$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json) Hash identifier: SIqOf0vNn7f2wBPwKquQpZxEHy7bsmGHqhAyjWwGcXY= Subject key identifier: 0F:24:A9:7E:9D:D3:63:11:30:36:D3:31:73:61:06:B9:9D:58:5A:3F Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Certificate serial: 1C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft Manifest number: 1BF1 Signing time: Sun 20 Jul 2025 16:16:21 +0000 Manifest this update: Sun 20 Jul 2025 16:16:21 +0000 Manifest next update: Sun 27 Jul 2025 16:16:21 +0000 Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: 8FmygupaWQZekkTGQrz/bXOFfYLV7Gssh2EGBdCC120=) 2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=) 3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: 3Fv5pT2XLktCrAEzJ7qYpsBgXpFiEdMr09ecsEjPwls=) 4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7186 (0x1c12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA Validity Not Before: Jul 20 16:16:21 2025 GMT Not After : Jul 27 16:16:21 2025 GMT Subject: CN=687d1655-9bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:59:35:58:21:0d:26:aa:b8:0a:49:12:e9: bc:80:9e:c5:65:0c:28:10:f7:c5:65:5b:42:53:10: 78:50:f9:7e:d0:18:1f:ec:8b:43:d5:cd:ce:9d:65: 9f:b4:02:44:7d:19:26:39:3b:56:b0:93:8c:d4:64: 60:2d:2a:a7:7d:42:b7:6d:75:91:d1:41:06:d0:2c: cd:21:47:1c:14:0c:47:bb:49:d0:11:00:4e:e0:c3: c7:f6:f4:ea:a1:06:0a:35:77:00:35:dd:59:8d:e4: a5:62:44:6f:cd:4a:cc:4b:2c:9d:79:5b:83:a5:5c: dd:f7:2a:ac:de:d0:de:07:d1:12:ef:1a:eb:50:29: 39:81:c1:f1:a5:00:98:b0:16:79:05:1d:2f:ba:a5: ad:56:54:c3:0f:f7:ce:00:4d:f1:59:4a:8e:c6:55: ff:56:95:e4:d3:88:09:bc:51:b3:81:d6:6e:e7:e8: 34:0f:9a:5a:2d:13:29:25:bc:38:fc:3d:08:e1:f4: fd:37:f0:c2:38:19:f2:e5:c5:5a:26:c3:e1:32:df: 32:ee:d9:3d:b9:22:f0:85:1e:91:78:13:9b:9a:e5: 73:e7:50:09:6e:0d:29:8b:2c:32:ec:bf:0d:e3:e8: 8a:49:2d:6f:56:54:93:5f:69:e7:f9:58:f1:03:16: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:A9:7E:9D:D3:63:11:30:36:D3:31:73:61:06:B9:9D:58:5A:3F X509v3 Authority Key Identifier: keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:c2:54:b0:20:9a:5e:ec:66:66:dc:2f:41:a2:f0:4c:35: 9f:df:b5:8f:3b:d0:4b:9a:42:b7:cf:49:f7:51:02:70:51:83: 4a:b5:f6:76:e8:31:6f:84:b7:f1:9b:2e:b1:28:88:7b:06:f4: 31:3b:53:88:ff:ba:24:89:19:cc:bc:e8:07:ec:be:d5:ac:e3: d6:5d:3b:28:67:3a:5f:01:97:15:86:af:eb:21:63:af:36:ba: 12:74:f8:61:ff:d2:1d:dc:03:5e:58:e8:59:f1:54:8e:50:74: 56:1a:2c:b0:85:0e:a4:66:4d:59:00:c7:c6:0a:40:84:b8:9e: 31:68:38:da:a7:13:f4:79:97:ec:51:3c:af:3a:04:e4:0d:a9: 7c:43:4f:74:5b:9a:e9:34:88:0b:31:65:d6:1f:d8:16:ff:c3: cf:92:f1:52:38:1a:25:dc:35:03:52:3c:1c:a9:08:2e:4a:cf: 41:6b:ef:3a:36:8d:95:38:a7:82:18:19:37:cd:16:d6:16:2a: cf:e1:1d:d8:8c:de:58:f3:19:64:13:9f:4b:b1:9a:a6:b3:45: ae:49:7c:4b:73:57:a9:78:aa:01:41:1e:17:53:56:86:74:9d: 01:a9:2a:f2:95:18:49:4d:ab:88:39:01:53:3a:d3:b7:6a:2e: 32:74:bd:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB OEE0QjdERUEwHhcNMjUwNzIwMTYxNjIxWhcNMjUwNzI3MTYxNjIxWjAYMRYwFAYD VQQDEw02ODdkMTY1NS05YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VxZNVghDSaquApJEum8gJ7FZQwoEPfFZVtCUxB4UPl+0Bgf7ItD1c3OnWWf tAJEfRkmOTtWsJOM1GRgLSqnfUK3bXWR0UEG0CzNIUccFAxHu0nQEQBO4MPH9vTq oQYKNXcANd1ZjeSlYkRvzUrMSyydeVuDpVzd9yqs3tDeB9ES7xrrUCk5gcHxpQCY sBZ5BR0vuqWtVlTDD/fOAE3xWUqOxlX/VpXk04gJvFGzgdZu5+g0D5paLRMpJbw4 /D0I4fT9N/DCOBny5cVaJsPhMt8y7tk9uSLwhR6ReBObmuVz51AJbg0piywy7L8N 4+iKSS1vVlSTX2nn+VjxAxYugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8kqX6d 02MRMDbTMXNhBrmdWFo/MB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1 eFVJNnZfZEhncmlvcExmZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD5MJUsCCaXuxmZtwvQaLwTDWf37WPO9BLmkK3z0n3UQJwUYNKtfZ2 6DFvhLfxmy6xKIh7BvQxO1OI/7okiRnMvOgH7L7VrOPWXTsoZzpfAZcVhq/rIWOv NroSdPhh/9Id3ANeWOhZ8VSOUHRWGiywhQ6kZk1ZAMfGCkCEuJ4xaDjapxP0eZfs UTyvOgTkDal8Q090W5rpNIgLMWXWH9gW/8PPkvFSOBol3DUDUjwcqQguSs9Ba+86 No2VOKeCGBk3zRbWFirP4R3YjN5Y8xlkE59LsZqms0WuSXxLc1epeKoBQR4XU1aG dJ0BqSrylRhJTauIOQFTOtO3ai4ydL3w -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:15 2025 by rpki-client