$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: EAu04hGrARY2jL/OdKkHG4bJq5onzfLqcwyR+nTkgVo= Subject key identifier: 8D:C7:90:34:C6:74:D1:E8:6D:C9:82:9D:EE:D5:AD:5C:46:E4:4E:14 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2CC9 Signing time: Fri 22 Aug 2025 16:31:43 +0000 Manifest this update: Fri 22 Aug 2025 16:31:43 +0000 Manifest next update: Fri 29 Aug 2025 16:31:43 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: qs8lA54JOapRRpcKpHdyqu4NRpphU0y1g7A/3mw+Ing=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: K0pMn3ybPgYAvgYIHKptYZvODgeJgnqA7J5JHWlu6c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Aug 22 16:31:43 2025 GMT Not After : Aug 29 16:31:43 2025 GMT Subject: CN=68a89b6f-cfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:4f:0a:57:26:67:8c:0f:35:b3:80:ad:99: 85:2c:80:cd:9e:57:08:d7:c9:98:73:d7:9e:f1:ea: 8f:68:e1:0b:09:f1:76:dc:8b:29:fc:3c:0f:ef:43: 67:09:2d:96:6d:26:83:47:85:ac:8f:4f:68:1b:87: 95:92:20:fd:fd:f0:4e:79:72:73:3a:2c:66:ba:25: 39:96:cd:52:2b:34:85:df:86:37:ba:1a:ad:63:b1: 32:16:3f:b0:3f:cd:6f:f4:7b:97:5f:06:33:6a:58: 88:52:38:e3:81:68:63:25:86:56:af:75:8e:aa:a3: 6a:c1:a7:0b:2a:fa:b9:cf:3e:7f:6d:dd:64:32:3e: 83:5a:20:16:54:d6:9b:d0:07:9a:67:13:a1:08:08: 4f:78:17:d9:c8:e7:c8:30:0b:f8:dd:44:3d:4f:18: c5:01:63:f0:bb:34:9c:37:ea:09:6d:c0:33:7a:14: 79:75:b8:0a:e0:42:4d:1a:97:71:1a:5e:14:ea:5a: 3a:0a:1d:11:2f:39:db:be:05:23:01:bf:c5:99:13: d0:93:8d:92:dc:96:08:42:1e:41:dd:13:e4:4a:62: a4:ca:50:e2:dd:e9:e4:f3:be:3d:22:31:5f:e7:8f: 94:41:6c:50:63:92:f6:cf:ea:72:b6:70:ac:dc:e1: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:90:34:C6:74:D1:E8:6D:C9:82:9D:EE:D5:AD:5C:46:E4:4E:14 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:22:f7:40:43:16:5e:21:07:d5:b3:98:ef:33:13:1b:57:e7: ba:9f:36:4f:70:2e:91:23:fe:e7:d5:6b:9c:86:97:9a:69:17: d0:57:72:d4:d7:8d:58:89:ff:8c:22:cb:16:2a:c5:ee:35:0c: 12:ef:f9:e2:fc:66:c4:3c:d2:ca:98:b5:d1:d4:42:15:1f:4a: 91:f1:f2:68:0d:19:0b:f1:6b:7b:68:3a:57:14:f8:76:cb:c5: 4d:b0:8d:aa:f3:b9:7d:ec:48:5c:1e:35:86:98:98:ae:4e:ee: ee:0a:4a:7f:77:28:8d:09:92:58:d5:2e:0b:27:bc:86:91:57: 37:36:00:11:d5:a8:a1:4a:61:4a:4e:4d:9d:33:3a:bf:70:fa: 84:93:e9:ff:70:9c:35:e7:5f:83:15:f3:f1:24:1d:39:86:74: 28:bd:6d:13:6a:a1:9c:e0:cf:50:ab:69:d1:90:b3:be:a6:a6: 5b:bc:9c:28:10:0b:9d:e8:dd:0a:9a:13:d0:24:9b:a6:36:c3: 46:0f:a5:92:2d:45:5e:2b:32:41:8e:5f:09:0d:e6:c9:4b:53: 0b:c6:0a:c7:ce:5e:ce:56:af:ef:57:37:45:2a:68:33:c9:97: 01:67:27:fc:0f:eb:ee:6a:8a:8f:2a:37:cb:8e:4d:e6:ad:3a: 79:a3:f8:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUwODIyMTYzMTQzWhcNMjUwODI5MTYzMTQzWjAYMRYwFAYD VQQDEw02OGE4OWI2Zi1jZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cxPClcmZ4wPNbOArZmFLIDNnlcI18mYc9ee8eqPaOELCfF23Isp/DwP70Nn CS2WbSaDR4Wsj09oG4eVkiD9/fBOeXJzOixmuiU5ls1SKzSF34Y3uhqtY7EyFj+w P81v9HuXXwYzaliIUjjjgWhjJYZWr3WOqqNqwacLKvq5zz5/bd1kMj6DWiAWVNab 0AeaZxOhCAhPeBfZyOfIMAv43UQ9TxjFAWPwuzScN+oJbcAzehR5dbgK4EJNGpdx Gl4U6lo6Ch0RLznbvgUjAb/FmRPQk42S3JYIQh5B3RPkSmKkylDi3enk8749IjFf 54+UQWxQY5L2z+pytnCs3OFG+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3HkDTG dNHobcmCne7VrVxG5E4UMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNIvdAQxZeIQfVs5jvMxMbV+e6nzZPcC6RI/7n1WuchpeaaRfQV3LU 141Yif+MIssWKsXuNQwS7/ni/GbEPNLKmLXR1EIVH0qR8fJoDRkL8Wt7aDpXFPh2 y8VNsI2q87l97EhcHjWGmJiuTu7uCkp/dyiNCZJY1S4LJ7yGkVc3NgAR1aihSmFK Tk2dMzq/cPqEk+n/cJw151+DFfPxJB05hnQovW0TaqGc4M9Qq2nRkLO+pqZbvJwo EAud6N0KmhPQJJumNsNGD6WSLUVeKzJBjl8JDebJS1MLxgrHzl7OVq/vVzdFKmgz yZcBZyf8D+vuaoqPKjfLjk3mrTp5o/ir -----END CERTIFICATE-----Generated at Sun Aug 24 09:00:26 2025 by rpki-client