$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: +H+GNNl/TTNEp080rEbPlLxL52QCx7Mni3LcAhHeMpo= Subject key identifier: 85:78:7E:5C:B7:D4:8A:87:06:01:D8:A7:8C:7E:F9:42:9C:98:20:55 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 75 Signing time: Sat 19 Jul 2025 07:06:02 +0000 Manifest this update: Sat 19 Jul 2025 07:06:01 +0000 Manifest next update: Sat 26 Jul 2025 07:06:01 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: 7mb5f5GLgHVJ56fpJ4Oh3txx/PCt9rwNXW/Oce/t7Vo=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: 7AoMz8H6zHHdV8IPpxWlOn2xVFqVFr83q+XexoYNuOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Jul 19 07:06:01 2025 GMT Not After : Jul 26 07:06:01 2025 GMT Subject: CN=687b43da-fac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:1f:ef:ec:46:3a:f0:a6:2c:90:c5:eb:1a: 2d:31:8b:42:e2:8d:e4:a0:7e:e9:96:28:dd:6c:21: 23:f6:0e:81:18:9a:46:20:8a:7b:c2:ff:24:66:8d: b7:0a:cb:dd:54:57:da:94:0e:d2:dc:2e:12:0c:a3: 56:56:ec:f4:d1:da:e8:dc:c5:2e:0d:d3:d8:76:30: 87:e2:e5:66:4f:09:27:56:87:4a:8c:85:7f:b8:0b: 94:07:a6:a3:27:cc:f7:a7:a8:25:9c:0e:d7:49:fe: a4:56:f3:52:d1:7b:69:43:01:ab:20:ae:4f:3d:d9: 25:34:4d:7f:64:79:ef:06:8f:75:83:37:56:fb:10: 97:a5:b7:11:85:28:9e:35:83:3e:e5:a0:ba:ef:aa: 58:ba:a3:f3:76:79:16:28:fe:41:1d:cb:bd:97:0c: 0a:69:f4:19:a3:16:87:4e:9e:ea:6b:e3:7b:5f:87: ed:63:d1:5a:8b:c0:a8:0c:9a:bd:e3:25:87:f2:d5: 7f:68:dc:6c:32:46:06:7c:fb:8f:03:d0:ae:95:78: 1a:db:c0:a2:87:c0:51:8b:dc:48:66:45:86:ba:45: d0:6b:4a:4a:1f:00:2e:f7:e5:1e:37:e4:a4:e9:27: 85:f6:65:d6:de:24:69:90:13:84:4e:29:54:b8:3c: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:7E:5C:B7:D4:8A:87:06:01:D8:A7:8C:7E:F9:42:9C:98:20:55 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:17:68:ee:da:5f:96:6b:61:2b:86:08:ee:12:f5:48:6d: 0a:56:61:9b:23:4a:2a:89:35:e7:64:d2:9c:d0:24:68:86:1a: 57:3e:47:28:ca:ad:68:5f:57:69:44:01:02:bc:26:e9:43:11: 90:cb:7c:dd:e3:15:0d:1a:6e:a9:05:8d:a7:1a:5d:af:ef:eb: 4d:64:64:60:66:ea:5d:f7:09:fb:1d:c0:04:31:ed:74:88:6c: b0:d1:03:6c:8c:b5:8f:4b:9e:4a:ea:d8:fd:39:b1:7b:d8:0a: 42:07:90:b5:1f:30:07:aa:12:6d:c7:ba:77:f1:cb:87:b8:8f: dd:2b:01:5a:63:9a:60:ae:7c:74:b5:60:14:5d:68:f2:c5:6c: e7:8c:6f:1f:c9:d8:e7:12:26:3a:84:52:06:3c:2d:2f:25:a4: 66:10:0f:46:0e:bc:1d:42:37:f0:e9:49:a8:48:c7:f7:58:af: de:07:d3:8e:25:a9:a3:bf:6d:be:89:65:7c:11:a6:7d:55:f8: 88:86:ac:35:0f:58:b5:91:32:2d:3d:43:1a:5b:73:93:65:6b: 16:4b:f8:36:c2:f6:3b:c6:92:4c:1a:b3:0a:46:8f:db:3b:20: 60:fb:5a:1e:b0:cd:3c:75:5f:1a:df:de:3f:55:56:03:b2:2c: b0:46:22:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkE5NjExMC8GA1UEBRMoREFFRkE1NDM1OEY0QkNDMEQ4NDdDQzZEQzlDQUY3OEJD NUUwOTk2RTAeFw0yNTA3MTkwNzA2MDFaFw0yNTA3MjYwNzA2MDFaMBgxFjAUBgNV BAMTDTY4N2I0M2RhLWZhYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDAx/v7EY68KYskMXrGi0xi0LijeSgfumWKN1sISP2DoEYmkYginvC/yRmjbcK y91UV9qUDtLcLhIMo1ZW7PTR2ujcxS4N09h2MIfi5WZPCSdWh0qMhX+4C5QHpqMn zPenqCWcDtdJ/qRW81LRe2lDAasgrk892SU0TX9kee8Gj3WDN1b7EJeltxGFKJ41 gz7loLrvqli6o/N2eRYo/kEdy72XDApp9BmjFodOnupr43tfh+1j0VqLwKgMmr3j JYfy1X9o3GwyRgZ8+48D0K6VeBrbwKKHwFGL3EhmRYa6RdBrSkofAC735R435KTp J4X2ZdbeJGmQE4ROKVS4PAJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhXh+XLfU iocGAdinjH75QpyYIFUwHwYDVR0jBBgwFoAU2u+lQ1j0vMDYR8xtycr3i8XgmW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQTk2LzhBMzUwOTBDQjVF RDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21X NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnUtbFExajB2TURZUjh4dHljcjNpOFhnbVc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QTk2LzhBMzUwOTBDQjVFRDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1E WVI4eHR5Y3IzaThYZ21XNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJe3F2ju2l+Wa2ErhgjuEvVIbQpWYZsjSiqJNedk0pzQJGiGGlc+RyjK rWhfV2lEAQK8JulDEZDLfN3jFQ0abqkFjacaXa/v601kZGBm6l33CfsdwAQx7XSI bLDRA2yMtY9Lnkrq2P05sXvYCkIHkLUfMAeqEm3Hunfxy4e4j90rAVpjmmCufHS1 YBRdaPLFbOeMbx/J2OcSJjqEUgY8LS8lpGYQD0YOvB1CN/DpSahIx/dYr94H044l qaO/bb6JZXwRpn1V+IiGrDUPWLWRMi09Qxpbc5NlaxZL+DbC9jvGkkwaswpGj9s7 IGD7Wh6wzTx1Xxrf3j9VVgOyLLBGIi4= -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:13 2025 by rpki-client