$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: YJlFaVOqXsGMQkJwAJ1tnNT1/SfjC/aesLZQXv0y6ck= Subject key identifier: 57:17:52:98:A2:3F:AB:C3:6E:72:F8:30:B6:04:DD:B3:25:9E:23:19 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 05A6 Signing time: Fri 18 Jul 2025 23:31:14 +0000 Manifest this update: Fri 18 Jul 2025 23:31:13 +0000 Manifest next update: Fri 25 Jul 2025 23:31:13 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: +4+4tCQEH18xVotmd+aw6k0dSB6gKWQlPoblyTPzYcs=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Jul 18 23:31:13 2025 GMT Not After : Jul 25 23:31:13 2025 GMT Subject: CN=687ad941-6ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:83:dc:4c:11:d5:32:2c:a0:a3:b6:98:5b: a8:70:ae:a2:ad:18:f3:66:a9:bc:c5:3e:8a:c8:5c: ce:65:2a:c6:62:0f:b8:f4:f2:94:ce:5d:40:81:77: cc:2a:96:5a:91:f6:af:5d:6a:99:69:30:c2:29:c8: 72:a4:68:29:3f:ac:ab:fc:79:ad:f1:0c:4c:b2:97: 49:5c:43:21:21:49:09:ea:fc:5b:e2:9e:69:89:07: ef:ad:c8:30:fd:5e:63:15:d0:c9:2c:89:82:bb:68: 39:da:78:06:4d:23:1e:c2:f6:b8:a5:79:f4:0c:cc: c4:80:6d:67:a0:0c:a7:09:67:b8:8d:93:5c:33:f2: 95:e8:ab:66:f1:6b:2d:f5:a7:93:5d:43:74:10:8e: 96:7d:1b:56:47:39:3e:b9:11:ce:8e:c2:06:c6:ab: a3:b4:3d:75:48:0f:43:eb:12:f3:7a:61:32:17:e6: 6b:0b:35:00:2d:60:15:1b:a5:24:58:da:48:19:bc: 74:f8:da:69:67:5c:58:9d:33:0f:67:76:95:4d:d9: 0c:00:f3:bb:33:6a:c2:74:f2:e7:91:12:9c:68:58: d9:de:f6:aa:91:81:cb:67:7d:5d:d5:f2:3a:4f:e1: 3a:0f:f0:4c:89:7e:68:60:69:81:5a:fd:4a:b7:ca: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:17:52:98:A2:3F:AB:C3:6E:72:F8:30:B6:04:DD:B3:25:9E:23:19 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:83:45:18:94:b4:2e:05:aa:89:a6:bd:97:7d:63:35:2f:48: bc:f7:d0:22:75:06:45:c3:6c:33:52:12:3b:b4:41:c9:5e:ab: f3:09:3a:6b:2a:44:9a:b2:d6:82:09:99:31:f9:ac:56:c3:61: 40:db:61:28:a2:5a:f7:31:23:83:2c:87:a7:38:27:ce:d0:70: f1:56:14:4e:91:10:5c:27:d1:00:f5:85:6e:c3:31:ee:07:9e: 1b:3e:f2:cf:7f:e0:39:52:3d:73:0c:ab:c9:31:c2:d9:bc:68: e1:9b:97:6f:24:83:e2:46:2e:0b:f5:18:f0:90:65:49:b0:c4: f1:60:a6:c0:3e:c6:3e:a2:54:76:48:fd:3b:58:8b:b9:a7:a7: 42:d7:cc:db:98:0d:f8:c7:38:42:7a:9f:9c:1d:01:b2:41:12: c7:72:92:b7:86:5d:56:3e:e5:b7:80:17:1f:05:45:9c:eb:33: 9f:a8:11:32:e8:fe:80:a5:96:2a:63:00:29:9b:26:3d:e6:b1: d8:1d:3c:f6:f0:93:ff:3e:de:74:69:6a:79:57:cb:17:87:b6: f8:b7:5d:06:c2:79:c6:26:f3:a0:e6:6f:2d:0b:c6:c7:0b:74: ee:b0:82:ed:cc:63:16:fa:c8:f0:c4:c2:4b:d9:3f:67:62:71: 4e:b8:78:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwNzE4MjMzMTEzWhcNMjUwNzI1MjMzMTEzWjAYMRYwFAYD VQQDEw02ODdhZDk0MS02ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5SD3EwR1TIsoKO2mFuocK6irRjzZqm8xT6KyFzOZSrGYg+49PKUzl1AgXfM KpZakfavXWqZaTDCKchypGgpP6yr/Hmt8QxMspdJXEMhIUkJ6vxb4p5piQfvrcgw /V5jFdDJLImCu2g52ngGTSMewva4pXn0DMzEgG1noAynCWe4jZNcM/KV6Ktm8Wst 9aeTXUN0EI6WfRtWRzk+uRHOjsIGxqujtD11SA9D6xLzemEyF+ZrCzUALWAVG6Uk WNpIGbx0+NppZ1xYnTMPZ3aVTdkMAPO7M2rCdPLnkRKcaFjZ3vaqkYHLZ31d1fI6 T+E6D/BMiX5oYGmBWv1Kt8rGewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcXUpii P6vDbnL4MLYE3bMlniMZMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCog0UYlLQuBaqJpr2XfWM1L0i899AidQZFw2wzUhI7tEHJXqvzCTpr KkSastaCCZkx+axWw2FA22Eoolr3MSODLIenOCfO0HDxVhROkRBcJ9EA9YVuwzHu B54bPvLPf+A5Uj1zDKvJMcLZvGjhm5dvJIPiRi4L9RjwkGVJsMTxYKbAPsY+olR2 SP07WIu5p6dC18zbmA34xzhCep+cHQGyQRLHcpK3hl1WPuW3gBcfBUWc6zOfqBEy 6P6ApZYqYwApmyY95rHYHTz28JP/Pt50aWp5V8sXh7b4t10GwnnGJvOg5m8tC8bH C3TusILtzGMW+sjwxMJL2T9nYnFOuHjp -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:14 2025 by rpki-client