$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: /vTc+WYgYOeqRxCivChxVlGNoLjeINK7Sqe5M02d/ow= Subject key identifier: 4F:C0:20:79:11:F4:54:7F:A4:2C:FD:42:CE:27:55:A9:78:55:BF:C2 Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:58:52 +0000 Manifest this update: Sat 19 Jul 2025 07:58:51 +0000 Manifest next update: Sat 26 Jul 2025 07:58:51 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: EVtyuFIIOqScn2fdte3TEoyxsttCAsJNYK+dyWOFGuU=) 2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Jul 19 07:58:51 2025 GMT Not After : Jul 26 07:58:51 2025 GMT Subject: CN=687b503c-6232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:a3:fb:36:f6:be:ab:da:0a:e3:f4:36:e5: 1f:1f:06:16:26:71:e6:dd:39:52:92:fc:ef:3b:29: b5:54:32:24:e0:c8:ef:ad:38:b9:f0:82:8c:3e:de: 3a:0a:19:59:d4:9e:75:c2:0c:23:ae:79:06:e3:00: f6:ea:0d:22:51:2f:05:66:06:14:e8:5f:13:b9:d9: 91:89:78:d6:f0:ec:ef:f4:f3:cb:a2:eb:be:90:a1: 33:0d:57:3b:72:be:3d:2d:09:63:01:bd:99:26:cc: 22:80:3b:1b:32:1b:5b:a9:4a:33:8f:3d:27:a6:e8: c2:8b:40:84:17:b2:4d:b2:4c:ea:bf:32:ab:79:6b: 93:bd:48:47:5d:0d:5d:91:9f:ca:a4:25:d4:84:e3: 31:3f:3e:d5:1e:72:fd:b0:7b:61:d9:5b:22:0b:37: d3:e4:a7:01:0e:fa:02:6f:19:aa:f0:bb:8c:e6:12: 93:9f:e7:00:64:a1:da:94:63:5f:d2:a5:4a:d3:fa: dd:5a:03:51:df:ca:78:eb:36:f7:57:c8:2c:6f:05: 8e:85:88:6e:4c:29:25:99:3e:af:24:a1:3e:42:e4: 65:ca:23:02:d2:23:b7:67:10:cc:80:8b:15:56:a1: a2:f7:5e:c4:de:65:a5:f3:1f:e4:f5:9c:ec:ea:13: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C0:20:79:11:F4:54:7F:A4:2C:FD:42:CE:27:55:A9:78:55:BF:C2 X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:38:0d:8e:bf:cc:d9:c3:f8:db:66:1f:6e:5f:29:80:f0:59: 28:0e:51:b6:4a:90:53:65:b3:88:89:59:d7:f0:22:06:85:43: b9:e9:cb:58:ba:f0:ea:51:64:23:a8:f7:0b:1d:8a:a8:b2:a5: b7:04:fe:3c:7c:2f:1f:b7:54:72:9c:36:43:a5:f2:2c:26:0e: 6b:f4:ea:b8:90:ec:7a:50:c2:e4:46:80:cc:00:27:80:04:05: 8e:e4:6b:5d:84:8a:c2:c4:c0:2f:5f:19:e6:87:6f:6a:8f:cd: 10:2f:ca:a1:48:4c:5f:bd:e3:0b:88:f4:20:2a:89:31:68:b7: 8b:79:62:00:a3:b7:07:f5:5c:22:19:42:58:86:ab:12:f8:74: 90:d1:41:e5:8a:c0:ee:e0:f0:53:11:72:da:63:19:e8:4f:03: 84:41:c8:96:28:f2:9f:8e:8f:cc:fa:37:4d:6f:fc:d9:e2:e1: 36:a0:92:4d:37:12:9a:68:a2:53:a5:a3:4e:a1:e8:4f:db:5f: 42:50:5e:22:b0:42:b0:9f:11:aa:f8:04:6b:3a:89:6d:92:ed: 44:6b:75:35:ca:92:56:81:c4:b7:48:15:a2:b4:5f:02:f9:8a: 5d:4e:e3:0e:fe:65:a7:38:67:b8:ac:1a:46:e9:69:6e:93:94: 46:03:b1:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE MTY3NzRCMTAeFw0yNTA3MTkwNzU4NTFaFw0yNTA3MjYwNzU4NTFaMBgxFjAUBgNV BAMTDTY4N2I1MDNjLTYyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFCqP7Nva+q9oK4/Q25R8fBhYmcebdOVKS/O87KbVUMiTgyO+tOLnwgow+3joK GVnUnnXCDCOueQbjAPbqDSJRLwVmBhToXxO52ZGJeNbw7O/088ui676QoTMNVzty vj0tCWMBvZkmzCKAOxsyG1upSjOPPSem6MKLQIQXsk2yTOq/Mqt5a5O9SEddDV2R n8qkJdSE4zE/PtUecv2we2HZWyILN9PkpwEO+gJvGarwu4zmEpOf5wBkodqUY1/S pUrT+t1aA1HfynjrNvdXyCxvBY6FiG5MKSWZPq8koT5C5GXKIwLSI7dnEMyAixVW oaL3XsTeZaXzH+T1nOzqEwCBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT8AgeRH0 VH+kLP1CzidVqXhVv8IwHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0 QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF04DY6/zNnD+NtmH25fKYDwWSgOUbZKkFNls4iJWdfwIgaFQ7npy1i6 8OpRZCOo9wsdiqiypbcE/jx8Lx+3VHKcNkOl8iwmDmv06riQ7HpQwuRGgMwAJ4AE BY7ka12EisLEwC9fGeaHb2qPzRAvyqFITF+94wuI9CAqiTFot4t5YgCjtwf1XCIZ QliGqxL4dJDRQeWKwO7g8FMRctpjGehPA4RByJYo8p+Oj8z6N01v/Nni4Tagkk03 EppoolOlo06h6E/bX0JQXiKwQrCfEar4BGs6iW2S7URrdTXKklaBxLdIFaK0XwL5 il1O4w7+Zac4Z7isGkbpaW6TlEYDsXs= -----END CERTIFICATE-----Generated at Mon Jul 21 07:14:07 2025 by rpki-client