$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: RfRO+NLgfIwNMGajfbDBLW8JqXaokFZ48UBhid2KfWI= Subject key identifier: 0E:C2:70:2C:2A:EC:E8:2A:5F:95:AD:ED:EC:D2:37:6E:48:A2:25:84 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 024E Signing time: Sat 23 Aug 2025 02:05:52 +0000 Manifest this update: Sat 23 Aug 2025 02:05:52 +0000 Manifest next update: Sat 30 Aug 2025 02:05:52 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: nHeZPtxSHP3VP2khT1adRNDl4qIjMSGoHOsVfo5+CZo=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Aug 23 02:05:52 2025 GMT Not After : Aug 30 02:05:52 2025 GMT Subject: CN=68a92200-8e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:6e:d4:29:de:1b:52:22:da:e7:35:cb:07: 59:46:da:fd:6c:b3:f1:e0:92:df:17:96:6d:00:57: 43:87:54:ac:4f:74:13:e8:b3:74:2c:b3:34:3c:56: 6e:ca:be:28:f5:9c:2c:22:cb:27:63:ed:7f:f8:e1: a5:21:8b:1c:af:86:cb:d7:34:da:04:c2:22:95:2a: 95:60:37:6e:7e:81:14:7b:f8:13:b4:d3:48:13:79: d9:ab:2e:bb:9f:84:4f:6d:49:2a:2f:92:ea:70:c0: 21:fa:53:25:39:6b:9d:01:fa:7e:50:8a:60:1b:ac: 44:13:21:7d:7f:19:a8:c3:9e:73:7f:74:05:c6:03: 91:ab:a0:49:07:bc:94:02:b2:3b:61:7a:98:9f:18: e3:a2:ee:b6:e0:00:2d:31:4b:c9:d5:69:67:46:2a: bb:f2:f7:33:47:4c:3e:8c:f7:73:4a:6a:4f:a8:0b: 98:61:09:bd:cc:b9:a5:9b:5a:0c:ce:83:a6:a7:59: 8d:df:0f:54:c4:36:86:4b:61:02:45:51:61:ef:02: 14:e9:40:1e:ec:0a:3a:d0:26:89:3d:c6:d9:43:ed: d1:ee:a8:cf:46:dd:79:4b:2e:af:24:28:a4:38:a2: 9e:90:de:31:f7:04:49:9c:45:f3:ea:ab:26:c2:ae: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C2:70:2C:2A:EC:E8:2A:5F:95:AD:ED:EC:D2:37:6E:48:A2:25:84 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cb:38:05:e7:2f:ca:51:80:7c:89:5f:40:8c:d9:ef:eb:d7: 03:dc:4f:3b:f8:9c:88:d4:fb:c9:76:35:43:0f:d6:ac:57:52: ac:26:39:2f:70:35:67:5b:71:7e:09:db:02:50:45:31:23:51: b1:2d:31:ae:60:f1:a9:04:e3:a6:a3:7d:58:83:f4:c4:cc:51: 76:47:e2:d6:d5:5f:8f:9c:cb:fc:89:09:c0:60:db:45:81:4b: 4b:49:6c:c8:2d:56:c4:0a:86:6e:b6:4d:5d:b5:70:9d:1b:16: 56:f1:e8:02:b2:63:03:53:f8:e3:b6:99:e5:3f:ac:fc:30:d8: 6d:1d:18:e9:5a:22:87:51:39:36:e1:62:87:2c:d0:63:8b:ec: e1:53:bb:65:75:a5:4f:ef:ab:bd:89:5a:90:a3:ed:3f:fa:8f: 61:5d:78:f6:8e:e5:32:0a:36:58:a0:a0:dc:05:27:7b:b8:60: a9:4d:d8:9e:ea:3a:5f:06:17:87:fd:80:b0:b7:bd:0d:88:22: 64:66:f3:a2:0c:bc:ca:21:61:4b:35:d7:a9:3d:5e:44:47:7b: 6c:ba:b6:b3:82:3e:07:d7:ab:ea:77:68:12:34:eb:80:e6:b3: 8d:91:dc:ee:6a:ba:7d:71:8b:48:d3:fe:af:cd:c5:aa:c6:09: 25:9c:f1:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwODIzMDIwNTUyWhcNMjUwODMwMDIwNTUyWjAYMRYwFAYD VQQDEw02OGE5MjIwMC04ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvFu1CneG1Ii2uc1ywdZRtr9bLPx4JLfF5ZtAFdDh1SsT3QT6LN0LLM0PFZu yr4o9ZwsIssnY+1/+OGlIYscr4bL1zTaBMIilSqVYDdufoEUe/gTtNNIE3nZqy67 n4RPbUkqL5LqcMAh+lMlOWudAfp+UIpgG6xEEyF9fxmow55zf3QFxgORq6BJB7yU ArI7YXqYnxjjou624AAtMUvJ1WlnRiq78vczR0w+jPdzSmpPqAuYYQm9zLmlm1oM zoOmp1mN3w9UxDaGS2ECRVFh7wIU6UAe7Ao60CaJPcbZQ+3R7qjPRt15Sy6vJCik OKKekN4x9wRJnEXz6qsmwq6WSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7CcCwq 7OgqX5Wt7ezSN25IoiWEMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdyzgF5y/KUYB8iV9AjNnv69cD3E87+JyI1PvJdjVDD9asV1KsJjkv cDVnW3F+CdsCUEUxI1GxLTGuYPGpBOOmo31Yg/TEzFF2R+LW1V+PnMv8iQnAYNtF gUtLSWzILVbECoZutk1dtXCdGxZW8egCsmMDU/jjtpnlP6z8MNhtHRjpWiKHUTk2 4WKHLNBji+zhU7tldaVP76u9iVqQo+0/+o9hXXj2juUyCjZYoKDcBSd7uGCpTdie 6jpfBheH/YCwt70NiCJkZvOiDLzKIWFLNdepPV5ER3tsurazgj4H16vqd2gSNOuA 5rONkdzuarp9cYtI0/6vzcWqxgklnPF5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:21 2025 by rpki-client