$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: uM93t5Eos+dUr+RRRSvHq9YX3K4c1fLCyW6WvZCk/IU= Subject key identifier: EB:97:3C:F3:FD:2B:7C:FB:84:B8:CF:EF:71:36:89:71:DC:12:EE:A1 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0C8C Signing time: Wed 02 Jul 2025 18:30:33 +0000 Manifest this update: Wed 02 Jul 2025 18:30:33 +0000 Manifest next update: Wed 09 Jul 2025 18:30:33 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: Rcvk2epqka15VcrxwcfMf6YAN50qyGyC90Ml57SBHH8=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: KJiTJQnlya7yc1gVeGhk9f8wqpXCXgsDbpb8Ndl9Q5Q=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: tIg3kB0f/wtqp+Q6ik7/n7dKrrQEFLMxhaaJzHV4nr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Jul 2 18:30:33 2025 GMT Not After : Jul 9 18:30:33 2025 GMT Subject: CN=68657ac9-dd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:e2:2b:00:ad:a7:c7:85:52:0b:07:94:87: fe:d6:43:bc:3b:e7:e7:11:1f:41:f3:ca:2b:bb:a0: 67:c4:53:fd:2c:cc:f6:80:cb:d1:20:9d:ef:11:be: 4d:5e:17:6b:c7:9e:a4:2a:f6:bd:63:27:64:0b:f6: ed:9c:d3:05:d7:05:20:30:a7:04:81:9a:a1:ae:a0: a9:33:44:53:5c:b8:39:9b:ea:38:44:81:9d:b0:93: ad:af:47:b2:2d:e2:4d:07:ab:43:f9:fe:d5:84:a7: 01:e8:28:bf:07:1a:4e:a8:d8:35:b8:fb:62:bf:e2: 13:49:88:f7:ae:0a:da:10:81:4e:24:b6:fa:45:e3: 3c:7c:0c:3e:35:b3:bc:00:84:1b:7a:e2:fa:de:ca: ae:33:9d:1f:56:ab:c0:e9:d4:a3:b1:a8:cd:7a:ca: d2:61:b5:6b:58:94:e7:6c:12:db:ce:a1:99:67:f0: f2:02:36:04:f1:96:f6:43:80:e4:2c:80:65:b1:82: 60:45:f1:2b:db:f1:c1:c1:5c:ab:36:7c:2c:68:42: be:d5:d1:dc:d3:e3:ac:48:cf:ad:a1:bf:4b:1e:e0: 8d:1c:2f:a9:53:b6:58:34:96:60:c6:0c:bf:b7:72: 38:85:45:de:80:96:59:0f:2e:d8:71:2d:07:ce:e1: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:97:3C:F3:FD:2B:7C:FB:84:B8:CF:EF:71:36:89:71:DC:12:EE:A1 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c0:ba:bf:5e:26:85:27:94:bd:0e:e2:30:e8:c2:3d:df:ed: 0d:17:7c:6c:88:ed:2b:71:bb:10:19:e3:4d:36:71:65:4e:45: 40:03:58:99:97:27:d9:7d:bc:df:53:3f:dc:d3:a6:c6:99:7b: 4c:e4:a8:72:11:14:1c:91:2e:6e:33:b4:55:10:8b:0d:45:b1: 7d:b4:66:9c:8f:b2:e8:da:d2:56:e8:70:de:ab:9d:67:fd:51: f5:12:5f:83:3a:30:e3:1e:42:5c:7b:b5:14:75:f9:93:ef:a6: 09:e5:6c:8e:5e:06:f0:ca:e6:43:13:f1:8e:1a:be:b9:f2:48: e8:15:21:3d:15:25:b0:88:32:cd:81:9b:44:25:c9:b3:f2:6e: 11:b1:85:66:38:ad:4c:c3:61:cf:ed:f4:f8:03:47:72:46:6b: 2a:03:11:a2:20:f6:7e:c1:45:e9:bb:2d:7e:7b:54:51:bf:23: 5d:67:b7:2f:4c:49:6a:aa:62:5c:61:3b:1a:db:a5:7c:63:d8: c8:b8:b8:1a:4d:cb:95:16:bc:c1:3b:d0:b1:38:76:c1:38:c6: b0:80:f2:01:07:7f:b2:e6:44:94:f0:24:87:c8:b4:e0:2d:ea: 3c:b4:bd:e6:70:d0:38:d2:9a:ec:00:82:f5:bb:b3:28:ec:38: b5:97:29:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUwNzAyMTgzMDMzWhcNMjUwNzA5MTgzMDMzWjAYMRYwFAYD VQQDEw02ODY1N2FjOS1kZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEriKwCtp8eFUgsHlIf+1kO8O+fnER9B88oru6BnxFP9LMz2gMvRIJ3vEb5N Xhdrx56kKva9YydkC/btnNMF1wUgMKcEgZqhrqCpM0RTXLg5m+o4RIGdsJOtr0ey LeJNB6tD+f7VhKcB6Ci/BxpOqNg1uPtiv+ITSYj3rgraEIFOJLb6ReM8fAw+NbO8 AIQbeuL63squM50fVqvA6dSjsajNesrSYbVrWJTnbBLbzqGZZ/DyAjYE8Zb2Q4Dk LIBlsYJgRfEr2/HBwVyrNnwsaEK+1dHc0+OsSM+tob9LHuCNHC+pU7ZYNJZgxgy/ t3I4hUXegJZZDy7YcS0HzuFl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuXPPP9 K3z7hLjP73E2iXHcEu6hMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9wLq/XiaFJ5S9DuIw6MI93+0NF3xsiO0rcbsQGeNNNnFlTkVAA1iZ lyfZfbzfUz/c06bGmXtM5KhyERQckS5uM7RVEIsNRbF9tGacj7Lo2tJW6HDeq51n /VH1El+DOjDjHkJce7UUdfmT76YJ5WyOXgbwyuZDE/GOGr658kjoFSE9FSWwiDLN gZtEJcmz8m4RsYVmOK1Mw2HP7fT4A0dyRmsqAxGiIPZ+wUXpuy1+e1RRvyNdZ7cv TElqqmJcYTsa26V8Y9jIuLgaTcuVFrzBO9CxOHbBOMawgPIBB3+y5kSU8CSHyLTg Leo8tL3mcNA40prsAIL1u7Mo7Di1lyll -----END CERTIFICATE-----Generated at Thu Jul 3 09:50:46 2025 by rpki-client