$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft File: 2VYp3mJDm7AepHisFcom6ZWpeGQ.mft (raw, json) Hash identifier: stBrYj2P+qqzdRWezwFXCmK9xy++BLBEIbYkw4vF6lQ= Subject key identifier: 78:F2:FB:5D:FB:25:CB:A5:81:D3:A6:48:49:01:35:E6:ED:17:8E:3C Authority key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64 Certificate issuer: /CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft Manifest number: 6D Signing time: Mon 21 Jul 2025 07:07:08 +0000 Manifest this update: Mon 21 Jul 2025 07:07:08 +0000 Manifest next update: Mon 28 Jul 2025 07:07:07 +0000 Files and hashes: 1: 2VYp3mJDm7AepHisFcom6ZWpeGQ.crl (hash: OlAR1XbTjiiMr5cn3WM9gtwvDPR4C7X6r/7rk72UbQI=) 2: A999E39EC36C11EFAF838D35C4F9AE02.roa (hash: 1KvDgGWuLyFCN6s+q1kiM6VlBFYXCDfUfEerU6uXVoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D, serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864 Validity Not Before: Jul 21 07:07:08 2025 GMT Not After : Jul 28 07:07:07 2025 GMT Subject: CN=687de71c-63f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:5e:fc:c5:43:43:a4:4a:e7:18:c8:7b:a8: 73:d9:63:21:71:5d:b6:6a:49:ba:09:84:3f:e2:26: 82:cb:48:39:e9:0a:80:48:f5:9f:b0:a2:f6:9e:7f: 4d:f7:60:13:33:4f:b0:34:09:db:f5:c1:2c:70:b5: 7e:36:f6:dc:d9:97:f9:c4:7b:d2:ea:eb:91:07:09: 4f:3f:b2:5a:41:90:cb:98:f8:b6:b7:f8:b9:44:be: 4c:f5:87:ce:f7:96:43:90:65:5b:31:95:1b:bb:d6: 79:7e:33:7a:83:25:fa:e7:64:44:21:06:92:f5:99: 10:b4:75:69:2b:d5:c9:2b:bf:1e:75:4d:40:19:80: 31:61:57:e0:3f:53:3a:d1:ea:4b:d8:74:e5:d8:90: c0:ae:4d:35:98:a3:fa:b1:13:ac:ad:f0:11:ba:5a: cf:96:bf:0d:2b:98:62:ea:a9:6f:45:9d:73:2e:f7: 7c:b1:1c:ab:19:25:a9:fc:41:d6:60:c9:2e:1e:ff: f2:96:76:cc:4b:0b:96:8f:44:75:31:52:ee:ed:3f: ab:ae:ff:92:2a:e7:c6:0e:f6:bf:c1:09:61:a4:d3: 51:2d:dd:42:56:41:8b:5c:01:52:3f:89:a2:a1:c0: 23:c2:2d:1f:be:a6:6c:91:df:b1:8e:24:5e:64:d7: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F2:FB:5D:FB:25:CB:A5:81:D3:A6:48:49:01:35:E6:ED:17:8E:3C X509v3 Authority Key Identifier: keyid:D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a1:67:7d:70:48:d8:7e:2e:d4:43:1c:e9:cf:0f:c5:e8:e2: e8:91:af:ae:8e:b7:8b:64:7f:bb:6e:60:37:f0:cc:22:96:3c: cc:b8:a1:6d:7a:20:b7:be:0c:b7:41:ff:c3:b0:d2:91:96:f9: 26:88:33:67:5c:f7:ef:a0:7b:c7:10:37:41:80:d5:9f:3f:78: 53:81:43:c2:aa:9c:02:05:98:f7:49:0b:f4:e9:55:d0:bc:f5: 3b:27:f3:b8:7b:63:70:94:05:f4:97:a0:24:3f:07:62:b0:2b: d5:75:92:8b:d0:39:b5:67:2b:ff:c3:ac:73:18:82:13:00:7b: 83:35:52:6b:00:82:2c:00:e8:ac:40:f8:26:5b:49:a1:98:7b: a1:ba:ac:50:92:17:f7:e6:f0:d5:c4:71:c8:38:e4:35:6d:20: 88:5c:ee:9b:69:71:2a:e5:50:1a:71:6a:4a:cd:27:eb:8d:b6: be:d4:9f:a5:cd:46:67:df:13:f4:b9:9e:9c:09:78:40:a6:80: 99:ac:c9:10:a4:50:62:9a:d1:95:c4:80:76:9a:3b:06:69:57: f5:51:81:db:d0:1b:e2:02:67:d0:ec:ec:1b:13:bc:2c:88:fb: de:d6:bf:9d:71:9a:24:4b:61:06:18:c0:c1:f3:bd:ce:36:60: bc:6b:18:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODU0RDExMC8GA1UEBRMoRDk1NjI5REU2MjQzOUJCMDFFQTQ3OEFDMTVDQTI2RTk5 NUE5Nzg2NDAeFw0yNTA3MjEwNzA3MDhaFw0yNTA3MjgwNzA3MDdaMBgxFjAUBgNV BAMTDTY4N2RlNzFjLTYzZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTW178xUNDpErnGMh7qHPZYyFxXbZqSboJhD/iJoLLSDnpCoBI9Z+wovaef033 YBMzT7A0Cdv1wSxwtX429tzZl/nEe9Lq65EHCU8/slpBkMuY+La3+LlEvkz1h873 lkOQZVsxlRu71nl+M3qDJfrnZEQhBpL1mRC0dWkr1ckrvx51TUAZgDFhV+A/UzrR 6kvYdOXYkMCuTTWYo/qxE6yt8BG6Ws+Wvw0rmGLqqW9FnXMu93yxHKsZJan8QdZg yS4e//KWdsxLC5aPRHUxUu7tP6uu/5Iq58YO9r/BCWGk01Et3UJWQYtcAVI/iaKh wCPCLR++pmyR37GOJF5k17TtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUePL7Xfsl y6WB06ZISQE15u0XjjwwHwYDVR0jBBgwFoAU2VYp3mJDm7AepHisFcom6ZWpeGQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0U3QzhERDJFQzM2 QjExRUZCQ0JDNUIxNkM0RjlBRTAyLzJWWXAzbUpEbTdBZXBIaXNGY29tNlpXcGVH US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlZZcDNtSkRtN0FlcEhpc0Zjb202WldwZUdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NTREL0U3QzhERDJFQzM2QjExRUZCQ0JDNUIxNkM0RjlBRTAyLzJWWXAzbUpEbTdB ZXBIaXNGY29tNlpXcGVHUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFqhZ31wSNh+LtRDHOnPD8Xo4uiRr66Ot4tkf7tuYDfwzCKWPMy4oW16 ILe+DLdB/8Ow0pGW+SaIM2dc9++ge8cQN0GA1Z8/eFOBQ8KqnAIFmPdJC/TpVdC8 9Tsn87h7Y3CUBfSXoCQ/B2KwK9V1kovQObVnK//DrHMYghMAe4M1UmsAgiwA6KxA +CZbSaGYe6G6rFCSF/fm8NXEccg45DVtIIhc7ptpcSrlUBpxakrNJ+uNtr7Un6XN RmffE/S5npwJeECmgJmsyRCkUGKa0ZXEgHaaOwZpV/VRgdvQG+ICZ9Ds7BsTvCyI +97Wv51xmiRLYQYYwMHzvc42YLxrGI8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:22:02 2025 by rpki-client