$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: kIh2czM496JXetWRblZM6rzcATv5/n28Of4BwDarlIA= Subject key identifier: D3:E1:B8:9A:B1:81:14:1F:E9:4D:D4:D2:26:32:E6:02:20:08:B9:06 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 4B Signing time: Sat 23 Aug 2025 07:36:19 +0000 Manifest this update: Sat 23 Aug 2025 07:36:19 +0000 Manifest next update: Sat 30 Aug 2025 07:36:19 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: xvhxXWZXEoP0ZyogNxwjY7X30cGBGKFDmqE5nMXw7lk=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: LJYk/G3tN+KuXhxLY4vLUCBZc2tSEaFJTdOb4sX/qHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Aug 23 07:36:19 2025 GMT Not After : Aug 30 07:36:19 2025 GMT Subject: CN=68a96f73-6551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:54:ab:eb:33:01:0c:0c:86:55:3b:81:3d: 1c:fb:ce:e3:04:f5:36:07:f7:f6:ca:88:c2:db:89: ba:5c:51:f4:99:b1:68:b4:63:06:86:28:13:12:c9: b9:97:9b:f4:b1:0a:99:6d:aa:b6:ff:7a:e7:09:49: 44:01:7c:e8:d4:69:d3:72:da:06:c8:20:ed:98:d3: 98:fa:59:60:ac:fc:83:02:5f:c4:e4:ef:ad:31:e5: f5:01:bf:ca:f2:4f:00:eb:2f:25:6a:5e:d2:89:00: 0c:3d:70:61:ba:20:f8:13:5e:29:19:85:06:96:87: f4:6c:46:a1:86:28:d2:de:60:c6:69:6f:be:a6:23: 09:d0:eb:93:9f:49:f4:2e:e1:96:9b:e5:7e:17:af: 8c:1d:6b:a9:d2:b2:d9:d6:35:af:3d:14:dd:03:4c: 95:88:a1:f2:86:2a:9e:03:be:bf:53:3c:b7:5f:09: 0b:b7:a5:5b:0c:74:1a:91:69:e4:1d:77:47:d0:ea: 63:0c:6d:14:65:84:99:7e:22:f3:02:11:b1:f9:e6: 5d:78:af:12:66:fc:25:16:79:0c:03:82:7f:0a:1f: a8:f6:f1:64:86:65:7a:a8:67:22:8d:44:c2:92:c2: 7f:a9:02:f0:b2:58:d5:ac:20:c7:f4:11:4b:b9:dc: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:B8:9A:B1:81:14:1F:E9:4D:D4:D2:26:32:E6:02:20:08:B9:06 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:92:19:2d:6a:e1:b7:7f:58:96:1c:a1:3f:d8:45:1d:e3:bc: a4:64:ad:83:30:a1:c4:da:be:f6:e5:d0:2e:2c:ba:ef:51:59: f9:00:ac:e9:b0:5e:ad:b4:15:d5:5c:ff:bd:89:66:79:00:74: 49:13:a1:ba:27:fd:e9:ee:23:6a:12:ef:2b:cf:57:5a:02:f0: 0a:c7:4f:e9:dc:e4:b4:19:b6:76:b6:64:f5:67:5e:1a:c4:47: bb:80:d3:55:dc:5c:f3:da:46:8b:da:f8:66:fb:c8:e9:9d:d6: ff:88:b9:5b:c8:3f:c9:28:4d:8d:25:98:f9:5c:33:36:29:e3: da:51:e3:e2:71:37:23:9e:35:52:ae:f2:0a:cd:15:c5:43:34: fb:53:23:0a:31:14:72:d8:46:65:c8:9d:1c:62:2d:dd:87:65: 4d:39:38:4c:fc:37:c1:b6:f9:58:98:51:b9:73:eb:b2:f2:27: 9f:ed:5a:2c:9c:43:c8:cd:c7:1e:ca:a4:df:f1:04:0b:78:ab: 00:98:d3:a6:eb:23:4c:4c:9a:a9:42:95:06:9a:f8:0b:b3:aa: 1d:e8:d1:6e:17:77:c2:70:ad:8f:b0:24:89:56:c5:0f:4e:b6: 03:db:b8:1e:2d:4e:6c:22:b9:19:96:a1:3e:c4:47:55:c5:3b: 6b:7b:b5:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTA4MjMwNzM2MTlaFw0yNTA4MzAwNzM2MTlaMBgxFjAUBgNV BAMTDTY4YTk2ZjczLTY1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu/1Sr6zMBDAyGVTuBPRz7zuME9TYH9/bKiMLbibpcUfSZsWi0YwaGKBMSybmX m/SxCpltqrb/eucJSUQBfOjUadNy2gbIIO2Y05j6WWCs/IMCX8Tk760x5fUBv8ry TwDrLyVqXtKJAAw9cGG6IPgTXikZhQaWh/RsRqGGKNLeYMZpb76mIwnQ65OfSfQu 4Zab5X4Xr4wda6nSstnWNa89FN0DTJWIofKGKp4Dvr9TPLdfCQu3pVsMdBqRaeQd d0fQ6mMMbRRlhJl+IvMCEbH55l14rxJm/CUWeQwDgn8KH6j28WSGZXqoZyKNRMKS wn+pAvCyWNWsIMf0EUu53HjhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0+G4mrGB FB/pTdTSJjLmAiAIuQYwHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaSGS1q4bd/WJYcoT/YRR3jvKRkrYMwocTavvbl0C4suu9RWfkArOmw Xq20FdVc/72JZnkAdEkTobon/enuI2oS7yvPV1oC8ArHT+nc5LQZtna2ZPVnXhrE R7uA01XcXPPaRova+Gb7yOmd1v+IuVvIP8koTY0lmPlcMzYp49pR4+JxNyOeNVKu 8grNFcVDNPtTIwoxFHLYRmXInRxiLd2HZU05OEz8N8G2+ViYUblz67LyJ5/tWiyc Q8jNxx7KpN/xBAt4qwCY06brI0xMmqlClQaa+Auzqh3o0W4Xd8JwrY+wJIlWxQ9O tgPbuB4tTmwiuRmWoT7ER1XFO2t7tdo= -----END CERTIFICATE-----Generated at Sun Aug 24 03:32:03 2025 by rpki-client