$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: eDyelbcJpSKlkYmkI2uKNPXg/8ic2Xul9SaWEaCVZws= Subject key identifier: B9:D3:07:60:2F:5C:59:92:8A:46:C7:4F:38:24:E2:41:3B:7E:3F:FF Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01C6 Signing time: Sat 23 Aug 2025 03:03:22 +0000 Manifest this update: Sat 23 Aug 2025 03:03:22 +0000 Manifest next update: Sat 30 Aug 2025 03:03:22 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: mI9+snrJT+2SP3ResOJDs8FO85+Qd2ix2McyvqR8XSI=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Aug 23 03:03:22 2025 GMT Not After : Aug 30 03:03:22 2025 GMT Subject: CN=68a92f7a-cd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:67:98:6e:e1:45:de:b3:89:62:4d:b3:11: bc:81:69:e0:85:ea:46:60:c3:7a:90:2f:c2:0b:53: 98:59:cc:0c:26:82:5a:72:bd:e1:c0:11:24:07:50: 1c:60:c5:d2:aa:2b:5a:4a:04:60:60:51:2e:fc:45: 49:56:93:a5:5c:82:15:95:65:0e:fd:9f:6f:bd:79: 0e:8b:13:3a:09:b6:7f:44:53:2d:aa:79:d5:3e:8c: 1f:b4:af:be:df:2f:b5:60:10:b0:55:dd:21:a0:3a: 11:09:ff:36:19:e0:c4:78:b0:2a:ed:75:27:06:f1: da:43:d4:d1:46:aa:12:7c:36:12:38:b8:10:5f:4f: 0f:42:f6:1a:a1:9d:cf:7e:cd:56:fe:a6:5b:44:1a: 0d:83:cc:0f:8a:ae:d1:61:a4:ab:2b:53:60:1c:3a: 91:23:a3:21:22:40:9c:1d:cc:6a:77:ce:a3:08:83: f5:5e:4f:0a:bb:cc:07:a4:37:61:6d:9d:75:7c:e5: 4c:59:b0:57:5b:4f:1e:21:2c:f9:0b:3e:92:2f:ba: df:8c:93:a7:5d:a5:60:9b:a5:1e:ca:56:99:18:56: 6e:d1:2d:38:0e:2c:e0:66:87:5d:6b:52:51:06:da: 46:45:6e:16:43:9c:7e:3e:08:38:6b:a8:d4:90:5c: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:07:60:2F:5C:59:92:8A:46:C7:4F:38:24:E2:41:3B:7E:3F:FF X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d5:70:de:79:a9:04:1d:ef:32:80:9c:d7:2e:b3:88:08:2d: 01:c3:18:c3:d5:9f:0d:34:bf:8c:27:69:44:d5:ad:20:db:63: 45:80:54:f7:fa:90:1e:b2:8d:ad:0a:dc:9c:eb:51:cb:5b:51: 37:1a:7e:a0:a9:fc:e7:27:1f:4f:95:37:a3:c9:2a:d0:b1:39: 57:ca:6b:a8:29:5f:20:49:1c:8a:5f:f1:1d:5f:60:b8:f1:ff: 59:0c:f3:57:a6:b9:6b:4c:7e:de:11:97:bc:01:0e:12:c0:a7: 5d:0c:aa:dd:fe:58:1a:b5:08:d3:90:19:26:a9:ea:90:b1:0d: 69:a4:27:65:7b:2b:8f:ed:3f:31:43:5c:c4:7d:99:94:6b:06: e0:85:48:17:28:0b:11:56:33:d3:07:56:e3:df:5f:f3:25:1d: 09:50:08:ce:04:5a:b3:9f:44:d7:77:82:f1:21:4e:d9:8e:06: 81:43:95:1a:df:32:fa:e4:84:4a:f4:9c:bf:bd:ab:a4:09:44: 28:a2:f7:95:c2:6b:e8:a7:26:6a:45:f0:db:94:ea:44:7a:9c: ac:07:e8:18:71:2a:b6:0d:15:28:bf:2e:85:94:32:63:88:65: dd:90:da:0e:22:d9:13:ae:e2:af:6d:57:33:b6:17:15:2b:89: ed:75:3e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUwODIzMDMwMzIyWhcNMjUwODMwMDMwMzIyWjAYMRYwFAYD VQQDEw02OGE5MmY3YS1jZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKVnmG7hRd6ziWJNsxG8gWnghepGYMN6kC/CC1OYWcwMJoJacr3hwBEkB1Ac YMXSqitaSgRgYFEu/EVJVpOlXIIVlWUO/Z9vvXkOixM6CbZ/RFMtqnnVPowftK++ 3y+1YBCwVd0hoDoRCf82GeDEeLAq7XUnBvHaQ9TRRqoSfDYSOLgQX08PQvYaoZ3P fs1W/qZbRBoNg8wPiq7RYaSrK1NgHDqRI6MhIkCcHcxqd86jCIP1Xk8Ku8wHpDdh bZ11fOVMWbBXW08eISz5Cz6SL7rfjJOnXaVgm6UeylaZGFZu0S04DizgZodda1JR BtpGRW4WQ5x+Pgg4a6jUkFwyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnTB2Av XFmSikbHTzgk4kE7fj//MB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe1XDeeakEHe8ygJzXLrOICC0BwxjD1Z8NNL+MJ2lE1a0g22NFgFT3 +pAeso2tCtyc61HLW1E3Gn6gqfznJx9PlTejySrQsTlXymuoKV8gSRyKX/EdX2C4 8f9ZDPNXprlrTH7eEZe8AQ4SwKddDKrd/lgatQjTkBkmqeqQsQ1ppCdleyuP7T8x Q1zEfZmUawbghUgXKAsRVjPTB1bj31/zJR0JUAjOBFqzn0TXd4LxIU7ZjgaBQ5Ua 3zL65IRK9Jy/vaukCUQooveVwmvopyZqRfDblOpEepysB+gYcSq2DRUovy6FlDJj iGXdkNoOItkTruKvbVczthcVK4ntdT4o -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:51 2025 by rpki-client