$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: cz8l22EjUCV1MuVKzLLtAdEj9d912M6glPt5lEo3YR0= Subject key identifier: 36:C5:B7:30:B1:52:79:BC:F5:13:CE:E2:27:DB:B9:12:90:C6:80:98 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02F9 Signing time: Sat 23 Aug 2025 01:29:37 +0000 Manifest this update: Sat 23 Aug 2025 01:29:37 +0000 Manifest next update: Sat 30 Aug 2025 01:29:37 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: YzMCaKGcR4Cg5B750rSMS5v8PazYdNLUIV+YEYb6Xjw=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Aug 23 01:29:37 2025 GMT Not After : Aug 30 01:29:37 2025 GMT Subject: CN=68a91981-725d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:44:c3:76:0e:61:e7:3d:39:8a:3e:a1:aa: 2f:b6:45:46:66:dc:a3:43:d4:8b:13:4e:e5:ff:e8: 4b:ed:2f:b6:96:ca:6f:11:9e:65:01:6d:7a:82:a8: ff:a4:a9:ba:0c:b7:55:78:be:21:47:df:aa:46:9d: 70:97:37:b1:86:09:f0:e9:2f:8b:e7:cc:65:3e:31: 33:8d:26:26:ea:e9:d5:0a:00:ec:17:94:0a:b4:c5: 27:33:44:0b:2e:f6:f1:ee:a8:a0:ee:38:38:56:4f: 10:30:78:2c:e4:ef:69:d4:d4:98:0c:63:50:e7:16: eb:cd:72:aa:34:85:fc:31:45:0a:8c:cd:e3:90:01: f6:b7:a9:ce:12:49:f8:40:59:63:c9:c9:69:1f:5d: f3:4b:60:b6:d1:f0:e3:e9:05:df:39:b6:5b:5f:7c: 5a:49:b6:37:57:fe:da:28:b5:7f:98:16:23:1d:90: 7c:3f:ae:83:3d:ee:9e:3b:c7:df:25:8b:8c:a8:bc: 44:d1:d0:1f:da:4d:66:04:8c:f1:23:1d:c1:3f:18: b3:23:d8:72:d3:b6:c2:d8:72:f0:e6:28:9b:8b:5e: e6:38:9a:19:c8:aa:33:58:7c:fa:12:17:12:7b:ba: 41:2f:f0:49:c7:fe:06:14:13:17:f7:81:0f:45:3e: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:B7:30:B1:52:79:BC:F5:13:CE:E2:27:DB:B9:12:90:C6:80:98 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c3:b1:f7:30:53:e3:a8:ba:15:90:c7:72:b0:44:16:85:5e: d4:98:41:e4:75:70:0c:ac:7a:d3:4e:b0:5a:cb:fd:12:bd:fa: 01:b0:51:66:06:07:92:cb:02:e4:50:5b:4f:23:06:e2:8d:be: c3:2d:08:ff:5b:67:19:c1:3d:de:7e:02:29:fa:b8:30:94:29: f0:f7:0b:34:e6:43:6f:ff:b9:09:ba:c9:f6:cc:d0:44:5f:84: 80:94:26:7c:6b:6d:7b:6a:92:09:2b:75:af:8d:a0:cd:71:0f: 06:2b:5f:f8:a0:38:14:b0:cb:3d:86:af:ed:90:65:0a:76:43: c7:15:16:52:86:4f:3f:42:12:26:3f:5e:3c:08:5b:16:44:70: 53:82:9d:d0:ed:90:81:33:dc:1c:43:3c:2a:9c:1d:da:50:b2: 2d:db:ef:06:79:38:c9:30:88:76:82:65:95:1e:f0:53:18:56: cf:3a:d7:23:b7:8a:90:18:e8:ae:27:f8:ad:17:5a:3e:62:7e: f3:a1:0a:a0:63:1d:08:0a:c5:e6:b6:d9:58:1d:84:1a:ef:1c: 3c:8f:9e:fc:b7:7d:01:2b:f3:f1:c5:c9:46:e0:08:d2:21:06: 32:56:c3:1c:56:e4:00:7a:ad:2f:da:8c:04:4a:4d:b5:6f:b7: d2:14:5e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwODIzMDEyOTM3WhcNMjUwODMwMDEyOTM3WjAYMRYwFAYD VQQDEw02OGE5MTk4MS03MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2atEw3YOYec9OYo+oaovtkVGZtyjQ9SLE07l/+hL7S+2lspvEZ5lAW16gqj/ pKm6DLdVeL4hR9+qRp1wlzexhgnw6S+L58xlPjEzjSYm6unVCgDsF5QKtMUnM0QL Lvbx7qig7jg4Vk8QMHgs5O9p1NSYDGNQ5xbrzXKqNIX8MUUKjM3jkAH2t6nOEkn4 QFljyclpH13zS2C20fDj6QXfObZbX3xaSbY3V/7aKLV/mBYjHZB8P66DPe6eO8ff JYuMqLxE0dAf2k1mBIzxIx3BPxizI9hy07bC2HLw5iibi17mOJoZyKozWHz6EhcS e7pBL/BJx/4GFBMX94EPRT5s2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbFtzCx Unm89RPO4ifbuRKQxoCYMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHw7H3MFPjqLoVkMdysEQWhV7UmEHkdXAMrHrTTrBay/0SvfoBsFFm BgeSywLkUFtPIwbijb7DLQj/W2cZwT3efgIp+rgwlCnw9ws05kNv/7kJusn2zNBE X4SAlCZ8a217apIJK3WvjaDNcQ8GK1/4oDgUsMs9hq/tkGUKdkPHFRZShk8/QhIm P148CFsWRHBTgp3Q7ZCBM9wcQzwqnB3aULIt2+8GeTjJMIh2gmWVHvBTGFbPOtcj t4qQGOiuJ/itF1o+Yn7zoQqgYx0ICsXmttlYHYQa7xw8j578t30BK/PxxclG4AjS IQYyVsMcVuQAeq0v2owESk21b7fSFF4a -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:33 2025 by rpki-client