$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json) Hash identifier: VzakAIJLzt1/Jpd7/8lwkMsmJM0Br3M0UU0GPJvkm/o= Subject key identifier: 2C:29:63:15:69:BC:27:0B:33:A4:E4:1D:FC:D6:09:B2:64:09:AA:1E Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft Manifest number: 04 Signing time: Sat 19 Jul 2025 08:30:45 +0000 Manifest this update: Sat 19 Jul 2025 08:30:44 +0000 Manifest next update: Sat 26 Jul 2025 08:30:44 +0000 Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: FcrJypcId8G41RGAdMFm+3imYupYGKuKDI4PK4D1RTw=) 2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Jul 19 08:30:44 2025 GMT Not After : Jul 26 08:30:44 2025 GMT Subject: CN=687b57b5-72d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:1a:c7:a6:1c:0f:a3:c4:07:ba:67:4b:71: 17:0a:54:f0:6b:c8:38:78:34:b5:9e:bf:f3:54:45: 0f:92:85:a2:5d:af:91:d3:ba:d0:11:93:42:02:6f: 39:60:ef:c7:78:7f:2d:28:72:cb:cb:98:11:00:fc: f6:08:86:de:14:d6:2e:ce:00:d4:af:4c:45:88:fd: ee:80:54:fa:da:b2:64:10:15:13:20:89:0d:70:4e: 43:6e:09:21:91:30:8a:33:e4:c4:4a:b5:4c:5c:97: 75:a4:88:ca:64:e3:a9:13:fb:d4:1e:d5:b6:4b:e6: b0:b3:22:7f:98:1a:61:36:10:6c:79:10:16:b4:ff: 03:c2:c8:7f:75:59:fe:34:cf:42:8e:2a:cb:b2:64: 01:c8:85:f2:78:de:4b:7a:f2:2b:04:b0:51:32:01: e7:a6:97:2e:95:58:d2:3d:77:43:e0:7b:35:1d:61: 4e:72:a2:c7:6d:86:01:2c:c4:14:b4:49:6b:83:ea: 1f:5c:5b:ed:62:9b:c8:24:31:5d:a0:c5:59:a2:32: dd:76:47:1c:be:05:37:bf:67:70:28:03:0b:e6:10: e8:65:54:7d:8b:d7:fa:3f:6d:33:4b:7e:19:c6:ec: 6a:05:90:61:74:cf:1d:5f:f2:a6:0e:3e:d8:ef:56: 12:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:29:63:15:69:BC:27:0B:33:A4:E4:1D:FC:D6:09:B2:64:09:AA:1E X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:56:29:e5:a4:7f:9a:29:02:7e:10:2a:8d:03:7e:66:8d: cd:24:f4:49:95:1a:c3:92:fb:b3:a7:00:b9:3e:38:cb:5d:2d: 10:80:c6:ba:f5:76:e8:bb:42:89:82:fe:69:e2:3d:6a:07:78: ed:0d:bc:1e:a1:e9:42:0e:8c:5e:ab:a4:15:11:6d:e2:56:87: 83:f1:90:0a:6f:d9:3a:4d:8b:5c:72:1f:ad:87:2a:3a:f1:8a: 0e:c1:a5:a6:bc:43:6e:52:c7:bf:86:1c:ce:85:ac:9e:7b:cb: 5b:58:d5:68:8e:f6:ba:a4:27:e5:5f:e2:cf:42:da:ae:a7:cf: 0e:7c:68:80:75:4c:58:29:b0:1c:f6:f8:e7:ce:c4:fc:6c:d1: 85:e8:66:d9:c0:c3:f8:cd:3d:0e:bb:1f:1e:b1:44:d2:bb:68: 2c:59:62:2d:7d:23:2b:31:bf:14:9f:49:74:62:f6:16:46:aa: e2:ef:e3:ee:cf:d4:28:5a:1b:85:44:88:c1:18:c0:13:d3:39: 1e:53:8e:58:23:0e:38:78:5f:75:37:9c:1b:41:c5:eb:98:39: 58:29:a2:95:09:61:c9:95:c4:48:bc:7c:23:08:0c:99:c7:ce: 4a:1b:94:7c:85:39:d4:44:6f:da:b6:59:9d:17:7d:55:a2:93: ab:e4:fa:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTA3MTkwODMwNDRaFw0yNTA3MjYwODMwNDRaMBgxFjAUBgNV BAMTDTY4N2I1N2I1LTcyZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+yhrHphwPo8QHumdLcRcKVPBryDh4NLWev/NURQ+ShaJdr5HTutARk0ICbzlg 78d4fy0ocsvLmBEA/PYIht4U1i7OANSvTEWI/e6AVPrasmQQFRMgiQ1wTkNuCSGR MIoz5MRKtUxcl3WkiMpk46kT+9Qe1bZL5rCzIn+YGmE2EGx5EBa0/wPCyH91Wf40 z0KOKsuyZAHIhfJ43kt68isEsFEyAeemly6VWNI9d0PgezUdYU5yosdthgEsxBS0 SWuD6h9cW+1im8gkMV2gxVmiMt12Rxy+BTe/Z3AoAwvmEOhlVH2L1/o/bTNLfhnG 7GoFkGF0zx1f8qYOPtjvVhKpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULCljFWm8 JwszpOQd/NYJsmQJqh4wHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzY3QjA5NDA2NjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2 WjZrZTdfNFd1azFTUkEtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGipVinlpH+aKQJ+ECqNA35mjc0k9EmVGsOS+7OnALk+OMtdLRCAxrr1 dui7QomC/mniPWoHeO0NvB6h6UIOjF6rpBURbeJWh4PxkApv2TpNi1xyH62HKjrx ig7Bpaa8Q25Sx7+GHM6FrJ57y1tY1WiO9rqkJ+Vf4s9C2q6nzw58aIB1TFgpsBz2 +OfOxPxs0YXoZtnAw/jNPQ67Hx6xRNK7aCxZYi19IysxvxSfSXRi9hZGquLv4+7P 1ChaG4VEiMEYwBPTOR5TjlgjDjh4X3U3nBtBxeuYOVgpopUJYcmVxEi8fCMIDJnH zkoblHyFOdREb9q2WZ0XfVWik6vk+hQ= -----END CERTIFICATE-----Generated at Sun Jul 20 04:25:14 2025 by rpki-client