$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json) Hash identifier: hv6i8YXXyiVcwver/GXdZo8gEuKMg8D3jf6J+iPp/U4= Subject key identifier: 8F:FF:FB:AF:FA:ED:15:2A:5B:8A:EC:35:B7:63:8D:EF:71:3E:13:5C Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft Manifest number: 086A Signing time: Fri 18 Jul 2025 20:56:37 +0000 Manifest this update: Fri 18 Jul 2025 20:56:36 +0000 Manifest next update: Fri 25 Jul 2025 20:56:36 +0000 Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: LX4TQmVhB0e07ODIHVC8vxEXUMge6UW28d3Tdnu+GPg=) 2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: N273KJZBVvsgocX2roxdV3igs8iuW9HGezq7GTon2t0=) 3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 3WiuON+DZCyyzbg9J4hxbgh73YCM3rOmSlSP3M274IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Validity Not Before: Jul 18 20:56:36 2025 GMT Not After : Jul 25 20:56:36 2025 GMT Subject: CN=687ab505-8557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:e0:9b:a2:d9:cb:68:7c:16:52:e5:8f:33: a4:82:75:16:bf:48:7a:aa:f1:2a:88:70:0a:60:63: 5e:ed:68:12:4e:96:08:b6:c1:eb:4b:99:89:42:4f: 0e:16:57:d5:cf:62:84:2b:d5:0a:4c:64:1a:07:14: d4:b4:95:a8:51:7f:20:97:6a:d8:40:c0:a7:63:4f: 9a:18:da:8c:65:c3:d1:31:39:9e:c1:bd:84:40:39: f0:fa:a5:1b:50:a7:d2:0e:8c:b6:11:95:eb:90:af: a1:7f:c8:35:d4:e0:8e:ee:0b:fc:60:a4:d5:c0:fe: 27:3b:d9:37:94:04:11:5c:e0:7a:09:04:f4:29:c5: d6:73:95:00:ce:1a:26:ec:be:88:e0:5c:59:bd:38: a9:99:11:a2:dc:b0:76:e2:ad:19:ee:c3:d9:b6:d6: 10:30:d2:e0:98:b9:c3:8d:2c:f1:11:5b:ae:dc:12: a5:f9:c6:9d:dc:ac:5d:8f:08:e0:22:59:e9:1b:9f: b1:94:3a:dc:61:8c:30:11:44:cc:9d:33:5b:64:17: 51:ce:a7:2b:af:7c:b4:43:7c:8c:60:11:2c:79:a4: 8c:be:e2:05:d1:93:46:4b:c4:78:4c:ca:22:95:4d: c8:c4:9a:44:4b:4e:5e:a6:a3:8c:6b:2e:03:b5:cb: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:FB:AF:FA:ED:15:2A:5B:8A:EC:35:B7:63:8D:EF:71:3E:13:5C X509v3 Authority Key Identifier: keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:40:8a:12:67:48:e9:c0:db:1f:a8:58:c1:a2:4a:11:37:b9: 4a:08:6a:21:7b:85:59:c9:3c:b0:76:f0:9f:ab:7a:63:46:e3: f2:83:5d:3d:51:7d:9c:25:a6:4c:0b:fa:3e:a5:16:27:37:35: 80:b2:4c:03:30:ae:59:fb:0d:ef:fc:38:c8:8a:46:e0:d1:59: dc:19:d2:ad:de:3b:52:ce:9a:36:1a:e6:31:29:4d:94:60:90: ef:3b:9b:86:f9:f8:a7:82:87:82:7c:9e:9c:72:dd:2a:a3:68: 88:03:8c:a2:61:26:8d:06:17:49:1d:3d:e6:5a:7e:36:b0:42: 70:ed:c7:58:69:2e:41:dc:d2:3e:e0:06:dc:4a:71:72:4b:f2: f3:a2:c5:ed:cf:17:f3:34:37:32:94:91:a9:37:e6:72:29:07: 76:99:ed:5d:6a:c2:f3:c1:ce:c5:1f:22:93:4d:c9:09:12:d6: 70:52:2f:d7:9b:00:c9:c2:61:a4:62:f5:05:32:f6:90:24:2b: 83:c9:d3:1e:57:34:8f:90:95:80:e6:f9:bb:49:03:25:76:8e: 08:28:66:d9:62:59:a3:ac:b3:46:df:ba:3c:58:61:94:ac:20: 81:6b:de:44:9f:6f:4b:4b:1d:06:37:2e:13:e5:3a:01:2e:6d: f0:36:f0:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2 MUI2RDM4M0IwHhcNMjUwNzE4MjA1NjM2WhcNMjUwNzI1MjA1NjM2WjAYMRYwFAYD VQQDEw02ODdhYjUwNS04NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3vgm6LZy2h8FlLljzOkgnUWv0h6qvEqiHAKYGNe7WgSTpYItsHrS5mJQk8O FlfVz2KEK9UKTGQaBxTUtJWoUX8gl2rYQMCnY0+aGNqMZcPRMTmewb2EQDnw+qUb UKfSDoy2EZXrkK+hf8g11OCO7gv8YKTVwP4nO9k3lAQRXOB6CQT0KcXWc5UAzhom 7L6I4FxZvTipmRGi3LB24q0Z7sPZttYQMNLgmLnDjSzxEVuu3BKl+cad3Kxdjwjg IlnpG5+xlDrcYYwwEUTMnTNbZBdRzqcrr3y0Q3yMYBEseaSMvuIF0ZNGS8R4TMoi lU3IxJpES05epqOMay4DtcuNFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI//+6/6 7RUqW4rsNbdjje9xPhNcMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2 aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQIoSZ0jpwNsfqFjBokoRN7lKCGohe4VZyTywdvCfq3pjRuPyg109 UX2cJaZMC/o+pRYnNzWAskwDMK5Z+w3v/DjIikbg0VncGdKt3jtSzpo2GuYxKU2U YJDvO5uG+fingoeCfJ6cct0qo2iIA4yiYSaNBhdJHT3mWn42sEJw7cdYaS5B3NI+ 4AbcSnFyS/LzosXtzxfzNDcylJGpN+ZyKQd2me1dasLzwc7FHyKTTckJEtZwUi/X mwDJwmGkYvUFMvaQJCuDydMeVzSPkJWA5vm7SQMldo4IKGbZYlmjrLNG37o8WGGU rCCBa95En29LSx0GNy4T5ToBLm3wNvCY -----END CERTIFICATE-----Generated at Sun Jul 20 03:24:10 2025 by rpki-client