$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: /ELXmGAnHnifBGr4AWad9YsrL+sdEWLd/WhuO59hoMc= Subject key identifier: 1D:3A:DD:1A:03:16:2B:91:A0:FF:7E:5E:B7:C7:33:98:0F:55:8B:14 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:09:14 +0000 Manifest this update: Thu 03 Jul 2025 06:09:14 +0000 Manifest next update: Thu 10 Jul 2025 06:09:14 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: VrMAMcLzVBQQ09UM36ygR/A9PLrfF3ZTi9ydYBaQ6ck=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Jul 3 06:09:14 2025 GMT Not After : Jul 10 06:09:14 2025 GMT Subject: CN=68661e8a-bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:f5:68:5e:42:7a:dd:e9:6c:7b:0e:4e:07: 43:ea:0e:c6:8d:e6:aa:2e:8f:bd:56:ee:a7:97:5a: cc:11:4c:3a:38:74:1c:ad:93:65:42:c8:35:4f:9f: 0e:4b:ab:bd:87:26:c0:e5:ee:c2:e8:80:6f:5a:60: 77:23:03:4d:2f:1f:b1:8c:85:77:7b:76:e2:7c:12: 99:4c:65:0a:3c:b8:8a:6d:f6:78:4e:c4:6a:cf:e8: 38:e7:bc:a3:7c:75:ae:0d:af:d2:32:3a:f4:70:07: 18:cb:0a:f2:26:e2:45:2a:6d:4a:85:41:b7:46:69: 7a:26:74:65:a5:23:cf:cd:4b:11:c1:1d:76:48:00: 7f:54:c2:ec:53:08:83:55:6b:86:4b:fa:af:9a:7e: 04:d9:e0:f9:69:64:2f:9c:87:8a:0f:15:8a:a8:28: c6:6d:55:53:16:80:24:4e:8a:b6:4c:f5:3b:ba:f6: fe:08:a6:82:54:77:5b:e0:fd:b3:9e:a4:c8:44:ac: 84:bc:94:cf:c2:75:15:43:7d:5e:17:8e:8f:7d:bd: cf:2e:0c:b3:11:7e:34:5e:84:a6:0c:39:8a:c5:cb: 5f:86:61:9e:0c:de:5f:c4:69:e7:48:12:61:34:08: 5a:2f:99:00:d2:c5:0b:18:11:77:6f:a4:bb:c1:46: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:DD:1A:03:16:2B:91:A0:FF:7E:5E:B7:C7:33:98:0F:55:8B:14 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ce:24:ad:b3:79:e5:2a:a0:46:ef:ed:fe:a5:85:9f:d3:cd: 60:04:9c:17:cc:ec:1c:20:1c:76:cd:15:1e:e2:4a:5a:1e:5e: e7:e2:92:81:96:77:84:81:bc:47:21:94:b5:70:1b:6b:50:59: e1:d1:13:53:6f:de:cb:61:cc:5b:f8:68:4f:3b:72:ad:33:ad: 48:dc:73:72:5b:bc:5f:ff:7f:c3:4c:22:b9:7e:18:8a:4a:4c: b3:21:92:21:3d:5a:0b:78:2e:99:38:d1:d4:55:0f:7f:2b:ac: d4:b7:b3:c7:5f:84:15:01:0d:72:6c:1a:72:d2:45:38:6e:de: 22:28:18:f5:17:52:e2:22:d9:4e:37:69:34:02:7e:33:b4:52: 10:6b:c2:06:e0:97:a3:9e:21:5b:4c:18:0d:a1:3f:ff:86:d9: 2c:85:0d:0f:5a:3b:0d:dc:d7:03:d5:11:46:6b:ed:66:ef:95: 00:7a:e6:3b:cc:ee:c7:ff:6b:22:dc:09:6d:fe:e4:a5:aa:fb: f3:c7:9b:39:62:2a:12:71:00:23:ee:f8:3e:db:70:09:e3:84: c0:2b:2a:35:5f:f3:fd:f8:ea:61:a1:c2:10:95:69:d5:01:a3: ac:36:68:00:cb:82:a9:b0:8f:78:23:76:33:57:a4:a7:d0:52: 4b:2a:c7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNzAzMDYwOTE0WhcNMjUwNzEwMDYwOTE0WjAYMRYwFAYD VQQDEw02ODY2MWU4YS1iYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9P1aF5Cet3pbHsOTgdD6g7GjeaqLo+9Vu6nl1rMEUw6OHQcrZNlQsg1T58O S6u9hybA5e7C6IBvWmB3IwNNLx+xjIV3e3bifBKZTGUKPLiKbfZ4TsRqz+g457yj fHWuDa/SMjr0cAcYywryJuJFKm1KhUG3Rml6JnRlpSPPzUsRwR12SAB/VMLsUwiD VWuGS/qvmn4E2eD5aWQvnIeKDxWKqCjGbVVTFoAkToq2TPU7uvb+CKaCVHdb4P2z nqTIRKyEvJTPwnUVQ31eF46Pfb3PLgyzEX40XoSmDDmKxctfhmGeDN5fxGnnSBJh NAhaL5kA0sULGBF3b6S7wUZojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB063RoD FiuRoP9+XrfHM5gPVYsUMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZziSts3nlKqBG7+3+pYWf081gBJwXzOwcIBx2zRUe4kpaHl7n4pKB lneEgbxHIZS1cBtrUFnh0RNTb97LYcxb+GhPO3KtM61I3HNyW7xf/3/DTCK5fhiK SkyzIZIhPVoLeC6ZONHUVQ9/K6zUt7PHX4QVAQ1ybBpy0kU4bt4iKBj1F1LiItlO N2k0An4ztFIQa8IG4JejniFbTBgNoT//htkshQ0PWjsN3NcD1RFGa+1m75UAeuY7 zO7H/2si3Alt/uSlqvvzx5s5YioScQAj7vg+23AJ44TAKyo1X/P9+OphocIQlWnV AaOsNmgAy4KpsI94I3YzV6Sn0FJLKse5 -----END CERTIFICATE-----Generated at Thu Jul 3 23:28:55 2025 by rpki-client