$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: 1W2zjQc2vWWKV8Gu1gF2piuzw1eTwE4SVcodJtqC2CE= Subject key identifier: EC:04:A4:76:AA:73:EF:A0:8E:A6:78:CB:B9:BB:D0:46:88:F4:35:AE Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 25 Signing time: Thu 03 Jul 2025 08:04:58 +0000 Manifest this update: Thu 03 Jul 2025 08:04:57 +0000 Manifest next update: Thu 10 Jul 2025 08:04:57 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: 0+qradTJMLfSpFkQ/EcLnTjvU07o//0WRQCac3AB9Gs=) 2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Jul 3 08:04:57 2025 GMT Not After : Jul 10 08:04:57 2025 GMT Subject: CN=686639aa-86e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:c9:24:74:b0:b2:f8:4e:74:8e:90:a2:b6: f8:0c:6f:47:53:d4:be:24:2f:03:6d:34:c0:2c:77: 54:95:63:d6:38:cd:94:bc:ab:1a:3e:bc:66:02:ad: 85:22:27:e4:72:1b:ab:ba:2e:2e:2c:83:22:84:27: 17:ed:c7:e6:e4:c0:34:8a:7c:c5:5c:0b:22:85:7e: 9d:2e:7b:0a:3a:f6:6b:bd:dd:3e:7e:e0:3e:52:f4: 68:e8:a5:5e:a1:81:de:2f:00:b6:10:82:0b:75:16: 33:9e:46:11:96:f1:6c:c9:37:74:86:40:01:27:98: 86:b1:fe:ea:fd:52:a7:97:8d:82:89:bf:13:1b:23: 34:f6:3d:f2:8d:de:84:34:d5:aa:ee:b7:a0:cd:59: 77:7a:7f:63:db:64:65:03:8a:e2:61:9c:06:88:6b: c3:ba:ea:1d:22:38:2b:0a:4d:34:e1:c3:4f:0f:3c: 7c:4b:f1:a0:81:a9:60:e9:ac:d5:3f:4f:fd:03:34: 49:cd:41:2a:94:78:a3:a7:14:90:9a:5b:3f:19:6d: a6:8b:75:f5:28:fd:1b:5e:5a:3c:3a:a9:d0:15:62: fb:5f:9d:61:a2:17:36:a0:6f:bf:3e:01:09:c1:5c: 2c:bd:a5:ae:42:96:05:e2:c5:38:f1:6e:ac:57:bd: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:04:A4:76:AA:73:EF:A0:8E:A6:78:CB:B9:BB:D0:46:88:F4:35:AE X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:44:6b:fe:00:bd:cb:f9:9e:aa:6e:09:0d:7a:86:62:5d:8b: b1:6c:67:bc:9d:35:a9:0e:78:8d:71:20:ba:59:d5:dc:a4:81: 96:92:8e:d0:57:6d:46:60:92:c2:93:bd:b2:82:e7:56:53:c3: 8c:46:dd:81:7e:8b:f3:ee:cc:bc:ce:bd:98:01:65:0f:ce:aa: 8d:d2:d2:a3:5f:37:03:88:1e:22:4a:9b:e0:82:27:ad:f8:a2: f1:ce:97:51:63:f1:c5:db:a0:84:12:f6:f5:95:b2:18:dc:0a: 72:6c:a3:ce:b6:ce:b3:36:2f:ba:64:4c:ef:da:56:93:df:e9: 7c:b2:a5:9d:3a:e1:e9:83:02:ae:4e:c9:e1:81:4d:c3:28:ef: 69:09:33:66:0a:17:6d:74:50:e6:40:2b:2d:32:97:cc:bf:f3: 49:69:d8:b8:b8:b2:17:35:de:89:83:95:48:aa:e2:ec:64:34: 65:2f:c7:e0:d6:88:58:8f:e2:a4:c4:a4:4d:ec:b2:71:74:fe: 68:0e:27:91:f2:c9:0f:79:64:c7:e1:91:d5:94:7b:34:cc:36: dd:6a:97:4b:10:02:d5:ef:3b:cf:c9:e8:53:ff:26:15:3c:73: 17:c9:05:5c:4f:df:ba:c0:4d:1a:2c:9e:67:ca:9b:8a:60:16: c9:40:fa:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE MTY3NzRCMTAeFw0yNTA3MDMwODA0NTdaFw0yNTA3MTAwODA0NTdaMBgxFjAUBgNV BAMTDTY4NjYzOWFhLTg2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1y8kkdLCy+E50jpCitvgMb0dT1L4kLwNtNMAsd1SVY9Y4zZS8qxo+vGYCrYUi J+RyG6u6Li4sgyKEJxftx+bkwDSKfMVcCyKFfp0uewo69mu93T5+4D5S9GjopV6h gd4vALYQggt1FjOeRhGW8WzJN3SGQAEnmIax/ur9UqeXjYKJvxMbIzT2PfKN3oQ0 1arut6DNWXd6f2PbZGUDiuJhnAaIa8O66h0iOCsKTTThw08PPHxL8aCBqWDprNU/ T/0DNEnNQSqUeKOnFJCaWz8ZbaaLdfUo/RteWjw6qdAVYvtfnWGiFzagb78+AQnB XCy9pa5ClgXixTjxbqxXvWhxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7ASkdqpz 76COpnjLubvQRoj0Na4wHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0 QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFEa/4Avcv5nqpuCQ16hmJdi7FsZ7ydNakOeI1xILpZ1dykgZaSjtBX bUZgksKTvbKC51ZTw4xG3YF+i/PuzLzOvZgBZQ/Oqo3S0qNfNwOIHiJKm+CCJ634 ovHOl1Fj8cXboIQS9vWVshjcCnJso862zrM2L7pkTO/aVpPf6XyypZ064emDAq5O yeGBTcMo72kJM2YKF210UOZAKy0yl8y/80lp2Li4shc13omDlUiq4uxkNGUvx+DW iFiP4qTEpE3ssnF0/mgOJ5HyyQ95ZMfhkdWUezTMNt1ql0sQAtXvO8/J6FP/JhU8 cxfJBVxP37rATRosnmfKm4pgFslA+tw= -----END CERTIFICATE-----Generated at Thu Jul 3 21:00:08 2025 by rpki-client