$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: l/lBzBuvIqVydjk//pTIo7n3qMm9mM0gaG8mT8vEftM= Subject key identifier: 6D:43:0C:55:6F:84:4F:F0:FD:C6:0B:5B:38:B8:4E:C9:87:54:DB:1C Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E48 Signing time: Fri 22 Aug 2025 17:53:24 +0000 Manifest this update: Fri 22 Aug 2025 17:53:24 +0000 Manifest next update: Fri 29 Aug 2025 17:53:24 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: RiM9ncB9ZvoKyvIDM/dqZ4OyAa/QLhJH1F0rR6qjooE=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: XTPvOUtwwqNSor3+lvQAUp+XHkA+OuKa7+XgiPm/si4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3665 (0xe51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Aug 22 17:53:24 2025 GMT Not After : Aug 29 17:53:24 2025 GMT Subject: CN=68a8ae94-2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:11:df:ef:39:f8:b0:cc:db:8b:74:81:58: c5:8e:ff:72:d3:b0:5f:57:8c:92:ad:47:d9:08:64: 2a:6c:86:37:41:37:ec:ed:e8:75:52:94:e7:3d:23: 47:08:5b:c7:e5:03:b0:a7:6b:b0:71:f1:c5:ae:b0: 56:af:9c:b2:99:7e:1e:c7:98:8f:92:6d:6e:d6:df: 85:e1:70:d7:fc:40:4b:6a:27:fa:88:c1:a4:b7:91: 95:02:f7:0b:fa:ea:0c:a1:c4:25:71:d0:37:43:8a: 70:9d:03:ae:5f:d3:8a:f6:e5:e9:40:ff:dd:17:df: 5a:24:da:6d:ad:47:3b:60:d5:9e:3c:06:8d:c8:21: 4c:ec:09:1a:06:69:d0:5d:1e:02:ae:48:d6:53:4e: 6f:3b:b8:be:1e:c4:e9:57:89:0e:29:63:10:ad:ea: ab:ef:3e:27:dc:ca:7a:f2:ec:88:ab:32:ad:2d:ae: c4:c4:39:12:4b:19:54:e4:58:7b:84:f9:3d:08:df: f4:c4:b2:2a:f3:70:3f:9f:26:a7:8f:c9:b7:10:2a: f4:f4:95:4b:d3:bc:25:a0:68:e8:ce:2d:5f:1f:df: eb:a7:cc:4c:1f:82:3b:79:17:f5:1d:a9:d5:70:df: 1d:0d:21:8b:e4:62:51:cf:6a:2a:63:2c:de:64:4d: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:0C:55:6F:84:4F:F0:FD:C6:0B:5B:38:B8:4E:C9:87:54:DB:1C X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a2:32:f7:aa:f5:46:0f:b8:3e:2c:d6:fe:ea:22:ad:74:38: 79:b3:24:d2:fb:d0:d0:e5:9c:52:a9:a6:1e:ca:f4:9d:2b:a2: ef:e4:75:af:d7:41:a0:e1:dc:0e:b8:26:1d:63:bb:e9:00:97: 64:bd:f9:c7:ab:38:8e:a4:1e:e3:4d:1d:fb:8e:68:e0:7d:76: 01:56:e9:4e:24:2e:37:d4:58:99:3b:09:aa:cb:a6:87:02:1c: df:3d:ce:3b:ef:24:bc:08:83:55:4b:e6:df:95:27:b6:34:50: d6:50:70:8a:9e:98:c2:63:e0:be:bd:c2:fd:46:c8:95:f0:d6: 7a:ca:bf:39:4d:30:e6:53:5b:46:31:82:1b:75:90:a8:91:77: 56:f0:c9:17:ae:87:11:0b:dd:ef:05:61:68:1f:0e:dc:ba:75: d8:17:cb:d0:b6:d0:3a:20:31:e9:7e:88:ef:29:09:14:a5:6a: 88:83:a2:52:f4:7f:85:9c:d8:f0:ed:0e:e9:b9:f8:71:ce:fc: 3c:8e:11:62:4b:84:74:a8:1b:d1:8d:21:c3:11:3e:f3:42:e2: 4f:a3:81:79:76:9c:e1:21:ec:59:83:e3:34:16:71:51:dd:dc: 43:5c:aa:2d:c2:cf:e3:74:fb:07:05:f9:07:f3:96:f5:38:43: 25:a8:74:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUwODIyMTc1MzI0WhcNMjUwODI5MTc1MzI0WjAYMRYwFAYD VQQDEw02OGE4YWU5NC0yNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnUR3+85+LDM24t0gVjFjv9y07BfV4ySrUfZCGQqbIY3QTfs7eh1UpTnPSNH CFvH5QOwp2uwcfHFrrBWr5yymX4ex5iPkm1u1t+F4XDX/EBLaif6iMGkt5GVAvcL +uoMocQlcdA3Q4pwnQOuX9OK9uXpQP/dF99aJNptrUc7YNWePAaNyCFM7AkaBmnQ XR4CrkjWU05vO7i+HsTpV4kOKWMQreqr7z4n3Mp68uyIqzKtLa7ExDkSSxlU5Fh7 hPk9CN/0xLIq83A/nyanj8m3ECr09JVL07wloGjozi1fH9/rp8xMH4I7eRf1HanV cN8dDSGL5GJRz2oqYyzeZE2rPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1DDFVv hE/w/cYLWzi4TsmHVNscMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwojL3qvVGD7g+LNb+6iKtdDh5syTS+9DQ5ZxSqaYeyvSdK6Lv5HWv 10Gg4dwOuCYdY7vpAJdkvfnHqziOpB7jTR37jmjgfXYBVulOJC431FiZOwmqy6aH AhzfPc477yS8CINVS+bflSe2NFDWUHCKnpjCY+C+vcL9RsiV8NZ6yr85TTDmU1tG MYIbdZCokXdW8MkXrocRC93vBWFoHw7cunXYF8vQttA6IDHpfojvKQkUpWqIg6JS 9H+FnNjw7Q7pufhxzvw8jhFiS4R0qBvRjSHDET7zQuJPo4F5dpzhIexZg+M0FnFR 3dxDXKotws/jdPsHBfkH85b1OEMlqHRL -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:53 2025 by rpki-client