$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: uao/sSUXe/fvirsCxic6kqVPAKEPbymPruRddR4vooM= Subject key identifier: 56:D7:ED:D8:FF:9B:9E:C8:C4:71:AA:96:C8:C9:39:93:CC:19:04:50 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 01C9 Signing time: Sat 23 Aug 2025 03:20:40 +0000 Manifest this update: Sat 23 Aug 2025 03:20:40 +0000 Manifest next update: Sat 30 Aug 2025 03:20:40 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: VGvWW9fuC1FGL3BCUM5sZSQMFz0H8zxDT76A4eMEFaM=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: JGXotXKcvN14RzZ1/FR0xe9rQIXkWn3R4BtHRBxnL08=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: +KpPTrvUJ0fhW59fFGMaGeaxnMDX3lJjTA7XrEuSgaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Aug 23 03:20:40 2025 GMT Not After : Aug 30 03:20:40 2025 GMT Subject: CN=68a93388-c011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:1f:18:90:91:1b:ad:3f:36:ce:fc:54:97: 01:9f:72:6f:0b:b4:c6:06:d4:62:c0:2d:7b:61:16: c6:a2:c6:25:c0:9a:6d:0d:c2:a9:98:05:76:de:8b: 16:d0:ca:9a:e5:35:40:7f:ac:7d:bb:f9:fb:0c:9b: 57:1b:ae:81:68:37:05:70:9a:2b:43:1c:1f:63:3e: 18:79:bc:ea:6a:17:0b:57:64:ba:d4:84:ee:a5:d1: a1:fd:09:10:f3:58:8e:2a:d9:8c:0b:10:13:e8:e2: 3c:e4:13:f4:17:21:ce:aa:69:7a:a6:12:d4:17:a0: 8f:2a:c8:a5:92:f7:4e:17:da:22:cb:b1:86:f2:1d: 81:c5:7d:cc:d5:51:6d:9e:76:54:8b:46:18:8b:b8: 66:30:77:9a:a5:8a:79:b4:d1:15:36:a7:c8:cf:88: 14:b6:d0:64:1c:e7:c4:61:56:ac:87:02:d8:9c:3d: 5d:52:c6:fd:a6:10:9c:03:3d:d9:e9:9f:07:51:02: 4b:33:a0:2a:a0:b7:db:8b:fe:d6:27:7e:db:1f:9f: 1a:91:1f:45:e4:9e:ca:e9:45:bd:0c:aa:a0:85:3b: 0d:37:58:2c:a4:42:70:a1:62:cb:5f:8c:c7:c6:17: d2:79:1e:04:c9:56:52:08:a8:7b:7c:0a:77:f7:ed: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D7:ED:D8:FF:9B:9E:C8:C4:71:AA:96:C8:C9:39:93:CC:19:04:50 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1a:57:2a:74:d1:e5:72:39:13:12:60:9c:92:76:38:35:8f: fc:61:74:3b:c7:02:bf:2e:03:4d:cf:d9:0c:54:32:57:fc:ba: 8f:a6:a9:ae:6a:73:ab:7f:4f:77:c5:e0:16:ca:24:06:3e:51: 7c:85:05:f0:40:2c:ef:12:91:c7:c0:f2:c7:2c:6c:6b:89:dc: b1:f4:39:e2:15:05:5a:02:70:1a:ab:c1:34:e0:9d:1d:f5:5b: c2:cb:98:fc:f4:10:01:a5:9f:e9:c9:06:89:48:49:77:0b:d0: 7c:d7:34:f2:b8:2d:e5:92:38:53:fa:89:74:6f:87:68:66:82: 98:46:ee:82:24:9a:35:67:82:01:ac:3c:66:18:07:78:30:24: 3f:37:4d:59:69:f3:9a:7b:12:f2:6f:12:f9:50:1f:b1:ef:c2: 55:b9:2d:56:5d:95:80:f3:bc:5c:55:f4:6f:18:0a:55:28:bf: c5:e4:47:cf:50:06:b2:42:45:77:a3:72:b6:8f:02:db:1e:5e: 9c:fc:a6:e5:fc:32:90:b2:37:6a:86:db:37:fc:0f:1a:89:2c: aa:f2:27:61:20:c3:2f:78:8b:50:6c:c5:53:a1:d9:12:67:b8: fe:da:b5:34:82:9c:1d:a3:e7:3b:0e:34:d3:fb:a0:6f:6a:fa: 76:6e:40:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwODIzMDMyMDQwWhcNMjUwODMwMDMyMDQwWjAYMRYwFAYD VQQDEw02OGE5MzM4OC1jMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQQfGJCRG60/Ns78VJcBn3JvC7TGBtRiwC17YRbGosYlwJptDcKpmAV23osW 0Mqa5TVAf6x9u/n7DJtXG66BaDcFcJorQxwfYz4YebzqahcLV2S61ITupdGh/QkQ 81iOKtmMCxAT6OI85BP0FyHOqml6phLUF6CPKsilkvdOF9oiy7GG8h2BxX3M1VFt nnZUi0YYi7hmMHeapYp5tNEVNqfIz4gUttBkHOfEYVashwLYnD1dUsb9phCcAz3Z 6Z8HUQJLM6AqoLfbi/7WJ37bH58akR9F5J7K6UW9DKqghTsNN1gspEJwoWLLX4zH xhfSeR4EyVZSCKh7fAp39+1GwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbX7dj/ m57IxHGqlsjJOZPMGQRQMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiGlcqdNHlcjkTEmCcknY4NY/8YXQ7xwK/LgNNz9kMVDJX/LqPpqmu anOrf093xeAWyiQGPlF8hQXwQCzvEpHHwPLHLGxridyx9DniFQVaAnAaq8E04J0d 9VvCy5j89BABpZ/pyQaJSEl3C9B81zTyuC3lkjhT+ol0b4doZoKYRu6CJJo1Z4IB rDxmGAd4MCQ/N01ZafOaexLybxL5UB+x78JVuS1WXZWA87xcVfRvGApVKL/F5EfP UAayQkV3o3K2jwLbHl6c/Kbl/DKQsjdqhts3/A8aiSyq8idhIMMveItQbMVTodkS Z7j+2rU0gpwdo+c7DjTT+6Bvavp2bkBP -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:55 2025 by rpki-client