db:c5:30:56:25: f0:ac:fe:3a:04:c6:03:9e:5e:fa:f0:10:c0:a9:d3: 76:0f:66:dd:64:ab:cd:eb:a8:95:a3:43:40:7d:24: 83:96:57:45:cd:63:02:fb:71:7e:31:e1:d5:61:a9: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:44:F5:1F:CD:98:77:21:AE:DE:1D:97:10:29:8A:76:A0:D5:69 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a0:7d:2c:84:e4:2d:97:6a:5c:63:53:bb:9b:7d:ef:e6:4c: 8f:f4:4a:84:06:26:82:6e:69:5f:e5:c0:30:f8:6a:99:e5:db: 02:1a:95:bb:c5:3c:3e:4b:7c:b3:42:39:9c:7e:3f:69:a7:45: 17:aa:cc:ef:51:cf:98:e8:52:d1:80:39:b0:4e:13:ae:60:1c: a9:40:23:d4:90:7d:e0:d7:81:b0:e0:b1:de:c6:af:3a:f9:48: 17:8f:70:b8:2b:bc:03:f9:a9:22:13:7f:d4:2e:98:9c:69:84: 61:f3:77:44:6a:5a:35:0f:6a:74:3b:3c:09:48:86:48:51:05: f9:cf:4a:dd:bc:10:44:1d:44:ea:65:b6:44:31:39:a3:28:d1: e3:40:42:66:fb:96:fe:43:95:5a:77:dd:0c:76:df:4e:85:63: e9:45:1a:90:30:19:95:61:43:f6:0c:40:39:61:83:c9:47:13: 2f:c3:07:bf:4d:aa:9b:94:db:e7:f6:47:f2:7e:5e:d5:99:e6: ab:a2:89:8f:70:a1:86:f2:27:c2:e9:54:ee:e0:d9:00:60:2d: d2:c3:e0:0c:8c:03:cc:0c:d1:3d:e4:a9:60:f3:b2:81:ec:2d: 5d:dc:d6:79:90:d6:ab:2e:d7:ae:40:5f:e9:7b:b1:1d:e6:29: 2b:72:04:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUwODIzMDYyNzE0WhcNMjUwODMwMDYyNzE0WjAYMRYwFAYD VQQDEw02OGE5NWY0Mi05ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+eQw2NJWwlBl4aWhz/zAPkXSRrEcJo/Q1VZTZQvWkpfBYv2XpgQ/7dWM1W6 ZL3KUNX0H+omD22vtyFRaJl+WsmvIJBkzGTg51q/buvFdsftruh1YYn0r8aY4L4a hJG7ooyR+64emrSo6McLfgRl28rwMu1bCK0n0mQHrqs4JruB3Q4izuKyCmYOVW+C mHo3kLGpR/aT8CZkdcc48xPLAWwVOVECrz9m3/E6Uu6cVXZ1aFL59j4erTBBGOW4 TwtrjafKPw5BYWd9Pgaq28UwViXwrP46BMYDnl768BDAqdN2D2bdZKvN66iVo0NA fSSDlldFzWMC+3F+MeHVYakFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVBRPUf zZh3Ia7eHZcQKYp2oNVpMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVoH0shOQtl2pcY1O7m33v5kyP9EqEBiaCbmlf5cAw+GqZ5dsCGpW7 xTw+S3yzQjmcfj9pp0UXqszvUc+Y6FLRgDmwThOuYBypQCPUkH3g14Gw4LHexq86 +UgXj3C4K7wD+akiE3/ULpicaYRh83dEalo1D2p0OzwJSIZIUQX5z0rdvBBEHUTq ZbZEMTmjKNHjQEJm+5b+Q5Vad90Mdt9OhWPpRRqQMBmVYUP2DEA5YYPJRxMvwwe/ TaqblNvn9kfyfl7VmearoomPcKGG8ifC6VTu4NkAYC3Sw+AMjAPMDNE95Klg87KB 7C1d3NZ5kNarLteuQF/pe7Ed5ikrcgSt -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:23 2025 by rpki-client