$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: IYoGYxy5NXUMR7cWW44mpUDyYyqyRUfaEiaBysogbVk= Subject key identifier: B4:BC:85:AD:93:6C:46:DA:67:CD:BF:58:DC:4E:C7:78:23:B1:B2:AD Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: D0 Signing time: Sat 23 Aug 2025 05:49:06 +0000 Manifest this update: Sat 23 Aug 2025 05:49:05 +0000 Manifest next update: Sat 30 Aug 2025 05:49:05 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: alrmXaS7GQucx+ceAHHiWNmDdvHRSQPY4SEVkKLr1i4=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Aug 23 05:49:05 2025 GMT Not After : Aug 30 05:49:05 2025 GMT Subject: CN=68a95652-402e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:5b:a5:b2:3e:db:75:22:e7:3d:03:91:20: 44:03:d9:d8:05:22:68:d1:fd:dc:30:51:66:c2:3f: 94:2a:e6:9a:a7:7c:c3:09:73:d2:39:11:e7:d6:0f: 5a:4b:74:cc:91:3b:e7:c2:f3:c9:29:17:a9:5d:b6: 0b:a9:ba:f0:21:ef:0a:94:13:25:01:7c:ff:a6:a1: c0:cc:cd:4e:80:d2:c7:ce:77:36:0d:72:b2:d1:a7: 56:ff:8b:22:2a:f4:5a:dc:cc:d1:ca:a9:e7:ee:4b: 36:84:1a:d7:58:22:46:7e:09:f5:49:ea:54:31:5d: 56:e9:51:8b:2d:20:83:56:f6:ad:ff:fc:2a:f5:e0: 35:77:08:7f:fb:86:7e:e8:ab:19:5a:ca:ce:4c:4c: 41:56:3e:63:d7:3a:d9:7b:71:e0:16:82:0f:96:e5: c8:21:76:d3:df:cb:e8:8c:87:84:ee:4c:33:c7:00: aa:12:27:63:78:13:d1:ab:31:4d:d2:d1:83:8f:aa: 46:fc:ec:5d:c5:80:a3:b1:e2:63:41:d9:68:70:65: 9f:68:12:73:2b:8c:21:4b:a1:45:ff:b7:3e:a7:a7: 1f:b7:09:b2:99:a7:5c:40:5e:d8:14:f8:49:96:81: 99:b8:3c:16:c4:80:0d:99:8a:51:0b:c6:d3:55:87: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BC:85:AD:93:6C:46:DA:67:CD:BF:58:DC:4E:C7:78:23:B1:B2:AD X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:2a:c4:e3:a4:54:da:82:75:d3:fe:3b:af:4a:e0:e2:56:1b: 0f:33:87:c7:ff:90:c8:f4:b7:21:7f:ba:db:9f:6a:21:59:54: 67:f0:29:a7:55:43:3d:6b:4b:2c:a0:b4:4c:56:71:30:7a:fa: 47:f4:d4:52:6e:fe:65:f3:2c:2b:9e:8a:56:56:b6:82:7c:62: 8b:e1:a0:8b:01:2f:bd:71:fb:bb:11:67:c2:86:6c:32:ff:b1: 79:97:f9:c2:e4:8f:92:e8:17:5c:a3:91:d1:97:59:16:02:ac: 02:2c:30:b6:5e:8d:84:10:10:0c:3f:a5:15:9d:6a:05:77:e0: d5:1e:c9:08:b2:60:d6:72:bf:13:56:db:a7:56:19:66:59:6f: 6f:d4:8a:9e:38:2a:c0:92:73:99:c3:a7:80:a0:e5:e6:39:6c: bd:6a:14:8e:66:78:fd:64:d2:4b:57:90:81:38:1b:f9:0d:5b: 06:fb:d9:f6:9d:bf:7e:bf:5f:ac:0c:f2:54:42:77:a6:d7:3e: 84:b8:6a:1d:72:7b:30:dc:68:da:f7:69:84:29:00:14:3e:97: c2:75:15:f0:73:3c:c0:9a:87:96:35:42:ac:a2:a9:92:66:8b: c5:98:0e:bb:1c:dd:8a:d4:f7:78:d3:39:72:31:c8:8e:89:c5: 6f:82:f4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwODIzMDU0OTA1WhcNMjUwODMwMDU0OTA1WjAYMRYwFAYD VQQDEw02OGE5NTY1Mi00MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6klbpbI+23Ui5z0DkSBEA9nYBSJo0f3cMFFmwj+UKuaap3zDCXPSORHn1g9a S3TMkTvnwvPJKRepXbYLqbrwIe8KlBMlAXz/pqHAzM1OgNLHznc2DXKy0adW/4si KvRa3MzRyqnn7ks2hBrXWCJGfgn1SepUMV1W6VGLLSCDVvat//wq9eA1dwh/+4Z+ 6KsZWsrOTExBVj5j1zrZe3HgFoIPluXIIXbT38vojIeE7kwzxwCqEidjeBPRqzFN 0tGDj6pG/OxdxYCjseJjQdlocGWfaBJzK4whS6FF/7c+p6cftwmymadcQF7YFPhJ loGZuDwWxIANmYpRC8bTVYcCFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLS8ha2T bEbaZ82/WNxOx3gjsbKtMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2KsTjpFTagnXT/juvSuDiVhsPM4fH/5DI9Lchf7rbn2ohWVRn8Cmn VUM9a0ssoLRMVnEwevpH9NRSbv5l8ywrnopWVraCfGKL4aCLAS+9cfu7EWfChmwy /7F5l/nC5I+S6Bdco5HRl1kWAqwCLDC2Xo2EEBAMP6UVnWoFd+DVHskIsmDWcr8T VtunVhlmWW9v1IqeOCrAknOZw6eAoOXmOWy9ahSOZnj9ZNJLV5CBOBv5DVsG+9n2 nb9+v1+sDPJUQnem1z6EuGodcnsw3Gja92mEKQAUPpfCdRXwczzAmoeWNUKsoqmS ZovFmA67HN2K1Pd40zlyMciOicVvgvSp -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:14 2025 by rpki-client