$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: xi91gvezy64t8/Z4eQhQgrxSbuuMD3AgWD90eeJqtgY= Subject key identifier: 6D:71:69:E2:AA:F6:B7:06:4E:30:69:12:CE:5D:30:49:ED:0A:7C:16 Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 04:52:40 +0000 Manifest this update: Sat 23 Aug 2025 04:52:39 +0000 Manifest next update: Sat 30 Aug 2025 04:52:39 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: uuWX6wQIvBP2ahXEZvYze6EN/+8Lazr2RNvmMdmrVZQ=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Aug 23 04:52:39 2025 GMT Not After : Aug 30 04:52:39 2025 GMT Subject: CN=68a94918-79de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:c1:8d:80:35:3a:69:ae:1a:1d:b0:6a:28: 71:ca:b4:26:99:ab:3e:b7:da:79:fc:a8:28:31:85: 4e:bc:b9:1c:9d:3f:af:f7:cd:ae:ec:07:64:87:0f: 41:e6:64:2e:15:ef:67:a5:26:bd:04:31:d3:6a:2c: e2:c8:43:41:97:18:cc:db:37:24:51:3a:7b:a8:a9: 5d:bf:9a:56:87:d3:30:0e:4b:f9:be:55:cb:ce:9f: d8:50:43:65:13:1d:06:d3:02:c6:ce:f0:34:b5:f9: 60:fd:cf:31:8c:2a:dc:ad:b2:30:05:04:f3:cf:6e: 79:d8:d2:cf:14:e0:e3:eb:f5:b3:57:fb:20:9e:70: 01:64:b2:c1:11:11:4e:3a:3d:a2:85:8e:75:c6:e7: 14:12:25:ca:79:ff:e0:92:21:ea:33:72:20:30:65: f5:97:42:a2:8c:97:5c:77:18:01:6f:72:02:cb:6e: d2:02:25:1f:4f:a5:d8:a5:70:8c:0d:1f:c4:1a:37: ba:b9:43:74:f5:00:6b:e9:1e:a7:96:58:f0:5c:6a: c5:40:55:8e:f6:ea:d5:18:b7:2e:1c:f6:3d:38:00: dd:e5:36:aa:9c:54:9e:92:9f:e2:76:20:d4:26:b7: 94:c0:86:b8:13:f6:dd:0f:78:83:a4:7e:91:12:85: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:71:69:E2:AA:F6:B7:06:4E:30:69:12:CE:5D:30:49:ED:0A:7C:16 X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ee:83:d6:31:96:55:8c:14:18:b8:d0:c7:4c:ff:95:fc:bc: 83:4d:bd:82:00:b5:5e:60:7c:87:8c:b4:d5:e8:46:b4:88:d2: b3:e7:be:f2:fa:c6:7d:5f:c4:12:f5:5f:3a:15:70:61:b8:c1: fc:09:69:3e:6d:f9:90:bd:9b:d6:60:4c:b5:b4:9e:df:45:92: 84:35:a9:88:ee:cd:1b:a0:ba:4e:2e:d1:08:ac:2b:25:10:c2: cc:3c:c9:0d:c0:55:0f:ce:7a:53:e0:d9:7b:49:a6:8c:57:76: dc:13:46:33:7e:02:1e:07:4b:a8:20:25:98:ac:62:58:a2:54: a0:79:18:cd:4a:b7:21:8c:a3:f4:be:ca:00:01:1e:6b:8b:20: 9a:ec:90:25:64:4e:dc:89:9b:f0:dd:de:ae:29:b9:1e:97:c5: 01:34:3d:12:9b:87:3d:07:7d:7c:3f:13:aa:13:d0:92:0b:9e: ef:13:0d:35:8a:f8:63:73:2b:c5:b7:56:76:06:04:77:86:25: 1a:3c:d1:16:88:be:bd:7b:a8:f5:04:c9:e9:5b:bf:46:0c:2e: 59:fe:1d:ce:4e:29:77:93:a2:73:24:c1:0e:b1:d1:ee:b7:a7: 31:4f:4f:aa:c3:03:cc:f7:0c:1c:8b:5e:24:2d:84:12:c5:81: e6:19:64:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjUwODIzMDQ1MjM5WhcNMjUwODMwMDQ1MjM5WjAYMRYwFAYD VQQDEw02OGE5NDkxOC03OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIDBjYA1OmmuGh2waihxyrQmmas+t9p5/KgoMYVOvLkcnT+v982u7Adkhw9B 5mQuFe9npSa9BDHTaiziyENBlxjM2zckUTp7qKldv5pWh9MwDkv5vlXLzp/YUENl Ex0G0wLGzvA0tflg/c8xjCrcrbIwBQTzz2552NLPFODj6/WzV/sgnnABZLLBERFO Oj2ihY51xucUEiXKef/gkiHqM3IgMGX1l0KijJdcdxgBb3ICy27SAiUfT6XYpXCM DR/EGje6uUN09QBr6R6nlljwXGrFQFWO9urVGLcuHPY9OADd5TaqnFSekp/idiDU JreUwIa4E/bdD3iDpH6REoWFGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1xaeKq 9rcGTjBpEs5dMEntCnwWMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7oPWMZZVjBQYuNDHTP+V/LyDTb2CALVeYHyHjLTV6Ea0iNKz577y +sZ9X8QS9V86FXBhuMH8CWk+bfmQvZvWYEy1tJ7fRZKENamI7s0boLpOLtEIrCsl EMLMPMkNwFUPznpT4Nl7SaaMV3bcE0YzfgIeB0uoICWYrGJYolSgeRjNSrchjKP0 vsoAAR5riyCa7JAlZE7ciZvw3d6uKbkel8UBND0Sm4c9B318PxOqE9CSC57vEw01 ivhjcyvFt1Z2BgR3hiUaPNEWiL69e6j1BMnpW79GDC5Z/h3OTil3k6JzJMEOsdHu t6cxT0+qwwPM9wwci14kLYQSxYHmGWSX -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:45 2025 by rpki-client