$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft File: lqY1AntkplTYCJRduDWp4ox5SwE.mft (raw, json) Hash identifier: f5+Fv9mg2Wtkk5FhEKJ60SIOfA8tQDwLtwx8LhZ/fc4= Subject key identifier: 65:C9:D1:A8:28:E7:1A:2D:80:2E:81:AB:13:03:71:46:1A:03:6F:DA Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft Manifest number: A3 Signing time: Sat 19 Jul 2025 06:29:21 +0000 Manifest this update: Sat 19 Jul 2025 06:29:20 +0000 Manifest next update: Sat 26 Jul 2025 06:29:20 +0000 Files and hashes: 1: lqY1AntkplTYCJRduDWp4ox5SwE.crl (hash: N/KWLbxn44JLJR4MUgD97hj6GKVTRKEe0YsrKCxtAOQ=) 2: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (hash: EF4oE/lxCN23IMjmuuP02cCqUrL7uq26SoDsV63e3dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: Jul 19 06:29:20 2025 GMT Not After : Jul 26 06:29:20 2025 GMT Subject: CN=687b3b40-1c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:52:dd:af:36:f2:bf:99:24:95:fe:e8:f1: c1:68:9d:bd:a4:26:df:50:b3:ee:70:14:92:55:a3: 9e:b0:18:1b:ce:d8:05:13:f4:2c:5f:e8:3e:44:a3: 99:f8:56:fe:fa:a6:53:e4:72:d6:13:61:bf:ff:f3: e6:70:be:47:9c:ee:08:a1:e3:5e:1d:e9:00:e9:48: 66:2a:6c:79:1e:f5:ff:90:d6:01:d2:34:c6:16:3f: 79:ac:fd:34:63:9b:d1:ad:2b:f2:ed:13:d9:cd:e6: a9:56:40:28:d0:ce:c0:69:90:b4:0d:88:59:7a:aa: 87:94:72:e6:a4:3d:47:45:64:ca:22:3a:45:e3:64: b0:56:fc:ba:14:85:06:f0:52:23:4b:81:df:f8:d0: 4c:87:c4:88:44:7c:d9:3f:74:62:d1:1c:1d:63:9a: de:30:e8:9e:84:97:b2:86:b3:12:a7:3f:3e:e8:9c: 0f:f2:b0:c5:95:a3:34:c1:0b:ed:0b:a7:9a:67:03: d6:aa:a2:15:2b:48:24:23:f5:2c:0e:81:f8:0b:9e: 44:d4:70:8f:cc:91:d8:f0:7d:24:89:d9:e9:8e:fc: 72:03:0e:22:d2:b6:45:3c:75:f1:50:ee:10:31:a9: 8c:0e:a9:e7:22:f3:a4:7f:6e:a8:3c:a7:d0:72:f8: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C9:D1:A8:28:E7:1A:2D:80:2E:81:AB:13:03:71:46:1A:03:6F:DA X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a4:8f:f0:ca:ba:37:aa:e6:72:a9:27:ec:4c:d4:fc:8e:f8: 26:80:77:8b:c5:6e:de:bb:97:84:53:df:bc:67:54:08:f5:b8: 47:99:54:43:1e:54:bb:85:a6:d7:53:2e:c2:93:3d:99:a7:d5: 0f:4b:3a:57:29:1b:39:e5:54:99:e6:2f:d3:35:b5:c7:80:cb: 74:5c:6f:4d:b9:ff:ab:e6:84:97:c3:53:74:e0:05:f9:c7:00: 91:46:fd:0a:7b:e3:75:f4:26:d2:c7:66:41:14:08:84:a4:e9: 84:03:c1:a6:27:4f:57:1a:0f:91:ad:0f:7c:2c:75:c5:14:c0: 4f:9e:41:d6:e8:94:62:9d:bb:c0:03:1e:29:8b:e4:af:33:7d: ce:e9:9c:50:f5:75:ec:77:9a:64:76:88:64:b1:77:56:65:95: b8:c7:b6:3d:76:a7:da:34:e5:92:b8:0b:5e:06:bd:8d:5b:ba: 9c:16:82:31:6b:17:76:e3:58:cc:3b:25:44:12:45:c1:f4:a6: fb:8e:94:d7:5f:7b:b7:e3:c2:2c:93:8b:dd:37:f0:ca:70:4e: 6b:9c:79:a2:0d:54:66:ef:2f:aa:9e:82:ae:04:ea:59:80:88: 05:c6:8f:44:f2:47:d6:b8:d3:22:d0:85:98:c7:51:f0:30:35: 76:6f:a9:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy OEM3OTRCMDEwHhcNMjUwNzE5MDYyOTIwWhcNMjUwNzI2MDYyOTIwWjAYMRYwFAYD VQQDEw02ODdiM2I0MC0xYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPtS3a828r+ZJJX+6PHBaJ29pCbfULPucBSSVaOesBgbztgFE/QsX+g+RKOZ +Fb++qZT5HLWE2G///PmcL5HnO4IoeNeHekA6UhmKmx5HvX/kNYB0jTGFj95rP00 Y5vRrSvy7RPZzeapVkAo0M7AaZC0DYhZeqqHlHLmpD1HRWTKIjpF42SwVvy6FIUG 8FIjS4Hf+NBMh8SIRHzZP3Ri0RwdY5reMOiehJeyhrMSpz8+6JwP8rDFlaM0wQvt C6eaZwPWqqIVK0gkI/UsDoH4C55E1HCPzJHY8H0kidnpjvxyAw4i0rZFPHXxUO4Q MamMDqnnIvOkf26oPKfQcvgEMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXJ0ago 5xotgC6BqxMDcUYaA2/aMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM5MS9GNzIwOUMzMjcwQUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3Bs VFlDSlJkdURXcDRveDVTd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQpI/wyro3quZyqSfsTNT8jvgmgHeLxW7eu5eEU9+8Z1QI9bhHmVRD HlS7habXUy7Ckz2Zp9UPSzpXKRs55VSZ5i/TNbXHgMt0XG9Nuf+r5oSXw1N04AX5 xwCRRv0Ke+N19CbSx2ZBFAiEpOmEA8GmJ09XGg+RrQ98LHXFFMBPnkHW6JRinbvA Ax4pi+SvM33O6ZxQ9XXsd5pkdohksXdWZZW4x7Y9dqfaNOWSuAteBr2NW7qcFoIx axd241jMOyVEEkXB9Kb7jpTXX3u348Isk4vdN/DKcE5rnHmiDVRm7y+qnoKuBOpZ gIgFxo9E8kfWuNMi0IWYx1HwMDV2b6kB -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:50 2025 by rpki-client