$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: la3vABKpGxYdTN/OTM3F3qBed4U2RNZDPjGJUSuLjMI= Subject key identifier: 10:51:B0:65:B1:9F:3B:F2:07:44:F3:AA:19:6D:3F:13:21:2B:47:FC Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0DEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0DC9 Signing time: Fri 18 Jul 2025 18:04:39 +0000 Manifest this update: Fri 18 Jul 2025 18:04:38 +0000 Manifest next update: Fri 25 Jul 2025 18:04:38 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: pmkEMOKY8pK+TIPQyQb3620DCZ8fUDTzf7vfPR6PvkE=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: fGrUYT1O2dItK4fIwYgIfLvCsJmlCIF/jYJCGwsc26A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3562 (0xdea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: Jul 18 18:04:38 2025 GMT Not After : Jul 25 18:04:38 2025 GMT Subject: CN=687a8cb6-53fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:41:b2:b9:80:b8:2f:bf:36:49:c0:55:00: 32:a4:5b:1e:1d:63:c8:aa:ca:10:75:32:32:8d:b9: 07:3e:c4:5f:16:45:2c:d0:fa:9c:e6:94:5f:37:3d: 2c:56:eb:e8:c9:64:62:75:63:c8:c1:19:37:a1:ce: 79:e7:0b:ea:9e:0c:89:6a:70:52:6d:e2:51:75:dc: eb:27:a3:fd:82:a1:d5:51:50:6d:41:38:6f:e9:80: 2c:d4:77:29:31:3f:f0:89:ae:09:fa:94:21:a9:bd: 31:58:f3:70:26:bb:a8:fa:8c:7c:10:78:0c:40:45: b3:ea:9f:00:79:16:99:c4:ef:b1:b7:04:fb:8b:b3: 92:ec:57:28:f6:24:1e:4e:18:45:5f:3c:0d:2c:ea: ec:2b:56:99:41:19:90:d2:cf:3c:5d:c1:8f:fa:4a: 9f:6c:4e:0a:9b:40:5b:6a:e9:c8:5b:1a:e0:83:c0: ce:70:0d:df:37:c0:d5:a5:57:b8:c0:3c:44:97:a3: 00:45:d7:b9:b3:78:03:71:8f:81:74:1f:c2:80:4f: 9a:e1:f0:79:a6:96:4d:0d:64:27:d7:ab:5e:c7:21: 47:e6:cc:7d:39:2e:75:07:c1:f9:7d:4f:f6:ce:c7: d5:53:20:c6:7a:bb:36:e4:df:dc:32:e1:6d:00:ec: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:51:B0:65:B1:9F:3B:F2:07:44:F3:AA:19:6D:3F:13:21:2B:47:FC X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:85:c2:4d:2e:f2:75:8f:06:2d:34:87:a8:9d:95:6c:98:45: c5:39:1b:96:ec:62:c7:9c:6a:74:65:53:94:fe:7a:1e:60:21: 76:09:03:4a:f9:3d:b8:91:d8:77:a1:f3:c3:9c:6b:d7:e6:2f: de:da:a2:7f:b8:e9:9c:b7:e7:61:c8:61:e3:60:40:4c:7d:94: 47:95:99:31:bf:71:14:63:75:0f:d9:03:58:d4:15:60:90:26: 82:a8:ce:ed:dd:c3:ea:61:03:56:1b:4b:76:49:e9:f5:d5:7f: 3d:63:57:df:bb:74:43:f9:23:fb:36:01:bb:61:8a:66:4a:a4: 63:f6:aa:2d:00:01:14:5f:78:88:c5:24:43:9d:9f:98:e0:b9: 98:31:28:58:7a:a1:a9:40:6e:72:c6:2e:a7:68:4f:a5:c4:2b: b8:52:09:58:0f:68:9f:89:e9:2b:2f:52:20:17:d0:ff:48:80: 1e:7e:3f:60:d6:19:d0:33:b5:85:dd:ec:f9:92:b8:d9:ab:45: 9a:5a:cb:b9:43:8e:26:7e:f6:6d:5b:12:27:ae:bb:44:d9:35: 09:07:c1:6b:84:73:c1:e7:94:d7:d8:ac:a1:30:b3:61:13:81: 09:6b:e9:dc:8d:c8:2f:4d:b5:84:9d:2b:cb:5e:17:47:6d:25: d4:50:18:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUwNzE4MTgwNDM4WhcNMjUwNzI1MTgwNDM4WjAYMRYwFAYD VQQDEw02ODdhOGNiNi01M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EpBsrmAuC+/NknAVQAypFseHWPIqsoQdTIyjbkHPsRfFkUs0Pqc5pRfNz0s VuvoyWRidWPIwRk3oc555wvqngyJanBSbeJRddzrJ6P9gqHVUVBtQThv6YAs1Hcp MT/wia4J+pQhqb0xWPNwJruo+ox8EHgMQEWz6p8AeRaZxO+xtwT7i7OS7Fco9iQe ThhFXzwNLOrsK1aZQRmQ0s88XcGP+kqfbE4Km0BbaunIWxrgg8DOcA3fN8DVpVe4 wDxEl6MARde5s3gDcY+BdB/CgE+a4fB5ppZNDWQn16texyFH5sx9OS51B8H5fU/2 zsfVUyDGers25N/cMuFtAOyPfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBRsGWx nzvyB0TzqhltPxMhK0f8MB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+hcJNLvJ1jwYtNIeonZVsmEXFORuW7GLHnGp0ZVOU/noeYCF2CQNK +T24kdh3ofPDnGvX5i/e2qJ/uOmct+dhyGHjYEBMfZRHlZkxv3EUY3UP2QNY1BVg kCaCqM7t3cPqYQNWG0t2Sen11X89Y1ffu3RD+SP7NgG7YYpmSqRj9qotAAEUX3iI xSRDnZ+Y4LmYMShYeqGpQG5yxi6naE+lxCu4UglYD2ifiekrL1IgF9D/SIAefj9g 1hnQM7WF3ez5krjZq0WaWsu5Q44mfvZtWxInrrtE2TUJB8FrhHPB55TX2KyhMLNh E4EJa+ncjcgvTbWEnSvLXhdHbSXUUBiw -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:17 2025 by rpki-client