$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json) Hash identifier: BR2PJNUDMZM0GhuhZAFmKFgybPKSXeRZ3U/RgWQDWcE= Subject key identifier: 81:BC:EE:A8:60:E7:FA:EE:C0:30:0F:6A:D1:BD:91:86:8F:4B:B7:B6 Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64 Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft Manifest number: 0621 Signing time: Fri 18 Jul 2025 23:18:29 +0000 Manifest this update: Fri 18 Jul 2025 23:18:29 +0000 Manifest next update: Fri 25 Jul 2025 23:18:29 +0000 Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: gAap+yrRErZm0R1Ab8dCskj6Rfw4Ka0uTnyIjmmsvcI=) 2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: 6YYJp70ovWJbV5hwBiIeegk/fbVe4hEWR6AUPM6tWHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064 Validity Not Before: Jul 18 23:18:29 2025 GMT Not After : Jul 25 23:18:29 2025 GMT Subject: CN=687ad645-959f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:55:e9:78:81:e4:62:a4:48:be:88:1e:c4: 26:af:12:7c:97:e4:ab:43:73:47:02:bf:7f:45:69: b2:4d:e0:ed:39:49:9d:c6:05:c0:17:30:cd:80:7a: e3:36:a0:eb:8d:5f:5a:87:bf:cc:34:4b:f4:33:a8: 21:41:87:86:b3:d6:e1:c2:10:10:4a:57:c9:ed:82: dc:45:c1:22:29:74:31:89:a4:8c:51:17:ed:b0:01: 27:72:60:f3:44:64:9c:14:f9:ca:8e:ea:73:cb:b5: eb:44:90:29:2d:9a:5a:b6:73:90:44:35:4a:42:d1: e6:29:cb:f6:86:37:0d:8c:86:58:ad:41:60:6f:3b: 7c:30:89:c9:66:bc:8e:54:70:90:bc:dc:fb:4a:89: a5:19:3e:cc:a1:8c:ff:0b:d9:e2:5d:8c:df:87:03: 48:0d:17:0c:3c:b5:ef:97:6a:66:ed:f1:fc:75:da: cb:94:69:5e:9e:4a:78:04:af:ee:7a:ce:75:51:53: 6b:bf:12:ad:92:e7:50:4b:c3:ad:57:b1:32:6d:62: 91:35:51:26:e9:7f:16:00:78:06:32:3e:7c:16:1b: 15:a0:81:87:3a:d0:ce:56:fb:e0:aa:b0:7f:bf:35: 63:93:79:ac:15:4d:33:e8:64:0f:57:2b:7a:ea:10: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:EE:A8:60:E7:FA:EE:C0:30:0F:6A:D1:BD:91:86:8F:4B:B7:B6 X509v3 Authority Key Identifier: keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:03:03:81:d3:e8:20:fd:84:f3:7e:bf:dd:12:ea:cc:89:01: bd:98:78:7b:34:b5:5d:6b:43:9f:af:af:c5:a9:ba:da:ed:8e: 90:3a:f8:3c:98:df:94:9c:b9:73:e7:32:76:1f:1a:26:7c:38: 5d:01:dd:62:d9:cf:84:28:84:b1:e5:b6:27:76:ba:74:0e:f8: 01:86:83:f8:c6:10:7d:d7:96:77:db:8d:85:d5:23:ed:d8:1b: be:1d:1b:70:85:8d:c3:06:90:5a:d6:d4:68:ff:f9:5c:7d:84: ea:c6:94:fd:39:af:c6:3c:54:21:00:06:b8:d1:b1:7b:54:f6: 87:ad:9e:84:fc:59:22:34:3f:86:d0:80:51:bd:9e:e7:fd:b9: ef:60:54:c5:7a:c9:6c:55:e7:a8:b3:d0:d8:1f:cc:d5:13:e4: 91:e7:5a:c3:25:c7:81:d2:2c:1a:35:52:f6:b4:77:67:c1:92: 0c:a1:02:f3:6c:70:ad:bb:13:0c:62:d7:62:48:a5:d0:74:47: 72:bf:05:94:13:33:78:32:9f:c3:c1:37:34:e9:96:21:51:45: c3:06:1a:43:55:45:92:95:6c:15:d7:34:51:fb:5d:ac:e6:c7: 24:3d:65:14:8a:e1:87:64:21:ff:48:73:12:f7:df:16:b3:f1: f7:04:17:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBODIxMTAvBgNVBAUTKEQyQTA4NzFCQ0Q4Mzc2QzExQThGMDQ5QTM5ODU1QUZD REIxODMwNjQwHhcNMjUwNzE4MjMxODI5WhcNMjUwNzI1MjMxODI5WjAYMRYwFAYD VQQDEw02ODdhZDY0NS05NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5hV6XiB5GKkSL6IHsQmrxJ8l+SrQ3NHAr9/RWmyTeDtOUmdxgXAFzDNgHrj NqDrjV9ah7/MNEv0M6ghQYeGs9bhwhAQSlfJ7YLcRcEiKXQxiaSMURftsAEncmDz RGScFPnKjupzy7XrRJApLZpatnOQRDVKQtHmKcv2hjcNjIZYrUFgbzt8MInJZryO VHCQvNz7SomlGT7MoYz/C9niXYzfhwNIDRcMPLXvl2pm7fH8ddrLlGlenkp4BK/u es51UVNrvxKtkudQS8OtV7EybWKRNVEm6X8WAHgGMj58FhsVoIGHOtDOVvvgqrB/ vzVjk3msFU0z6GQPVyt66hCydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG87qhg 5/ruwDAPatG9kYaPS7e2MB8GA1UdIwQYMBaAFNKghxvNg3bBGo8EmjmFWvzbGDBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E4Mi8wQkVCMzc1QUJF NDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRzRWFqd1NhT1lWYV9Oc1lN R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxQ0hHODJEZHNFYWp3U2FPWVZhX05zWU1HUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E4Mi8wQkVCMzc1QUJFNDQxMUVCQUUzRDQzNDhDNEY5QUUwMi8wcUNIRzgyRGRz RWFqd1NhT1lWYV9Oc1lNR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeAwOB0+gg/YTzfr/dEurMiQG9mHh7NLVda0Ofr6/Fqbra7Y6QOvg8 mN+UnLlz5zJ2HxomfDhdAd1i2c+EKISx5bYndrp0DvgBhoP4xhB915Z3242F1SPt 2Bu+HRtwhY3DBpBa1tRo//lcfYTqxpT9Oa/GPFQhAAa40bF7VPaHrZ6E/FkiND+G 0IBRvZ7n/bnvYFTFeslsVeeos9DYH8zVE+SR51rDJceB0iwaNVL2tHdnwZIMoQLz bHCtuxMMYtdiSKXQdEdyvwWUEzN4Mp/DwTc06ZYhUUXDBhpDVUWSlWwV1zRR+12s 5sckPWUUiuGHZCH/SHMS998Ws/H3BBdN -----END CERTIFICATE-----Generated at Sun Jul 20 08:01:51 2025 by rpki-client