$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: nu5JdL4g/CwVBs0F2BN3VMlVyMJZI1FzqeyxgiKkf7s= Subject key identifier: E1:C4:EC:9F:4C:55:07:02:FE:0E:47:66:67:AA:DF:D1:8B:B4:2A:CC Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 1B Signing time: Fri 13 Jun 2025 06:49:41 +0000 Manifest this update: Fri 13 Jun 2025 06:49:41 +0000 Manifest next update: Fri 20 Jun 2025 06:49:41 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: fOKlLbSFCeVVOmegOBrIqPJ7HoDF0CRXeIkEDtg3vKA=) 2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Jun 13 06:49:41 2025 GMT Not After : Jun 20 06:49:41 2025 GMT Subject: CN=684bca05-9606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:2b:11:fe:bd:7d:fc:3d:69:4d:2a:05:47: 22:da:61:b9:b8:17:4b:92:f5:11:a3:47:54:4a:af: a6:4c:81:56:01:c9:e9:33:f2:b5:95:97:39:50:31: 20:f5:28:a7:5b:70:b0:a9:a9:02:4f:39:3b:21:93: cd:1d:c4:2f:51:01:78:09:65:28:d7:96:79:e0:13: a1:90:bd:03:8f:22:0c:8a:c3:2a:3a:3a:9e:b7:87: 1e:55:41:f3:4d:50:ee:ba:46:3e:f8:17:5a:13:59: 85:91:35:66:bf:df:82:4d:75:d9:df:c9:03:73:9b: 6e:fe:63:73:ee:27:86:23:bd:aa:55:c3:a5:e0:6e: 74:9e:4b:90:d7:f5:6d:84:f5:31:0a:ee:31:58:5b: df:98:e2:8b:8e:8f:9a:42:22:eb:01:76:04:e9:06: e0:23:e6:98:37:81:fa:a9:ef:9a:9c:2d:c4:7a:85: 29:eb:09:bf:49:f7:01:d5:88:86:6b:d5:00:41:ee: 2c:8f:ba:89:9e:4c:ee:92:fd:67:dc:43:57:e1:ab: e9:f9:3c:a5:7a:17:9c:ea:92:55:d0:01:04:94:49: 0c:8d:d7:ff:e2:f2:d7:54:5c:1a:40:91:21:4b:ff: 0b:f6:13:18:13:77:b2:db:22:c6:e0:80:3c:ca:5b: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C4:EC:9F:4C:55:07:02:FE:0E:47:66:67:AA:DF:D1:8B:B4:2A:CC X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:35:68:ef:e4:2a:b3:71:eb:9a:7a:2d:5d:00:96:73:41:de: 09:84:dd:29:20:14:af:62:67:9b:6b:a2:46:65:ed:30:3a:84: 10:ed:50:a6:c2:4a:d2:b5:e3:35:c5:5b:3e:53:53:e3:6e:10: c9:6f:07:18:7e:89:e6:d3:a7:93:e8:6e:6c:c1:e3:d1:52:4e: d2:c9:84:41:33:c8:06:c2:bc:40:98:86:15:05:1b:7c:24:88: d3:e7:78:87:26:e2:6b:3f:5f:34:b8:af:5a:2e:5c:68:38:6c: 13:87:7a:e3:3f:ac:6b:b7:7a:94:b0:e2:49:1e:d0:d4:bb:8c: 7b:fc:d8:b4:ac:81:b4:6f:1a:ec:89:6c:36:fc:e4:aa:13:ca: 28:19:92:de:7e:aa:02:e5:d5:cd:61:fa:3e:88:5c:7e:a3:f9: f2:7b:ae:4e:26:d6:fe:64:e0:a5:91:d2:2a:ba:17:67:a9:89: 19:d5:59:11:c0:e1:08:d3:00:e4:a8:37:29:89:a3:78:3e:d8: 8e:08:df:5f:04:4a:d4:d3:ff:57:11:37:1f:ec:51:1f:7f:fd: 91:23:55:96:60:ca:80:cc:76:61:e6:6a:0b:28:33:a4:a1:ed: 40:a8:6e:c0:22:d6:a5:26:1c:da:a6:ab:50:4a:64:d6:d5:83: 94:d9:e0:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE MTY3NzRCMTAeFw0yNTA2MTMwNjQ5NDFaFw0yNTA2MjAwNjQ5NDFaMBgxFjAUBgNV BAMTDTY4NGJjYTA1LTk2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzuysR/r19/D1pTSoFRyLaYbm4F0uS9RGjR1RKr6ZMgVYByekz8rWVlzlQMSD1 KKdbcLCpqQJPOTshk80dxC9RAXgJZSjXlnngE6GQvQOPIgyKwyo6Op63hx5VQfNN UO66Rj74F1oTWYWRNWa/34JNddnfyQNzm27+Y3PuJ4YjvapVw6XgbnSeS5DX9W2E 9TEK7jFYW9+Y4ouOj5pCIusBdgTpBuAj5pg3gfqp75qcLcR6hSnrCb9J9wHViIZr 1QBB7iyPuomeTO6S/WfcQ1fhq+n5PKV6F5zqklXQAQSUSQyN1//i8tdUXBpAkSFL /wv2ExgTd7LbIsbggDzKW1lnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4cTsn0xV BwL+DkdmZ6rf0Yu0KswwHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0 QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC01aO/kKrNx65p6LV0AlnNB3gmE3SkgFK9iZ5trokZl7TA6hBDtUKbC StK14zXFWz5TU+NuEMlvBxh+iebTp5PobmzB49FSTtLJhEEzyAbCvECYhhUFG3wk iNPneIcm4ms/XzS4r1ouXGg4bBOHeuM/rGu3epSw4kke0NS7jHv82LSsgbRvGuyJ bDb85KoTyigZkt5+qgLl1c1h+j6IXH6j+fJ7rk4m1v5k4KWR0iq6F2epiRnVWRHA 4QjTAOSoNymJo3g+2I4I318EStTT/1cRNx/sUR9//ZEjVZZgyoDMdmHmagsoM6Sh 7UCobsAi1qUmHNqmq1BKZNbVg5TZ4FI= -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:34 2025 by rpki-client