$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: KAQV2wHs9yrypnFsI/GGFuKLl1p1n8TwICQ4m15pBf0= Subject key identifier: A2:A2:9C:22:CA:AE:13:FB:04:BC:63:21:56:A1:C2:4B:D8:6D:6B:FB Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 2F Signing time: Sat 19 Jul 2025 07:57:19 +0000 Manifest this update: Sat 19 Jul 2025 07:57:19 +0000 Manifest next update: Sat 26 Jul 2025 07:57:19 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: E3ql5MOoPgg6+zzrVP2EBah4r+lDYPR0PfTjqhDuxec=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Jul 19 07:57:19 2025 GMT Not After : Jul 26 07:57:19 2025 GMT Subject: CN=687b4fdf-2862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:24:12:a7:c9:97:07:4e:70:db:e7:94:bb: 1d:ed:a4:d3:65:b1:35:e7:a3:fc:7a:20:29:1f:bb: 6f:9a:e9:e3:e6:37:2b:c8:8a:49:cc:ef:db:4a:e2: 67:b7:b8:07:1b:70:d5:6e:ec:18:76:44:e0:14:36: f9:df:7a:53:3e:af:10:10:1c:dd:ef:df:1a:3b:88: 0b:90:2a:c4:99:de:a5:0a:bc:ab:b3:ff:32:88:fd: b8:e8:76:c3:5e:71:8a:70:2e:5e:a7:41:e3:6e:34: 98:3e:8d:5c:91:87:8f:fa:a1:7f:a8:45:7e:7c:79: 2c:d7:86:b6:67:e3:ac:89:ce:d2:3f:c9:ec:1f:09: 5d:61:3f:73:ba:83:7e:cd:25:86:98:44:c8:76:d2: c2:4e:68:e3:89:2f:2e:8c:30:da:9d:87:92:58:e1: 63:4a:34:6f:c0:94:24:38:e0:1b:a9:6f:dd:63:7a: 91:c8:27:40:40:c6:6f:87:b7:d1:95:dd:bc:29:d3: d2:31:7a:82:ff:06:9c:0e:e7:ec:ed:bb:78:dc:99: 69:cd:32:d3:c3:13:0a:cf:50:0a:8f:00:90:bf:a3: f8:50:2c:8b:4e:39:6f:2b:c4:80:cb:f1:65:49:3c: 3f:33:31:ac:e4:0e:d1:0e:da:14:17:62:9c:4f:50: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A2:9C:22:CA:AE:13:FB:04:BC:63:21:56:A1:C2:4B:D8:6D:6B:FB X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1f:5b:a9:64:fc:64:1f:c0:82:9d:01:7c:78:c4:b7:43:a9: 58:02:04:db:3c:d5:99:67:f1:df:4d:06:77:a2:1d:80:33:2f: b7:9d:b8:3e:79:96:fa:3e:5f:17:eb:b5:60:59:b2:00:a8:41: 74:10:c3:3a:aa:cb:17:7d:47:b5:8f:ad:a5:53:76:4e:b1:18: d3:c5:1a:c3:64:fb:36:f3:70:f5:92:c1:0c:fe:66:0d:8e:6d: 94:7e:da:af:b5:88:0a:79:06:d9:86:5f:96:2a:8d:cc:40:9c: 6b:b9:f7:a5:6c:2c:e6:58:00:dd:0b:80:e7:70:75:01:93:f0: 32:23:4f:d8:ba:51:c6:d7:f5:39:ea:1a:c0:20:98:ae:34:fa: 30:cb:4c:e7:bc:08:75:f8:d1:16:aa:d4:00:36:9d:ce:96:28: 25:be:6f:1e:a0:ff:78:a5:9b:e4:e5:c8:39:f6:87:48:dc:9e: 8a:d4:55:ce:c4:d6:6a:ae:46:c3:48:1a:84:36:b5:4e:d1:71: eb:8c:0d:70:2f:ab:00:27:7a:e5:71:83:40:9c:21:83:b4:ef: d8:65:42:25:9b:db:62:b5:aa:bc:54:47:f5:2d:58:a4:4e:d9: 70:99:9b:ab:b2:68:f9:f4:1b:8d:4c:58:b9:ec:a4:7b:73:60: 91:e6:e5:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA3MTkwNzU3MTlaFw0yNTA3MjYwNzU3MTlaMBgxFjAUBgNV BAMTDTY4N2I0ZmRmLTI4NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu/yQSp8mXB05w2+eUux3tpNNlsTXno/x6ICkfu2+a6ePmNyvIiknM79tK4me3 uAcbcNVu7Bh2ROAUNvnfelM+rxAQHN3v3xo7iAuQKsSZ3qUKvKuz/zKI/bjodsNe cYpwLl6nQeNuNJg+jVyRh4/6oX+oRX58eSzXhrZn46yJztI/yewfCV1hP3O6g37N JYaYRMh20sJOaOOJLy6MMNqdh5JY4WNKNG/AlCQ44Bupb91jepHIJ0BAxm+Ht9GV 3bwp09IxeoL/BpwO5+ztu3jcmWnNMtPDEwrPUAqPAJC/o/hQLItOOW8rxIDL8WVJ PD8zMazkDtEO2hQXYpxPUHhFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoqKcIsqu E/sEvGMhVqHCS9hta/swHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEfW6lk/GQfwIKdAXx4xLdDqVgCBNs81Zln8d9NBneiHYAzL7eduD55 lvo+XxfrtWBZsgCoQXQQwzqqyxd9R7WPraVTdk6xGNPFGsNk+zbzcPWSwQz+Zg2O bZR+2q+1iAp5BtmGX5YqjcxAnGu596VsLOZYAN0LgOdwdQGT8DIjT9i6UcbX9Tnq GsAgmK40+jDLTOe8CHX40Raq1AA2nc6WKCW+bx6g/3ilm+TlyDn2h0jcnorUVc7E 1mquRsNIGoQ2tU7RceuMDXAvqwAneuVxg0CcIYO079hlQiWb22K1qrxUR/UtWKRO 2XCZm6uyaPn0G41MWLnspHtzYJHm5TI= -----END CERTIFICATE-----Generated at Sun Jul 20 16:39:15 2025 by rpki-client