$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: kC4KtoLew3AhZi93xRBpnbLLIF66b6SMuOeVUBsp1xQ= Subject key identifier: 49:C4:DB:D9:BD:FE:68:AF:73:9B:07:0B:E8:2B:8D:32:E8:7C:9A:AE Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 61 Signing time: Sun 19 Oct 2025 10:30:59 +0000 Manifest this update: Sun 19 Oct 2025 10:30:59 +0000 Manifest next update: Sun 26 Oct 2025 10:30:59 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: 60Joqd9SeN99dlPkgdKmtZPdZLXCJ4+TCk3aShqGqV8=) 2: E31A926E6EAF11F088699976C4F9AE02.roa (hash: P2RdO098bgYaocfJCLZoV5dDTfBgyVfqd+4HH9FeoeI=) 3: F5CE8322AA8A11F0B2091087C4F9AE02.roa (hash: FXPDJuq/zjZiA2D6rc5QgOXQ/HXgvP43gQ4VPzDOmQM=) 4: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Oct 19 10:30:59 2025 GMT Not After : Oct 26 10:30:59 2025 GMT Subject: CN=68f4bde3-04fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:c9:50:1a:5f:dd:a7:d0:1e:16:90:24:66: 9f:db:1a:32:fa:60:bb:c2:ca:b5:a5:6d:9f:e2:9c: a2:9c:02:9b:88:31:a9:53:ca:1c:f5:b3:96:f9:24: e4:8c:31:1a:f5:81:d4:0e:01:e6:5b:19:f7:a9:db: 95:74:97:ff:32:30:cb:8a:42:a8:06:3b:40:54:94: db:ea:ed:eb:a1:44:c6:45:28:0c:f8:26:a1:31:75: e9:3b:f2:f3:69:e9:c9:91:f3:cd:4d:8e:87:3c:02: 4b:81:65:92:95:91:97:33:0c:68:7f:6d:ed:a6:44: aa:ba:8d:3b:38:6b:0d:2f:a4:37:69:3c:cb:65:29: 72:72:a1:92:fc:bd:c5:a5:12:ef:c6:ce:30:4c:89: 4b:d6:5b:c9:44:e8:c1:b5:6c:fe:36:f0:ab:eb:f0: a6:9d:b5:aa:82:6b:1d:d4:51:43:7e:98:58:7f:72: 1f:d5:c7:c7:57:f1:4c:b6:17:be:ca:2a:c7:80:e4: 90:b5:e4:d6:eb:fe:5b:e8:0c:c5:09:db:dc:a2:d7: c8:45:08:88:f5:1f:de:af:11:78:dd:85:c7:aa:eb: a7:9d:5e:9b:f6:f8:6e:5a:f6:05:ae:66:19:ee:50: 23:dc:84:91:23:7c:56:9f:2d:48:77:9d:52:17:80: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:DB:D9:BD:FE:68:AF:73:9B:07:0B:E8:2B:8D:32:E8:7C:9A:AE X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f8:05:c9:e3:b1:d8:67:a1:ef:5d:cb:41:b4:8a:4a:e1:6b: 0c:1d:d2:a3:be:27:e4:e1:42:14:68:80:d0:36:6d:93:e5:86: 9f:f7:08:5e:4d:36:10:20:5f:b0:2c:08:88:3f:cb:c9:5b:3e: ec:ca:a7:a8:ad:a6:99:04:44:07:c9:a8:83:4e:87:22:cf:e6: a3:29:6e:fc:b6:a3:84:a9:75:f5:6a:2d:d1:90:1c:72:61:ed: c7:c6:f8:24:e9:ab:21:a3:3f:2f:69:9e:e6:4b:b7:2f:ea:31: 7e:a7:fb:bb:2b:c4:a5:fe:eb:4b:c6:80:50:25:fe:b5:2e:3c: 7a:6a:39:c0:db:a7:db:f7:92:33:eb:16:29:13:8a:18:90:61: d7:cc:ff:b3:3e:a6:62:26:32:1f:c9:14:2d:25:19:a4:ad:40: c3:22:3b:52:8c:c7:5c:c8:cd:89:92:d5:ec:5b:17:10:96:b7: b0:0b:c3:0f:ca:2f:c2:ec:dd:1b:e5:b3:4d:7a:10:b6:3f:5b: 5a:8a:ad:04:5e:15:80:b8:47:a4:36:9f:a0:b5:de:97:9a:6d: f0:b6:e3:3a:13:0e:f0:88:ef:2c:17:0c:c3:6a:a2:a1:c3:b6: 36:77:5c:6e:8a:86:24:fb:ea:09:50:7f:ed:41:21:e3:37:38: a3:35:36:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE MTY3NzRCMTAeFw0yNTEwMTkxMDMwNTlaFw0yNTEwMjYxMDMwNTlaMBgxFjAUBgNV BAMTDTY4ZjRiZGUzLTA0ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoaMlQGl/dp9AeFpAkZp/bGjL6YLvCyrWlbZ/inKKcApuIMalTyhz1s5b5JOSM MRr1gdQOAeZbGfep25V0l/8yMMuKQqgGO0BUlNvq7euhRMZFKAz4JqExdek78vNp 6cmR881Njoc8AkuBZZKVkZczDGh/be2mRKq6jTs4aw0vpDdpPMtlKXJyoZL8vcWl Eu/GzjBMiUvWW8lE6MG1bP428Kvr8KadtaqCax3UUUN+mFh/ch/Vx8dX8Uy2F77K KseA5JC15Nbr/lvoDMUJ29yi18hFCIj1H96vEXjdhceq66edXpv2+G5a9gWuZhnu UCPchJEjfFafLUh3nVIXgMnVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUScTb2b3+ aK9zmwcL6CuNMuh8mq4wHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0 QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFb4Bcnjsdhnoe9dy0G0ikrhawwd0qO+J+ThQhRogNA2bZPlhp/3CF5N NhAgX7AsCIg/y8lbPuzKp6itppkERAfJqINOhyLP5qMpbvy2o4SpdfVqLdGQHHJh 7cfG+CTpqyGjPy9pnuZLty/qMX6n+7srxKX+60vGgFAl/rUuPHpqOcDbp9v3kjPr FikTihiQYdfM/7M+pmImMh/JFC0lGaStQMMiO1KMx1zIzYmS1exbFxCWt7ALww/K L8Ls3Rvls016ELY/W1qKrQReFYC4R6Q2n6C13peabfC24zoTDvCI7ywXDMNqoqHD tjZ3XG6KhiT76glQf+1BIeM3OKM1NjE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:22 2025 by rpki-client