$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: Gg2JTo7sMdW3v6uLdPOONP/lHxxh2wtiSDNrjZ6U1ls= Subject key identifier: 63:03:A2:A8:4C:0B:06:15:29:19:F0:E7:E9:B3:22:0D:FA:0A:CD:EC Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 89 Signing time: Thu 03 Jul 2025 06:44:26 +0000 Manifest this update: Thu 03 Jul 2025 06:44:25 +0000 Manifest next update: Thu 10 Jul 2025 06:44:25 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: YDKTOZF63YZxQdJSDg+MQ4N1vZ1o0Oqo1zsIubs531A=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jul 3 06:44:25 2025 GMT Not After : Jul 10 06:44:25 2025 GMT Subject: CN=686626ca-ba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c0:4d:63:8a:bc:3f:5a:a3:40:93:07:bd:31: 99:11:f5:56:d6:ff:c2:bc:d8:2d:3b:03:1c:c1:93: 98:b1:2f:5d:1b:41:cf:c6:0c:f4:d9:18:d7:91:b5: 4e:25:5e:ab:96:8a:4c:59:a4:51:7f:3f:15:24:98: e5:ab:69:88:ed:03:c9:99:dd:5f:6d:8a:55:81:e6: 37:3c:4e:e3:9a:94:b6:32:1b:71:4a:0e:ae:e5:5e: 7f:f5:46:e9:84:a1:bb:ca:7f:8a:e0:c0:d8:81:32: 80:7b:3c:17:4f:23:6d:bc:8b:9b:02:1a:ac:c5:18: 53:cd:d7:29:2e:e1:c0:bc:5f:3b:2e:0a:96:d8:14: 21:04:1e:f7:ed:93:12:83:87:f4:b8:e3:1f:e3:fd: 79:fe:ea:9c:6f:16:9d:93:aa:6b:4c:69:ec:18:ce: 49:80:87:07:09:1e:bc:bb:08:3d:18:ab:bb:c9:d5: 36:42:98:aa:b0:89:54:2a:bd:05:a1:39:7b:72:5c: 3c:f6:b9:f2:a1:93:a2:ca:e7:3c:15:b4:be:fd:8c: 5c:a9:4e:6b:6d:c3:47:87:9b:d5:ae:8a:8e:9a:04: 15:66:4f:54:cc:44:38:05:b9:49:32:65:2b:cf:f0: e4:e3:94:8a:a1:32:12:91:bf:75:89:2a:ce:32:ae: 81:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:03:A2:A8:4C:0B:06:15:29:19:F0:E7:E9:B3:22:0D:FA:0A:CD:EC X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ee:54:f5:4e:16:df:5b:2b:6a:3a:3a:ec:95:d5:b1:96:99: 54:85:7d:ef:07:43:ae:3c:ee:dd:70:e7:8f:48:27:19:a2:cc: 22:0e:40:0c:4f:57:c8:e4:98:de:20:4e:62:b8:73:84:0d:13: 35:56:92:48:a0:23:5c:2d:0d:60:1c:9a:93:8c:50:dc:dd:03: 3e:2e:23:1d:d2:29:91:80:99:18:8c:a8:52:01:3b:a2:f4:de: 0f:98:23:f7:36:7f:86:b8:e7:6e:fc:47:d2:dd:7e:c5:d6:db: b8:86:49:1a:fd:2a:93:58:b6:c3:1b:bb:51:36:d9:37:99:a8: b2:33:a6:99:90:07:18:91:75:44:ea:be:6b:19:6f:21:a8:1a: b6:84:9e:ee:d5:d0:30:2b:8f:b5:e2:e0:b1:26:0d:10:30:33: f2:41:e8:26:16:00:aa:ad:a8:0e:c4:83:8e:49:d8:27:a7:93: 28:24:01:26:30:9f:03:ca:b5:b4:e9:4d:da:61:cb:8f:e3:6e: 4f:d9:e6:21:ff:d3:fa:88:5c:ff:b0:e0:9b:2e:12:bf:7e:62: 37:27:07:5b:7a:ae:14:ea:00:35:ef:98:9a:43:58:f3:55:05: 11:d6:d4:98:09:30:3a:05:10:46:28:ed:94:71:61:2b:7f:f1: 2c:bb:24:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUwNzAzMDY0NDI1WhcNMjUwNzEwMDY0NDI1WjAYMRYwFAYD VQQDEw02ODY2MjZjYS1iYTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MBNY4q8P1qjQJMHvTGZEfVW1v/CvNgtOwMcwZOYsS9dG0HPxgz02RjXkbVO JV6rlopMWaRRfz8VJJjlq2mI7QPJmd1fbYpVgeY3PE7jmpS2MhtxSg6u5V5/9Ubp hKG7yn+K4MDYgTKAezwXTyNtvIubAhqsxRhTzdcpLuHAvF87LgqW2BQhBB737ZMS g4f0uOMf4/15/uqcbxadk6prTGnsGM5JgIcHCR68uwg9GKu7ydU2QpiqsIlUKr0F oTl7clw89rnyoZOiyuc8FbS+/YxcqU5rbcNHh5vVroqOmgQVZk9UzEQ4BblJMmUr z/Dk45SKoTISkb91iSrOMq6BeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMDoqhM CwYVKRnw5+mzIg36Cs3sMB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ7lT1ThbfWytqOjrsldWxlplUhX3vB0OuPO7dcOePSCcZoswiDkAM T1fI5JjeIE5iuHOEDRM1VpJIoCNcLQ1gHJqTjFDc3QM+LiMd0imRgJkYjKhSATui 9N4PmCP3Nn+GuOdu/EfS3X7F1tu4hkka/SqTWLbDG7tRNtk3maiyM6aZkAcYkXVE 6r5rGW8hqBq2hJ7u1dAwK4+14uCxJg0QMDPyQegmFgCqragOxIOOSdgnp5MoJAEm MJ8DyrW06U3aYcuP425P2eYh/9P6iFz/sOCbLhK/fmI3Jwdbeq4U6gA175iaQ1jz VQUR1tSYCTA6BRBGKO2UcWErf/EsuyTq -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:40 2025 by rpki-client