$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: Wf5XqGNFp/0gIfuRsc738claQSGJHKtqLOqHqVUMHe0= Subject key identifier: 9C:D1:DC:81:2A:E4:31:2D:B8:62:CB:B7:5D:B7:19:B9:D6:F3:2F:1F Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 023A Signing time: Sat 23 Aug 2025 02:06:19 +0000 Manifest this update: Sat 23 Aug 2025 02:06:19 +0000 Manifest next update: Sat 30 Aug 2025 02:06:19 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: YUiQH35N6qfpHaTJvDrJ2np3GtWumGupXsQOmBH8/oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Aug 23 02:06:19 2025 GMT Not After : Aug 30 02:06:19 2025 GMT Subject: CN=68a9221b-a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:e2:96:a7:79:af:e7:14:69:a6:d6:4b:02: 74:8f:ce:e6:2d:6c:f9:70:9f:fd:2a:13:7b:68:36: ee:5f:bb:14:35:88:92:48:f7:e7:43:e0:cb:b7:6f: f4:0f:03:97:0c:5e:28:83:1b:28:6b:2e:fc:4a:3e: 73:8d:08:f2:6b:03:31:98:f4:15:86:01:af:09:09: f6:a9:28:f4:ed:97:93:9b:5d:ee:b5:79:22:36:06: 85:09:89:d9:54:30:21:1f:84:6c:37:1e:f7:8f:b1: 92:7b:a2:02:b9:60:cb:d7:dd:53:c0:fc:29:ea:53: 9c:d5:5e:38:e0:a5:95:f9:9d:ab:a8:4b:8c:6e:b9: 43:94:dd:2a:20:ba:43:3c:f6:1f:c7:35:bf:bd:56: f7:cd:17:cb:55:8d:31:c1:74:d3:91:fb:67:3b:d1: ba:f5:4c:5e:e2:88:0d:62:4d:8f:f0:9a:a7:1a:7f: a2:9f:7c:ec:ba:52:4c:f9:02:0d:d9:f7:05:15:89: 6e:71:bb:a1:2e:3c:c8:1f:a8:63:9e:08:fc:30:73: 68:96:cf:cf:28:75:98:67:3c:f5:1f:99:ad:de:06: 7f:e6:ad:13:f9:38:c7:58:92:42:75:38:c7:1c:48: 43:af:48:ee:cb:59:61:8f:27:40:c7:db:3c:e9:a9: 99:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:DC:81:2A:E4:31:2D:B8:62:CB:B7:5D:B7:19:B9:D6:F3:2F:1F X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:64:19:79:8d:ed:aa:2e:81:ba:02:4d:2b:25:d1:1b:18:b7: 79:fe:14:d8:9c:80:ed:d2:50:2d:73:75:71:b1:7b:d7:91:d7: 2b:8c:28:af:05:d6:84:33:45:ec:d7:a1:d6:ee:fc:72:fb:37: 6b:9f:73:7b:c2:4b:14:4b:39:bd:73:9e:ee:26:88:86:c4:4e: 43:fe:8b:ee:5e:65:d5:f1:19:62:2c:65:e9:da:84:11:5c:22: d5:e2:02:0b:c8:af:8a:33:8c:ac:7c:b9:7d:8c:86:db:8a:c4: af:57:42:e7:9d:f7:f9:66:b8:ea:00:b7:6b:f4:ff:fc:0b:55: f6:4e:19:96:80:22:76:12:30:a8:98:df:0e:5f:d8:49:b8:dd: d7:92:39:3b:19:0c:c5:fa:45:4e:85:21:84:49:ce:e5:27:4a: 54:9e:3a:41:d7:61:ba:a1:3a:38:d3:0f:ed:7c:b1:64:c4:9e: de:e2:c0:d2:90:75:64:e0:59:97:0e:d9:3d:7f:5e:df:98:3d: 55:44:e9:67:c9:a1:d3:5a:a1:dd:b0:00:0e:db:41:0b:97:35: 34:d2:62:94:85:bf:93:fa:ad:00:c4:4b:73:c1:67:d2:ff:3a: 20:f1:ee:7b:e5:01:66:48:7c:f5:52:9c:06:39:a3:4c:3b:38: 47:68:c6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUwODIzMDIwNjE5WhcNMjUwODMwMDIwNjE5WjAYMRYwFAYD VQQDEw02OGE5MjIxYi1hMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkzilqd5r+cUaabWSwJ0j87mLWz5cJ/9KhN7aDbuX7sUNYiSSPfnQ+DLt2/0 DwOXDF4ogxsoay78Sj5zjQjyawMxmPQVhgGvCQn2qSj07ZeTm13utXkiNgaFCYnZ VDAhH4RsNx73j7GSe6ICuWDL191TwPwp6lOc1V444KWV+Z2rqEuMbrlDlN0qILpD PPYfxzW/vVb3zRfLVY0xwXTTkftnO9G69Uxe4ogNYk2P8JqnGn+in3zsulJM+QIN 2fcFFYlucbuhLjzIH6hjngj8MHNols/PKHWYZzz1H5mt3gZ/5q0T+TjHWJJCdTjH HEhDr0juy1lhjydAx9s86amZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzR3IEq 5DEtuGLLt123GbnW8y8fMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmZBl5je2qLoG6Ak0rJdEbGLd5/hTYnIDt0lAtc3VxsXvXkdcrjCiv BdaEM0Xs16HW7vxy+zdrn3N7wksUSzm9c57uJoiGxE5D/ovuXmXV8RliLGXp2oQR XCLV4gILyK+KM4ysfLl9jIbbisSvV0Lnnff5ZrjqALdr9P/8C1X2ThmWgCJ2EjCo mN8OX9hJuN3Xkjk7GQzF+kVOhSGESc7lJ0pUnjpB12G6oTo40w/tfLFkxJ7e4sDS kHVk4FmXDtk9f17fmD1VROlnyaHTWqHdsAAO20ELlzU00mKUhb+T+q0AxEtzwWfS /zog8e575QFmSHz1UpwGOaNMOzhHaMYh -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:26 2025 by rpki-client