$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: EI6Fcf+9eXNVm3ZJjcveFeMNlmh3c84KYP1nTkQdrZE= Subject key identifier: 3A:70:7B:E5:19:71:B5:91:DB:15:FB:03:8A:E4:67:50:F0:75:87:7C Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 013E Signing time: Thu 03 Jul 2025 04:32:43 +0000 Manifest this update: Thu 03 Jul 2025 04:32:43 +0000 Manifest next update: Thu 10 Jul 2025 04:32:43 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: cMc8VtJaTsTtGgb5zn1gHX0RPmDhhjyU5Wb+AhBK34c=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Jul 3 04:32:43 2025 GMT Not After : Jul 10 04:32:43 2025 GMT Subject: CN=686607eb-d5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:a9:f0:70:7f:98:3d:f9:16:bb:d9:ca:7c: 1a:dc:73:ba:35:fa:71:09:ae:1e:dd:ac:e4:f1:70: 5c:eb:3b:a3:27:30:40:66:45:8e:22:83:61:9b:55: 61:bc:0c:a8:9e:65:65:c3:78:17:ef:6a:b0:df:93: 05:81:ce:f1:7c:6e:05:96:1e:61:61:81:35:09:69: 0c:70:28:d8:15:80:d0:88:e5:28:12:19:1f:04:c7: 7c:e7:7e:42:af:b6:09:bd:5a:94:ce:0e:d6:8e:1d: 60:3b:81:b2:b5:7c:9c:72:9a:c8:63:84:37:ee:ee: 63:2e:78:2e:ac:41:ec:c3:8f:0e:c6:d0:1f:a3:e7: 00:80:58:84:98:1e:01:5c:05:6e:37:b9:a8:8b:1c: 94:eb:3b:c3:aa:f2:fb:bd:26:5a:7a:f6:55:b5:6b: 9c:f2:97:31:03:f3:a7:94:a2:a2:19:45:db:06:e3: 62:d1:23:6f:a2:45:ff:17:3f:3d:bd:86:0c:8b:2b: b4:78:e4:2f:98:91:62:43:e2:51:50:73:d0:0c:00: f5:7e:7b:ce:40:ee:01:f7:37:14:af:1a:a2:c1:88: 06:72:c0:3f:45:90:ae:80:7e:99:46:22:7c:fd:44: 7a:03:73:f7:61:15:64:01:e2:6f:e5:2c:99:96:67: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:7B:E5:19:71:B5:91:DB:15:FB:03:8A:E4:67:50:F0:75:87:7C X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c7:bc:3e:95:c5:98:69:49:83:27:d5:32:23:b0:d3:c7:cc: 47:76:b9:3e:40:b0:b4:ff:86:23:37:50:63:9c:aa:23:da:37: fd:3a:3d:a3:5b:cd:65:e7:c7:bc:f9:9e:ef:92:a2:8a:91:56: 74:25:2a:ac:af:f8:40:72:bc:55:e8:32:a2:a5:c7:dd:bb:ef: 1e:da:3e:2b:d2:05:34:f7:8f:43:dc:e9:05:ba:d0:50:4a:93: b4:68:0d:ba:81:84:d5:ae:00:5f:b6:4e:5f:92:68:b3:b5:ef: 20:ab:86:be:68:75:72:5e:95:da:15:40:7b:62:8c:83:c1:ed: 74:b3:ef:e1:70:b3:65:b2:08:3b:c0:6a:94:7c:ff:ef:cc:be: 11:fa:89:f3:10:74:9e:bc:b9:bc:bf:6a:58:23:4e:e3:0b:97: ef:e0:04:e0:f3:17:93:1c:4b:0e:9f:71:4a:d5:d3:24:3c:42: c6:64:6d:3b:bc:7a:72:c4:80:73:10:17:e6:2e:0e:fb:bd:52: e6:8b:9b:db:17:8c:07:70:05:e2:2b:32:15:7c:b9:e4:89:54: 66:31:1e:a8:60:bf:19:76:ad:cb:0b:a8:9f:22:37:96:5c:78: 05:93:48:cf:a7:d2:e3:93:84:cb:df:41:0a:23:04:ab:53:f0: c4:dd:0b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUwNzAzMDQzMjQzWhcNMjUwNzEwMDQzMjQzWjAYMRYwFAYD VQQDEw02ODY2MDdlYi1kNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtap8HB/mD35FrvZynwa3HO6NfpxCa4e3azk8XBc6zujJzBAZkWOIoNhm1Vh vAyonmVlw3gX72qw35MFgc7xfG4Flh5hYYE1CWkMcCjYFYDQiOUoEhkfBMd8535C r7YJvVqUzg7Wjh1gO4GytXyccprIY4Q37u5jLngurEHsw48OxtAfo+cAgFiEmB4B XAVuN7moixyU6zvDqvL7vSZaevZVtWuc8pcxA/OnlKKiGUXbBuNi0SNvokX/Fz89 vYYMiyu0eOQvmJFiQ+JRUHPQDAD1fnvOQO4B9zcUrxqiwYgGcsA/RZCugH6ZRiJ8 /UR6A3P3YRVkAeJv5SyZlmcI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpwe+UZ cbWR2xX7A4rkZ1DwdYd8MB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBx7w+lcWYaUmDJ9UyI7DTx8xHdrk+QLC0/4YjN1BjnKoj2jf9Oj2j W81l58e8+Z7vkqKKkVZ0JSqsr/hAcrxV6DKipcfdu+8e2j4r0gU0949D3OkFutBQ SpO0aA26gYTVrgBftk5fkmizte8gq4a+aHVyXpXaFUB7YoyDwe10s+/hcLNlsgg7 wGqUfP/vzL4R+onzEHSevLm8v2pYI07jC5fv4ATg8xeTHEsOn3FK1dMkPELGZG07 vHpyxIBzEBfmLg77vVLmi5vbF4wHcAXiKzIVfLnkiVRmMR6oYL8Zdq3LC6ifIjeW XHgFk0jPp9Ljk4TL30EKIwSrU/DE3QtH -----END CERTIFICATE-----Generated at Thu Jul 3 21:19:50 2025 by rpki-client