$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: 0UUwSPLf4qzeQHRiY9uaDT/jB9wb6SmnHqYxb7HAYJE= Subject key identifier: E8:18:F2:A1:58:B4:8B:59:FC:E1:E6:AD:CF:C0:63:CE:8A:FD:24:5D Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01AA Signing time: Sat 19 Jul 2025 03:27:09 +0000 Manifest this update: Sat 19 Jul 2025 03:27:08 +0000 Manifest next update: Sat 26 Jul 2025 03:27:08 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: ukaGdvFDQUAH2RMAnakAOv63UeOICxNTpJ1NIbEEwXw=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Jul 19 03:27:08 2025 GMT Not After : Jul 26 03:27:08 2025 GMT Subject: CN=687b108d-8698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:22:10:42:1a:bd:ea:3a:ce:10:c2:ae:9a: ec:21:de:c5:2d:e3:1a:af:90:3c:c2:da:43:a0:4b: 3b:28:52:38:66:34:1a:42:48:7d:4e:7a:b6:35:fd: 37:9c:dc:f1:b0:cc:3d:70:a4:5c:0d:8c:41:76:db: 46:f3:a8:c6:f5:ec:30:1b:2b:6e:db:c8:50:9b:84: 09:24:3d:f2:68:14:a3:fa:28:2a:eb:df:f1:fa:e6: 8f:23:68:ee:93:43:57:ab:d5:d8:aa:b6:bd:b8:4a: cc:20:69:98:89:76:a8:79:9c:da:2e:39:80:68:e6: b0:dc:bd:17:e7:3a:0f:ae:7f:ba:9e:9c:d7:47:b7: 17:cc:a6:c3:6d:de:65:d3:9b:2c:33:f8:aa:06:71: 09:28:5e:51:f6:e9:59:6c:06:03:69:15:63:81:6a: 4e:20:55:83:1e:b5:ef:c0:0e:a1:11:4a:3b:ef:0b: ac:98:ef:7f:e8:1c:04:8c:a2:b4:36:27:2e:23:fe: 87:6d:f5:3c:92:d7:de:b6:dd:7b:e0:0b:f0:18:44: cd:99:ab:2c:30:2e:9e:ae:4c:e7:c2:e2:1f:6b:96: d1:d4:f5:e9:61:cb:9c:a7:86:7d:34:72:9b:39:7e: e7:38:09:78:4c:20:84:6f:3b:90:1e:23:13:f2:f8: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:F2:A1:58:B4:8B:59:FC:E1:E6:AD:CF:C0:63:CE:8A:FD:24:5D X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:9d:4a:7c:ec:62:9f:2a:10:3e:80:17:84:24:29:b9:e2:c6: 2e:43:5f:d2:6f:8e:36:7f:15:65:6c:da:74:c8:93:21:15:45: e6:cd:00:0b:bb:8f:fd:72:42:90:5a:57:38:14:30:77:5c:bf: b2:0c:b0:c0:0a:92:e8:5a:97:4a:19:71:c0:40:74:b2:e6:a9: 3e:9b:c7:36:3a:9b:c6:bf:e5:07:5a:02:eb:32:f8:88:b8:7f: 0e:7b:af:37:f2:5b:71:7c:3c:df:80:ca:ea:68:68:3a:f3:80: b2:c0:a9:a9:ac:f0:63:0c:14:5c:a8:a6:ce:73:d0:20:b6:d8: a6:cd:d8:08:ba:97:9e:c7:9d:05:87:06:07:dd:07:f6:b0:7d: 8d:09:5f:72:5b:08:31:d7:d9:e0:80:05:02:01:cd:58:3c:1a: 88:90:8d:7e:b0:4f:ab:21:ea:17:eb:b6:ed:0c:92:88:0b:e2: c4:d5:ee:53:69:39:33:de:55:37:f5:c9:98:bb:f1:1e:f3:85: f0:b9:b7:db:57:da:b9:c5:f5:7e:88:8b:2d:58:4d:67:a2:8a: af:ff:c6:66:2e:17:24:c0:5e:e0:57:aa:42:93:47:11:bf:f5: 80:13:96:3e:75:84:d2:48:d1:39:3f:96:e5:6a:9c:08:cb:f0: eb:b1:85:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwNzE5MDMyNzA4WhcNMjUwNzI2MDMyNzA4WjAYMRYwFAYD VQQDEw02ODdiMTA4ZC04Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12QiEEIaveo6zhDCrprsId7FLeMar5A8wtpDoEs7KFI4ZjQaQkh9Tnq2Nf03 nNzxsMw9cKRcDYxBdttG86jG9ewwGytu28hQm4QJJD3yaBSj+igq69/x+uaPI2ju k0NXq9XYqra9uErMIGmYiXaoeZzaLjmAaOaw3L0X5zoPrn+6npzXR7cXzKbDbd5l 05ssM/iqBnEJKF5R9ulZbAYDaRVjgWpOIFWDHrXvwA6hEUo77wusmO9/6BwEjKK0 NicuI/6HbfU8ktfett174AvwGETNmassMC6erkznwuIfa5bR1PXpYcucp4Z9NHKb OX7nOAl4TCCEbzuQHiMT8viRCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgY8qFY tItZ/OHmrc/AY86K/SRdMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqnUp87GKfKhA+gBeEJCm54sYuQ1/Sb442fxVlbNp0yJMhFUXmzQAL u4/9ckKQWlc4FDB3XL+yDLDACpLoWpdKGXHAQHSy5qk+m8c2OpvGv+UHWgLrMviI uH8Oe6838ltxfDzfgMrqaGg684CywKmprPBjDBRcqKbOc9AgttimzdgIupeex50F hwYH3Qf2sH2NCV9yWwgx19nggAUCAc1YPBqIkI1+sE+rIeoX67btDJKIC+LE1e5T aTkz3lU39cmYu/Ee84XwubfbV9q5xfV+iIstWE1nooqv/8ZmLhckwF7gV6pCk0cR v/WAE5Y+dYTSSNE5P5blapwIy/DrsYXi -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:45 2025 by rpki-client