$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json) Hash identifier: 8wglWgC7PZL69zor2JfPK1ZmgJlMS5yhSl+0Hcq03CQ= Subject key identifier: 6F:E0:1A:4F:3D:1D:AE:06:EB:3A:AB:59:28:F8:69:F9:1F:FD:0E:0D Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1B28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft Manifest number: 1B24 Signing time: Fri 18 Jul 2025 16:25:24 +0000 Manifest this update: Fri 18 Jul 2025 16:25:24 +0000 Manifest next update: Fri 25 Jul 2025 16:25:24 +0000 Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: sujlrvET2ZdysNLNBJwSYCR6VSV10B99vQV9zlko7ek=) 2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: Jul 18 16:25:24 2025 GMT Not After : Jul 25 16:25:24 2025 GMT Subject: CN=687a7574-c7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:84:46:5c:64:72:96:69:5b:a9:3b:a0:c2: f2:50:84:76:97:33:28:8d:bf:29:58:78:1c:f5:d4: 25:ae:6d:3d:07:02:f3:de:1c:c6:05:73:5c:f1:85: 6d:c1:84:70:ab:8e:99:82:2e:c8:b5:13:34:03:58: b0:0c:ab:86:fe:b2:64:d1:14:be:d2:3c:33:b7:7b: 79:d5:41:dc:b5:ad:50:23:21:b1:4e:28:26:cf:0e: 7a:4b:60:49:b8:5b:22:21:67:82:a8:3b:c1:f1:59: dd:0c:cc:e8:97:ec:29:35:7f:d4:92:1d:db:cc:0c: d8:55:a5:99:1a:0c:c5:eb:dd:f2:40:09:37:fc:64: 02:15:d4:41:b2:f3:97:8b:8d:ed:c8:6d:9f:83:d5: 46:54:10:41:6c:e8:e5:13:48:c9:d6:8b:2b:4c:ed: d7:79:21:a8:e3:e0:56:6c:db:82:4d:d1:84:7c:5e: 1b:b0:4e:90:b8:af:26:93:d5:07:e3:ea:19:54:c5: 05:93:83:99:20:06:2f:71:52:e3:4c:8b:4a:72:fd: f3:90:ea:3c:a7:d1:38:e6:c8:f5:dd:7a:39:20:1c: 55:d9:f0:17:4f:ef:c4:b8:94:28:1e:c9:dc:50:2b: 78:82:1c:1a:34:e1:05:53:29:41:1e:59:9b:79:9c: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E0:1A:4F:3D:1D:AE:06:EB:3A:AB:59:28:F8:69:F9:1F:FD:0E:0D X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:60:69:0d:ac:bd:c5:8e:f2:1b:8b:83:e9:f8:da:08:19:af: 15:33:37:7f:f0:8a:54:42:35:8c:7b:d5:30:6a:07:48:e2:fa: 55:27:6b:e8:5d:7c:52:7a:91:69:9f:39:f2:84:21:02:cc:42: 0a:c5:5d:c4:36:9f:f0:0a:08:71:36:57:c5:52:1a:8e:74:06: 49:c8:6a:cf:79:7c:7a:aa:9a:b0:e1:6f:6b:38:ee:e1:35:52: 0b:24:2e:30:80:09:30:5c:cd:de:66:c6:e5:5e:90:e5:84:ba: ab:2a:e1:9e:0f:e5:2f:ce:81:d6:ee:32:2d:ec:d8:dd:a0:97: 23:39:dd:39:94:c7:9c:96:fa:ad:34:9e:c4:57:f3:6b:35:b0: 1f:6a:51:07:ab:49:cf:83:23:03:44:8c:3e:bb:80:77:b4:32: 1b:72:7d:db:8b:a6:49:f2:ef:87:3d:69:71:f4:97:56:0d:95: ad:54:52:87:87:f7:46:8b:5c:6f:4b:a8:fa:0d:c9:c1:4c:12: 52:16:dc:ce:4f:e8:86:c1:9f:3f:8e:0b:39:a5:a5:75:c0:62: b8:5f:e9:d7:78:74:86:8e:d2:c1:33:26:6b:c1:ea:02:b9:00: 57:8d:9d:b8:a0:13:ed:67:2b:90:44:cf:20:51:65:cd:58:42: 36:e1:cb:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjUwNzE4MTYyNTI0WhcNMjUwNzI1MTYyNTI0WjAYMRYwFAYD VQQDEw02ODdhNzU3NC1jN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFSERlxkcpZpW6k7oMLyUIR2lzMojb8pWHgc9dQlrm09BwLz3hzGBXNc8YVt wYRwq46Zgi7ItRM0A1iwDKuG/rJk0RS+0jwzt3t51UHcta1QIyGxTigmzw56S2BJ uFsiIWeCqDvB8VndDMzol+wpNX/Ukh3bzAzYVaWZGgzF693yQAk3/GQCFdRBsvOX i43tyG2fg9VGVBBBbOjlE0jJ1osrTO3XeSGo4+BWbNuCTdGEfF4bsE6QuK8mk9UH 4+oZVMUFk4OZIAYvcVLjTItKcv3zkOo8p9E45sj13Xo5IBxV2fAXT+/EuJQoHsnc UCt4ghwaNOEFUylBHlmbeZyGTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/gGk89 Ha4G6zqrWSj4afkf/Q4NMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT U3hFUWxseWM5UGxraGdJQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmYGkNrL3FjvIbi4Pp+NoIGa8VMzd/8IpUQjWMe9UwagdI4vpVJ2vo XXxSepFpnznyhCECzEIKxV3ENp/wCghxNlfFUhqOdAZJyGrPeXx6qpqw4W9rOO7h NVILJC4wgAkwXM3eZsblXpDlhLqrKuGeD+UvzoHW7jIt7NjdoJcjOd05lMeclvqt NJ7EV/NrNbAfalEHq0nPgyMDRIw+u4B3tDIbcn3bi6ZJ8u+HPWlx9JdWDZWtVFKH h/dGi1xvS6j6DcnBTBJSFtzOT+iGwZ8/jgs5paV1wGK4X+nXeHSGjtLBMyZrweoC uQBXjZ24oBPtZyuQRM8gUWXNWEI24cuq -----END CERTIFICATE-----Generated at Sun Jul 20 03:25:13 2025 by rpki-client