$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json) Hash identifier: HCKfVslQRb0D7Ss6jXbP+l6bjRwTX2z4bwDSnw1iiak= Subject key identifier: 21:38:0D:B6:80:43:C0:33:CA:44:B0:50:17:B8:32:F8:03:5D:B3:15 Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft Manifest number: 7C Signing time: Fri 18 Jul 2025 23:16:53 +0000 Manifest this update: Fri 18 Jul 2025 23:16:53 +0000 Manifest next update: Fri 25 Jul 2025 23:16:53 +0000 Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: nk0lz2sTgbb4XeGqVUaprad6Kbv8Ait0M7Jj/fCYWC8=) 2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 05N/6Qhw5iJe1Qr/JCmwvRl4veGMACl1Zh2wsIyWrXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Validity Not Before: Jul 18 23:16:53 2025 GMT Not After : Jul 25 23:16:53 2025 GMT Subject: CN=687ad5e5-e9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:ce:af:e3:d9:a1:04:3d:44:fb:ce:d0:54: 9f:a9:56:0e:8e:3e:4e:e8:a5:a8:d6:e5:31:f1:e7: 89:fd:70:7b:c0:79:1b:63:33:96:40:28:e2:96:eb: 99:fc:f5:b1:05:68:d6:15:02:8c:50:9b:7d:d0:fd: e0:bb:bc:2c:48:d9:3b:c0:6a:1f:39:98:59:84:40: 94:28:71:86:a8:65:62:70:18:9b:71:db:16:7d:4d: 7b:25:eb:59:cd:00:5c:dd:48:bd:bc:46:7b:ce:9d: a0:81:99:44:fe:3a:8d:ef:c6:ac:fa:2c:1b:21:95: 4a:15:2e:60:9b:f5:c1:2f:e2:64:be:26:7e:2c:a8: 60:3a:48:75:e5:b6:39:d7:7d:07:14:f6:10:54:20: 38:2e:88:14:1f:b2:d5:f1:9c:de:cc:d1:95:9b:8e: 60:eb:e9:81:30:52:68:1b:88:8b:5a:cb:89:57:eb: b1:f0:1c:5e:a3:19:c1:88:6b:d8:9a:3f:f0:4d:03: e1:c0:f2:e4:10:2b:d8:a5:12:03:06:66:c9:7e:98: ba:fd:5e:6e:5d:1a:5d:28:42:56:8f:58:e4:24:81: 52:3f:a7:3e:97:70:be:24:02:bc:f0:b6:d8:06:5a: 86:8e:88:78:0d:55:70:55:d7:70:db:68:6e:7c:75: 2e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:0D:B6:80:43:C0:33:CA:44:B0:50:17:B8:32:F8:03:5D:B3:15 X509v3 Authority Key Identifier: keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f7:e0:bc:19:8e:93:62:c9:f2:d6:2f:d8:86:ee:bf:8d:16: cd:3b:6d:04:d1:70:25:42:18:92:6a:8f:0a:0b:35:70:2e:51: a3:5c:61:39:20:d8:35:59:9c:e9:a5:d1:b6:0f:65:e8:9c:0d: c7:a1:e2:87:aa:9c:6b:f7:72:f3:1c:93:02:4c:fd:44:74:1a: 18:74:82:a8:23:dd:55:34:6a:d3:31:d4:39:0a:06:96:cf:4a: 39:1a:a0:f6:e4:1c:a0:83:66:bc:ff:63:36:86:00:cf:69:1b: 32:92:3a:85:89:6d:3d:27:3a:80:94:6c:af:4b:d4:75:74:d0: 25:00:70:2e:e1:43:48:59:fd:ad:9d:f2:a0:bc:71:56:1f:52: 71:81:ae:73:19:6d:2b:ec:3c:39:0c:6e:60:17:e1:3f:86:bc: 09:7e:4a:e3:d3:47:13:53:80:45:22:bd:88:af:04:f5:99:51: 83:96:59:b4:08:ab:f8:f2:4a:a5:46:06:34:2f:e1:53:18:63: 76:bd:d5:45:9a:08:76:66:fd:2c:b1:ec:a8:71:a8:6d:5b:38: 4c:bb:00:f9:bc:c2:5e:aa:2b:cc:f4:de:de:8d:c9:50:17:12: 2f:96:81:27:03:fc:64:dd:a0:b2:09:56:d2:46:c4:ee:fd:c7: a7:cc:e3:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkYyRDExMC8GA1UEBRMoQUY2NzJEQThDNUQxRDZDODBENTA2MTc4QzlFN0NCNzQ0 RjZFMzhFNjAeFw0yNTA3MTgyMzE2NTNaFw0yNTA3MjUyMzE2NTNaMBgxFjAUBgNV BAMTDTY4N2FkNWU1LWU5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnVM6v49mhBD1E+87QVJ+pVg6OPk7opajW5THx54n9cHvAeRtjM5ZAKOKW65n8 9bEFaNYVAoxQm33Q/eC7vCxI2TvAah85mFmEQJQocYaoZWJwGJtx2xZ9TXsl61nN AFzdSL28RnvOnaCBmUT+Oo3vxqz6LBshlUoVLmCb9cEv4mS+Jn4sqGA6SHXltjnX fQcU9hBUIDguiBQfstXxnN7M0ZWbjmDr6YEwUmgbiItay4lX67HwHF6jGcGIa9ia P/BNA+HA8uQQK9ilEgMGZsl+mLr9Xm5dGl0oQlaPWOQkgVI/pz6XcL4kArzwttgG WoaOiHgNVXBV13DbaG58dS5dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUITgNtoBD wDPKRLBQF7gy+ANdsxUwHwYDVR0jBBgwFoAUr2ctqMXR1sgNUGF4yefLdE9uOOYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjJELzZGODIxMTc4QUI4 ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9P WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjJjdHFNWFIxc2dOVUdGNHllZkxkRTl1T09ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjJELzZGODIxMTc4QUI4ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNn TlVHRjR5ZWZMZEU5dU9PWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG334LwZjpNiyfLWL9iG7r+NFs07bQTRcCVCGJJqjwoLNXAuUaNcYTkg 2DVZnOml0bYPZeicDceh4oeqnGv3cvMckwJM/UR0Ghh0gqgj3VU0atMx1DkKBpbP SjkaoPbkHKCDZrz/YzaGAM9pGzKSOoWJbT0nOoCUbK9L1HV00CUAcC7hQ0hZ/a2d 8qC8cVYfUnGBrnMZbSvsPDkMbmAX4T+GvAl+SuPTRxNTgEUivYivBPWZUYOWWbQI q/jySqVGBjQv4VMYY3a91UWaCHZm/Syx7KhxqG1bOEy7APm8wl6qK8z03t6NyVAX Ei+WgScD/GTdoLIJVtJGxO79x6fM43w= -----END CERTIFICATE-----Generated at Sun Jul 20 20:43:03 2025 by rpki-client