$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: vQvOSXtNy0QbhHIN8KuH+zLqYT4Fk+lxAvlEHP5tcec= Subject key identifier: 58:32:AD:AF:10:A6:27:EB:65:58:B6:C5:31:BF:FD:A0:C6:26:B3:71 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 03BE Signing time: Sun 03 Aug 2025 01:13:06 +0000 Manifest this update: Sun 03 Aug 2025 01:13:06 +0000 Manifest next update: Sun 10 Aug 2025 01:13:06 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: 6OmZCGAg86vyAZwxGnCtQFuIpcusCbK1M/rO48tOJ6o=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Aug 3 01:13:06 2025 GMT Not After : Aug 10 01:13:06 2025 GMT Subject: CN=688eb7a2-3940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:54:d6:22:de:80:ef:68:53:70:ae:e9:27: 87:6b:0e:ff:1c:50:19:88:f0:e4:52:c9:11:13:28: 0d:59:38:e0:f5:08:5b:ea:c3:e7:39:65:11:45:c5: 17:98:c4:21:a5:67:0d:e0:bb:0d:2b:9d:21:0f:6c: 08:07:af:4e:f8:5a:83:28:ff:16:a6:88:f8:17:39: d6:7b:65:ee:a9:8a:e4:65:6f:30:aa:11:27:60:ce: 3f:fc:aa:73:f1:9b:6c:1b:ba:ef:7c:2f:e0:f2:09: 64:66:89:71:0c:7d:17:c9:2b:b0:0e:e6:5e:47:52: 42:38:1f:c7:9e:0f:e0:bd:55:bc:90:53:57:29:ff: ef:24:d8:7d:e4:fe:1f:2b:56:ae:1b:6b:57:c0:28: e9:3b:1e:a4:67:d6:65:fa:37:c0:9b:b6:3a:ef:9f: 0e:44:02:bb:ff:f3:bc:45:e7:6b:3e:e5:a4:58:7a: 2c:b8:40:cc:cc:c6:0e:ad:99:07:7b:d7:96:23:45: ff:78:ef:64:bf:69:1e:1e:d2:e3:89:a3:1f:1c:28: fd:38:af:f1:07:0e:e2:ac:e9:84:de:af:e1:86:21: 2c:6e:b8:c1:7a:b4:f3:06:a3:f2:72:2e:45:19:2f: 51:60:bd:1e:99:7f:ae:fd:9c:e8:80:68:f9:27:84: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:32:AD:AF:10:A6:27:EB:65:58:B6:C5:31:BF:FD:A0:C6:26:B3:71 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:dc:1a:35:91:dc:6e:55:06:48:1c:dc:d6:6c:9c:c7:07:64: b3:de:fb:05:11:80:dc:d8:78:d4:f2:67:52:5d:cb:23:2b:09: 64:e5:8f:db:23:ac:8b:84:c5:4c:98:6d:2a:3c:c8:23:c2:92: d1:83:5c:c3:6b:d3:63:ad:eb:a9:06:0b:49:98:cc:75:f0:e9: 1a:a8:d3:da:a0:30:10:f3:e4:86:48:4b:1b:7a:23:f5:c7:4e: 6c:0d:74:05:18:e2:81:85:b6:19:0b:9f:85:05:b6:c9:76:5f: 94:9e:f0:d9:8c:6c:5b:7b:ef:9e:65:b9:3b:18:9c:19:d8:0a: 9e:10:95:d1:95:10:a3:51:3b:c4:5d:cb:79:ee:db:e8:8e:c3: ec:8f:a5:e3:6c:d2:4c:76:97:a7:76:41:3c:7d:1c:b2:c9:a6: dc:5d:03:69:89:46:71:bb:7c:76:b1:e4:59:ca:ef:83:f6:90: 8e:dd:cb:06:d0:3f:9c:c3:28:d0:df:d1:45:cb:8d:d9:84:b0: 3a:de:5e:28:45:08:62:4e:c8:63:a3:97:05:ea:18:7d:75:a4: e7:cf:5d:6e:3b:86:9b:50:b1:b7:c0:c2:7a:8c:f3:66:16:b4: ae:7f:46:ed:62:0e:00:6e:cf:5f:7e:37:1b:41:96:ea:50:7c: 93:c7:6f:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUwODAzMDExMzA2WhcNMjUwODEwMDExMzA2WjAYMRYwFAYD VQQDEw02ODhlYjdhMi0zOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BlU1iLegO9oU3Cu6SeHaw7/HFAZiPDkUskREygNWTjg9Qhb6sPnOWURRcUX mMQhpWcN4LsNK50hD2wIB69O+FqDKP8Wpoj4FznWe2XuqYrkZW8wqhEnYM4//Kpz 8ZtsG7rvfC/g8glkZolxDH0XySuwDuZeR1JCOB/Hng/gvVW8kFNXKf/vJNh95P4f K1auG2tXwCjpOx6kZ9Zl+jfAm7Y6758ORAK7//O8RedrPuWkWHosuEDMzMYOrZkH e9eWI0X/eO9kv2keHtLjiaMfHCj9OK/xBw7irOmE3q/hhiEsbrjBerTzBqPyci5F GS9RYL0emX+u/ZzogGj5J4S2EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgyra8Q pifrZVi2xTG//aDGJrNxMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53Bo1kdxuVQZIHNzWbJzHB2Sz3vsFEYDc2HjU8mdSXcsjKwlk5Y/b I6yLhMVMmG0qPMgjwpLRg1zDa9NjreupBgtJmMx18OkaqNPaoDAQ8+SGSEsbeiP1 x05sDXQFGOKBhbYZC5+FBbbJdl+UnvDZjGxbe++eZbk7GJwZ2AqeEJXRlRCjUTvE Xct57tvojsPsj6XjbNJMdpendkE8fRyyyabcXQNpiUZxu3x2seRZyu+D9pCO3csG 0D+cwyjQ39FFy43ZhLA63l4oRQhiTshjo5cF6hh9daTnz11uO4abULG3wMJ6jPNm FrSuf0btYg4Abs9ffjcbQZbqUHyTx29e -----END CERTIFICATE-----Generated at Mon Aug 4 11:26:43 2025 by rpki-client