$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: whLQjgOEJiqpxvYJDQhHTA6JuhRWWneZbbAfAIeQ5Hw= Subject key identifier: D9:2C:E3:10:8F:5C:44:FD:4A:BE:4A:43:9E:38:7B:70:59:81:D1:45 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 024E Signing time: Sat 23 Aug 2025 02:03:03 +0000 Manifest this update: Sat 23 Aug 2025 02:03:03 +0000 Manifest next update: Sat 30 Aug 2025 02:03:03 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: oNAzefkuIoySac4syn+loIHVfsN6Htcr7JTq6Lcuj/w=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Aug 23 02:03:03 2025 GMT Not After : Aug 30 02:03:03 2025 GMT Subject: CN=68a92157-ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:ee:02:d0:a9:0d:5e:88:aa:ec:ce:4f:da: eb:c3:bb:b9:fc:6d:4e:2a:12:f5:40:c2:01:c5:c2: 78:e3:d3:e1:b1:38:57:52:64:7c:8b:99:93:00:a9: 8a:15:00:b2:78:d3:83:ac:71:32:2e:f6:6f:7d:1e: 42:48:1d:d4:05:ae:5d:95:c5:8a:a2:ee:cf:cd:63: 2c:a7:d7:5a:cb:0e:c2:87:32:45:e4:09:ba:a8:b3: d9:33:bd:a6:37:57:1f:31:d0:f1:ae:b2:86:26:3a: 10:6d:ce:fc:47:c8:ec:f5:a3:f5:e7:2c:20:f1:35: 37:de:32:86:cd:86:5a:6b:85:45:50:1f:e0:16:a2: 57:31:42:3c:f9:eb:2a:21:22:64:16:4f:8e:f8:63: 55:b8:9e:7f:15:98:0a:13:b8:c2:96:92:e9:b1:5e: e8:cf:61:a3:13:3f:5c:f7:05:c2:48:3e:63:c0:c6: 8d:fd:55:08:dd:65:91:be:ad:76:dc:08:8d:ab:17: 8c:cc:9d:fd:1b:c6:3d:c8:26:ba:e1:69:2c:9c:7d: 9c:25:76:5a:e6:67:90:c0:8a:0a:8e:55:cd:c4:2e: 7e:eb:aa:7b:3a:3d:f4:33:6f:e6:80:9e:e4:5c:58: 66:4b:de:8d:0b:9f:ea:b6:2b:31:c1:d5:a0:80:d6: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:E3:10:8F:5C:44:FD:4A:BE:4A:43:9E:38:7B:70:59:81:D1:45 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:76:68:77:12:fd:e1:16:92:70:06:0e:b4:3f:02:50:b5:62: 0c:32:92:b0:e5:94:eb:c9:ee:0a:b7:58:36:ff:f9:d2:da:79: 30:44:29:f9:5a:5b:96:58:9b:f3:36:5b:d3:52:8f:c8:39:bc: 6a:55:63:1f:dc:9d:a5:67:8e:49:4c:58:ad:eb:b5:13:fb:7b: b7:cc:df:57:34:10:c9:dc:71:41:19:1c:45:85:6e:19:09:5e: ea:34:05:6a:c4:e0:6a:1e:72:38:a2:4c:96:a7:d0:a7:18:02: 37:05:50:99:dd:d4:4e:84:ba:f3:4d:8f:a8:c1:c3:88:64:3e: d7:c5:74:b6:fb:20:ab:a7:07:4a:cf:30:1d:52:c7:90:e5:cf: 04:4b:60:ed:25:5c:db:73:20:a4:4c:c8:08:24:28:93:96:c6: 64:25:62:6b:ac:b7:a8:da:b1:e6:4f:c7:91:23:87:04:3a:d5: e6:00:52:3e:8b:70:17:d2:6c:e9:2a:b3:68:5a:12:9b:b6:87: b0:cb:11:af:ad:ac:a4:7d:fe:27:9c:27:66:51:bf:14:7a:56: 94:7c:c8:28:62:a9:16:69:00:88:91:1f:53:eb:ef:48:ff:ca: 5f:33:4d:4e:ea:fa:7b:d8:8d:9e:f4:d2:b3:70:8f:e8:20:ad: fd:6e:f6:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwODIzMDIwMzAzWhcNMjUwODMwMDIwMzAzWjAYMRYwFAYD VQQDEw02OGE5MjE1Ny1mZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHPuAtCpDV6IquzOT9rrw7u5/G1OKhL1QMIBxcJ449PhsThXUmR8i5mTAKmK FQCyeNODrHEyLvZvfR5CSB3UBa5dlcWKou7PzWMsp9dayw7ChzJF5Am6qLPZM72m N1cfMdDxrrKGJjoQbc78R8js9aP15ywg8TU33jKGzYZaa4VFUB/gFqJXMUI8+esq ISJkFk+O+GNVuJ5/FZgKE7jClpLpsV7oz2GjEz9c9wXCSD5jwMaN/VUI3WWRvq12 3AiNqxeMzJ39G8Y9yCa64WksnH2cJXZa5meQwIoKjlXNxC5+66p7Oj30M2/mgJ7k XFhmS96NC5/qtisxwdWggNYo3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNks4xCP XET9Sr5KQ544e3BZgdFFMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEdmh3Ev3hFpJwBg60PwJQtWIMMpKw5ZTrye4Kt1g2//nS2nkwRCn5 WluWWJvzNlvTUo/IObxqVWMf3J2lZ45JTFit67UT+3u3zN9XNBDJ3HFBGRxFhW4Z CV7qNAVqxOBqHnI4okyWp9CnGAI3BVCZ3dROhLrzTY+owcOIZD7XxXS2+yCrpwdK zzAdUseQ5c8ES2DtJVzbcyCkTMgIJCiTlsZkJWJrrLeo2rHmT8eRI4cEOtXmAFI+ i3AX0mzpKrNoWhKbtoewyxGvraykff4nnCdmUb8UelaUfMgoYqkWaQCIkR9T6+9I /8pfM01O6vp72I2e9NKzcI/oIK39bvax -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:43 2025 by rpki-client