$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: ffsd9jZ1QvcZCExF7i1O1DBKmybVLjc4yi44DfjQVjE= Subject key identifier: E4:D8:1F:6E:62:FE:1A:A5:83:22:4D:BD:CD:E3:CA:27:F5:4D:F5:52 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0D1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0D05 Signing time: Fri 22 Aug 2025 18:11:44 +0000 Manifest this update: Fri 22 Aug 2025 18:11:44 +0000 Manifest next update: Fri 29 Aug 2025 18:11:44 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: yyVjyI3ENa38ftbCJSL4xvERTNquwHG+3FHkilYOhns=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: LD0ithX2780J0eLYJ+pZjxCf/VO5UT20hM3rBP9oW8s=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: PkBHUrnClJtIRj3hyvhFOR74ygd0IwmSJ02fNGArhbM=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: ORDwcUk6C17rG0Rjjv65wOFUqorGmDWrJEH1nGvJDz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3355 (0xd1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Aug 22 18:11:44 2025 GMT Not After : Aug 29 18:11:44 2025 GMT Subject: CN=68a8b2e0-303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b5:c6:3c:0e:7a:e1:c9:e4:a2:f0:5b:96:4a: d1:5d:dd:61:75:a5:14:f7:7b:1a:d6:be:ec:44:ae: 62:af:8a:0d:e3:87:24:6b:ef:aa:7d:27:28:ca:4c: b2:e3:b9:fd:7e:2a:0a:b6:69:d5:8f:28:bd:99:e5: fe:b5:f4:1b:9e:b4:c1:22:e4:6b:ba:be:df:62:c5: 5f:f2:04:ef:a3:92:5c:0a:9e:0c:e1:a9:16:18:d7: c3:fc:86:75:a1:b8:cc:53:aa:86:4c:0c:c9:ac:b8: 27:2e:44:4b:69:2a:86:dd:67:64:94:f7:d6:bb:d6: 2f:44:39:cc:a3:fa:61:5f:96:b4:7d:1e:7d:37:15: 65:8c:af:c4:86:32:ac:98:4a:65:a1:c5:8b:59:3c: cd:3c:2c:b1:06:91:c0:ac:31:50:6a:e1:4d:de:3f: 65:eb:34:59:94:99:69:d0:11:92:13:89:b1:d7:f1: 97:5f:53:c8:cd:d4:e5:38:be:fd:8c:bb:84:04:a8: d4:96:a2:ca:60:9f:2d:c8:ac:f6:0b:96:ca:27:1e: 53:25:bf:8a:83:46:37:d1:68:13:05:0b:7b:9c:38: cd:e8:4a:92:ef:8d:c3:5e:17:eb:39:0a:59:ce:82: de:da:28:52:f7:9f:d2:43:a6:dc:6e:67:a5:e1:23: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D8:1F:6E:62:FE:1A:A5:83:22:4D:BD:CD:E3:CA:27:F5:4D:F5:52 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f6:de:93:19:5f:55:82:11:69:22:70:b6:fd:a2:11:e5:98: 6f:6b:5d:4a:51:fe:3f:85:8e:9e:08:d7:10:43:ae:7d:7d:27: aa:d2:c2:89:a5:e4:06:6e:e7:e1:bc:2d:51:80:06:21:a2:29: c4:91:56:29:bc:55:04:c4:7f:6f:b4:af:db:7a:d0:8b:d2:2b: 8e:dc:1b:81:54:11:76:10:da:60:6f:f6:ed:a1:3c:fb:57:b1: c5:de:8f:0e:1c:e1:fa:21:bd:a1:05:d9:d4:10:1d:f1:db:25: 9a:5a:53:49:b7:ad:6f:5e:77:b1:cd:1b:7a:d1:c6:52:76:6e: 59:33:00:1d:59:c3:fa:76:55:39:3f:99:c1:74:6a:78:6d:6e: 01:72:5b:42:ca:be:2a:fd:01:1c:1e:a9:a9:b5:0f:47:ff:1d: 7a:25:ff:bf:45:38:7f:ef:99:f9:5a:d0:7b:7f:6e:fa:21:40: 4f:77:e4:72:f8:b5:aa:ea:c9:ae:2e:83:a0:28:2b:af:30:ad: cc:17:29:70:ae:c3:c5:29:08:c7:9a:ce:6a:6c:59:5b:aa:ff: 59:8c:bc:ba:58:71:fb:16:b3:8a:34:65:cb:83:f7:2e:78:3b: 05:46:2c:67:eb:90:36:e0:65:41:b9:c0:21:98:21:c1:26:b0: 75:e8:86:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwODIyMTgxMTQ0WhcNMjUwODI5MTgxMTQ0WjAYMRYwFAYD VQQDEw02OGE4YjJlMC0zMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bXGPA564cnkovBblkrRXd1hdaUU93sa1r7sRK5ir4oN44cka++qfScoykyy 47n9fioKtmnVjyi9meX+tfQbnrTBIuRrur7fYsVf8gTvo5JcCp4M4akWGNfD/IZ1 objMU6qGTAzJrLgnLkRLaSqG3WdklPfWu9YvRDnMo/phX5a0fR59NxVljK/EhjKs mEplocWLWTzNPCyxBpHArDFQauFN3j9l6zRZlJlp0BGSE4mx1/GXX1PIzdTlOL79 jLuEBKjUlqLKYJ8tyKz2C5bKJx5TJb+Kg0Y30WgTBQt7nDjN6EqS743DXhfrOQpZ zoLe2ihS95/SQ6bcbmel4SNK5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTYH25i /hqlgyJNvc3jyif1TfVSMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh9t6TGV9VghFpInC2/aIR5Zhva11KUf4/hY6eCNcQQ659fSeq0sKJ peQGbufhvC1RgAYhoinEkVYpvFUExH9vtK/betCL0iuO3BuBVBF2ENpgb/btoTz7 V7HF3o8OHOH6Ib2hBdnUEB3x2yWaWlNJt61vXnexzRt60cZSdm5ZMwAdWcP6dlU5 P5nBdGp4bW4BcltCyr4q/QEcHqmptQ9H/x16Jf+/RTh/75n5WtB7f276IUBPd+Ry +LWq6smuLoOgKCuvMK3MFylwrsPFKQjHms5qbFlbqv9ZjLy6WHH7FrOKNGXLg/cu eDsFRixn65A24GVBucAhmCHBJrB16Ibi -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:36 2025 by rpki-client