$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: 2oOBETieC1OOUkO09HqyOGSzzmtAA4R0iSKD4a8sHeQ= Subject key identifier: F6:F3:75:94:DD:15:CD:6B:71:04:E2:5B:AA:CC:81:5E:3A:11:6E:E4 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C0A Signing time: Fri 18 Jul 2025 18:59:36 +0000 Manifest this update: Fri 18 Jul 2025 18:59:36 +0000 Manifest next update: Fri 25 Jul 2025 18:59:36 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: MFyh9qtyDq3jno1WIO3qU4K/r2zw6JGB6eaMXBlqXQ8=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: vd/2YU/fZHY0X+88OePyC1GrfRf3guoIzxWdo48FOwA=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3124 (0xc34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Jul 18 18:59:36 2025 GMT Not After : Jul 25 18:59:36 2025 GMT Subject: CN=687a9998-605d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:31:2d:90:dd:df:4b:d4:51:70:5c:ea:65: 93:a9:fd:19:7f:74:bf:8d:9d:1a:6e:17:45:e5:1c: 28:f2:38:1a:07:ff:c9:4e:63:d5:89:0d:9f:d4:85: 48:0f:4e:c5:8b:b9:54:1b:c4:93:3f:a6:e1:8e:ce: 75:f5:fb:4f:d5:0f:9d:93:0e:d1:16:99:e2:91:a0: d5:a3:9a:e1:4a:85:a9:fd:4b:4f:91:d7:5d:6f:2b: bb:3c:d2:77:72:d8:be:35:bf:48:d0:da:61:f6:af: 85:3e:ff:2e:ac:2d:49:71:b2:9f:cd:52:f5:7d:ef: 7c:ac:58:31:02:f8:c3:01:90:3c:c5:17:9a:75:ca: 2b:84:cc:6a:ac:84:e9:bb:32:52:cc:43:7b:e4:51: 91:11:9d:00:17:f3:8e:25:be:94:5c:cb:1c:86:30: d1:35:5b:c6:52:8f:76:ff:bf:bf:48:ce:de:24:a6: 7f:ce:fa:2f:d8:3a:e7:15:a8:70:53:14:c2:b2:20: d4:21:6d:e3:a2:36:3b:a6:f4:c8:5d:56:09:74:cc: e0:27:de:34:d3:e1:dc:5f:e9:1b:51:fc:21:fe:7e: 71:26:eb:ef:91:ae:dc:1a:6b:5e:47:71:8a:1f:6a: e9:eb:ac:ad:3f:31:51:2a:0f:73:81:aa:f4:0c:3f: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:75:94:DD:15:CD:6B:71:04:E2:5B:AA:CC:81:5E:3A:11:6E:E4 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:05:60:13:27:a9:7b:e7:04:8d:08:99:ed:9e:7b:ea:5f:5b: c1:d3:52:d7:c8:b0:4d:54:e2:ce:4f:78:a6:fb:c4:e4:2e:35: df:c3:2e:14:46:f4:7a:73:ef:c5:27:38:99:0d:66:24:d6:93: 0b:66:48:c1:6f:4a:88:5d:bb:34:ca:57:11:8e:88:89:93:58: 6c:f3:fc:b4:33:c3:66:f4:88:2f:6e:73:eb:2c:5f:40:a3:cc: af:d4:74:0a:de:b2:6e:23:dd:e5:cc:82:64:3d:4a:97:c6:5e: b0:5e:6d:81:a0:7e:02:4a:50:82:5b:d2:05:ad:f4:b9:5e:6a: cb:b5:e1:cc:ec:d4:ac:20:06:11:d1:84:7d:8f:1c:6c:fc:d7: 16:f1:44:dd:c2:66:34:4b:81:35:77:30:56:27:7b:c8:b2:7b: 9c:f7:38:99:dd:dd:cf:c8:26:46:38:a2:38:6a:1a:6f:6d:67: 5a:08:da:0d:b0:b2:cd:c0:23:f6:8d:3c:65:9e:13:b2:23:1d: 3a:9e:44:51:2b:8f:fc:00:15:57:4c:3f:ad:96:1e:27:cb:80: f8:c0:fb:1c:c0:67:a6:dd:47:86:ac:a1:0c:a8:a8:62:7e:ac: b5:31:42:c2:87:5d:a7:75:a4:88:3c:87:09:34:eb:92:7d:28: 8c:54:5d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUwNzE4MTg1OTM2WhcNMjUwNzI1MTg1OTM2WjAYMRYwFAYD VQQDEw02ODdhOTk5OC02MDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5MxLZDd30vUUXBc6mWTqf0Zf3S/jZ0abhdF5Rwo8jgaB//JTmPViQ2f1IVI D07Fi7lUG8STP6bhjs519ftP1Q+dkw7RFpnikaDVo5rhSoWp/UtPkdddbyu7PNJ3 cti+Nb9I0Nph9q+FPv8urC1JcbKfzVL1fe98rFgxAvjDAZA8xReadcorhMxqrITp uzJSzEN75FGREZ0AF/OOJb6UXMschjDRNVvGUo92/7+/SM7eJKZ/zvov2DrnFahw UxTCsiDUIW3jojY7pvTIXVYJdMzgJ9400+HcX+kbUfwh/n5xJuvvka7cGmteR3GK H2rp66ytPzFRKg9zgar0DD8u5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbzdZTd Fc1rcQTiW6rMgV46EW7kMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpBWATJ6l75wSNCJntnnvqX1vB01LXyLBNVOLOT3im+8TkLjXfwy4U RvR6c+/FJziZDWYk1pMLZkjBb0qIXbs0ylcRjoiJk1hs8/y0M8Nm9IgvbnPrLF9A o8yv1HQK3rJuI93lzIJkPUqXxl6wXm2BoH4CSlCCW9IFrfS5XmrLteHM7NSsIAYR 0YR9jxxs/NcW8UTdwmY0S4E1dzBWJ3vIsnuc9ziZ3d3PyCZGOKI4ahpvbWdaCNoN sLLNwCP2jTxlnhOyIx06nkRRK4/8ABVXTD+tlh4ny4D4wPscwGem3UeGrKEMqKhi fqy1MULCh12ndaSIPIcJNOuSfSiMVF0Q -----END CERTIFICATE-----Generated at Sun Jul 20 03:25:10 2025 by rpki-client