$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: 8MJp7axucCaehXGF+DNfdGvDqEACL/K9/BO02VtLvtg= Subject key identifier: 82:04:F3:6C:AF:94:68:31:99:4E:2B:4C:9D:32:C0:2F:F3:F0:7D:17 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 035A Signing time: Sat 23 Aug 2025 01:12:43 +0000 Manifest this update: Sat 23 Aug 2025 01:12:43 +0000 Manifest next update: Sat 30 Aug 2025 01:12:43 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: ho+bMRrUAL+Jxo43mc16cxGA4osfv5y86uLLBCSaiZQ=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: YDV59vkDGMUjv69JwCXS0TevAXxNgXIE57WFOFZhJBo=) 3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Aug 23 01:12:43 2025 GMT Not After : Aug 30 01:12:43 2025 GMT Subject: CN=68a9158b-d65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:c3:93:94:36:81:1b:31:6f:c6:43:ab:a7: 1a:61:78:02:27:28:fe:31:29:53:32:5b:91:78:67: 7d:6d:f6:d2:3c:86:01:82:12:89:b6:bb:9a:eb:76: 5c:6b:20:bc:52:e2:b7:81:cb:fa:34:1b:bd:42:07: ef:0f:f6:1d:9b:69:0d:86:0f:25:e0:2c:86:78:b2: ba:a1:c0:f6:a5:ab:bc:9f:ac:1e:de:d6:50:a9:6b: f9:4f:74:1c:fc:62:91:f2:85:1b:99:db:63:d0:96: 90:dd:18:e5:ae:f2:82:cc:5f:a1:09:d8:0b:fd:8a: 44:02:5c:ba:15:49:d7:da:3f:6b:5c:23:e0:67:6e: 24:fe:a1:1e:10:ff:2a:91:26:ad:e3:5d:c7:ce:77: 5e:2f:60:c0:25:81:69:3d:0d:85:de:ff:13:58:59: bf:03:92:25:19:dd:40:43:ce:a5:5e:3a:41:1d:30: 29:b3:4f:40:b5:2c:69:0c:60:48:cf:36:ce:51:67: fd:28:7e:6a:f4:83:67:b7:b3:f3:eb:26:49:41:0f: de:de:25:7c:b0:6f:18:dc:eb:37:4b:de:55:0a:c8: a5:8d:d7:87:54:5d:cc:00:55:1b:4e:1c:2e:29:74: b1:60:69:e8:af:af:ff:47:a6:46:8a:fa:6e:87:28: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:04:F3:6C:AF:94:68:31:99:4E:2B:4C:9D:32:C0:2F:F3:F0:7D:17 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:41:49:74:84:bc:a8:20:ed:d4:c3:85:38:fe:ce:12:2d:2e: 77:a9:15:59:79:aa:84:39:f5:1d:f2:65:91:c9:1b:40:2f:3c: dc:9f:ef:92:39:87:29:72:b8:49:fa:d6:a9:80:54:21:4d:50: ad:a4:ef:97:64:4e:cd:9e:a7:52:6d:27:f5:b6:a0:c9:55:7d: 02:44:5a:a1:31:ce:af:b0:85:40:62:d1:9c:67:5f:de:3d:d9: e7:06:47:99:aa:6e:11:18:8b:46:38:ba:10:b6:37:6f:1d:a2: e3:d7:2e:69:0b:6f:a3:90:35:91:70:d9:3a:e6:9e:a5:ab:53: 7e:3e:0f:de:91:5f:a4:f8:7e:d5:4a:9c:c4:f6:f0:e1:ad:6a: 71:06:03:8b:90:e4:5b:aa:5d:d5:d4:9c:17:6b:77:f7:d6:95: 5f:b9:34:02:f1:b3:7f:ce:c2:8a:40:b8:09:86:65:95:be:98: d1:63:f6:45:32:23:c2:61:42:2f:87:ad:d0:35:b6:04:1c:70: 2e:32:30:f5:e8:e4:66:0d:67:a5:b3:e4:26:f0:20:d9:34:22: e1:50:db:86:71:3d:18:53:ad:71:49:ab:5b:cf:f7:64:c4:c9: 5e:b5:c9:ad:b0:d5:a5:a5:1f:b2:23:71:39:07:92:44:8e:ac: c4:5f:cf:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjUwODIzMDExMjQzWhcNMjUwODMwMDExMjQzWjAYMRYwFAYD VQQDEw02OGE5MTU4Yi1kNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtrDk5Q2gRsxb8ZDq6caYXgCJyj+MSlTMluReGd9bfbSPIYBghKJtrua63Zc ayC8UuK3gcv6NBu9QgfvD/Ydm2kNhg8l4CyGeLK6ocD2pau8n6we3tZQqWv5T3Qc /GKR8oUbmdtj0JaQ3RjlrvKCzF+hCdgL/YpEAly6FUnX2j9rXCPgZ24k/qEeEP8q kSat413HzndeL2DAJYFpPQ2F3v8TWFm/A5IlGd1AQ86lXjpBHTAps09AtSxpDGBI zzbOUWf9KH5q9INnt7Pz6yZJQQ/e3iV8sG8Y3Os3S95VCsiljdeHVF3MAFUbThwu KXSxYGnor6//R6ZGivpuhyh4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIE82yv lGgxmU4rTJ0ywC/z8H0XMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4QUl0hLyoIO3Uw4U4/s4SLS53qRVZeaqEOfUd8mWRyRtALzzcn++S OYcpcrhJ+tapgFQhTVCtpO+XZE7NnqdSbSf1tqDJVX0CRFqhMc6vsIVAYtGcZ1/e PdnnBkeZqm4RGItGOLoQtjdvHaLj1y5pC2+jkDWRcNk65p6lq1N+Pg/ekV+k+H7V SpzE9vDhrWpxBgOLkORbql3V1JwXa3f31pVfuTQC8bN/zsKKQLgJhmWVvpjRY/ZF MiPCYUIvh63QNbYEHHAuMjD16ORmDWels+Qm8CDZNCLhUNuGcT0YU61xSatbz/dk xMletcmtsNWlpR+yI3E5B5JEjqzEX8+5 -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:26 2025 by rpki-client