$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: 1Ej9qfovHR64peSPUwJx9hk0yUqVrXVODc5ECRwzPl4= Subject key identifier: E8:21:93:B2:16:5A:F3:C4:0D:BF:AE:1D:1E:91:04:36:E3:21:04:E4 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 0656 Signing time: Sun 20 Jul 2025 22:42:37 +0000 Manifest this update: Sun 20 Jul 2025 22:42:37 +0000 Manifest next update: Sun 27 Jul 2025 22:42:37 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: 7qjKBW9TQVz6qENtIdmMjSF5nthYG+iZbWKO4z8szBw=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Jul 20 22:42:37 2025 GMT Not After : Jul 27 22:42:37 2025 GMT Subject: CN=687d70dd-4673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:a4:1a:9c:75:d4:1e:61:f2:64:ac:1a:cd: 15:2b:d8:2a:80:e0:eb:3f:cd:6f:3a:4d:37:a3:bc: eb:52:58:62:74:16:07:04:94:dc:c6:b2:58:6c:5b: 53:ca:8c:36:cd:f9:0f:16:a4:a5:ce:a6:6c:f1:b1: b7:4f:0a:89:7f:27:77:29:9b:de:90:cc:57:90:67: 76:db:3a:e5:5e:15:2b:c5:02:d6:95:61:95:0e:53: 47:1a:53:13:64:96:89:99:c1:94:eb:06:59:8f:0f: fb:58:85:b1:69:19:7f:ce:fc:2e:1c:58:5e:96:8f: b0:d0:3c:1b:b1:7e:a5:25:d3:4e:b7:30:d7:74:ef: b9:79:5f:23:f0:d0:ea:86:de:c7:f8:1c:8f:cb:8e: 95:ca:e2:e2:24:ea:63:9d:3d:ff:f2:5e:54:e5:d3: 30:3e:1c:c2:3a:e0:ca:dd:6a:99:d8:10:6e:ad:5e: 32:bb:31:93:5f:72:d5:18:3c:11:d0:e1:12:ba:7c: e5:57:27:04:eb:c5:9e:bc:1a:ed:f2:5e:93:e1:e6: 77:e2:ac:72:9e:95:f4:6d:90:8e:9b:ad:00:26:59: d5:7f:0f:a3:8c:ae:4a:28:db:6e:8c:ae:3b:7f:16: 15:fc:e7:50:a5:16:56:d5:67:0b:bf:f6:63:87:32: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:21:93:B2:16:5A:F3:C4:0D:BF:AE:1D:1E:91:04:36:E3:21:04:E4 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:84:59:af:b3:fe:80:0d:bc:ff:8f:4e:b7:09:cb:59:a1:bc: b1:1d:30:a8:86:15:e0:a5:cf:7a:e8:04:a1:b4:44:d1:b4:f6: e8:5f:1d:f4:41:5d:a4:a4:3b:68:7b:fc:b9:a5:92:7d:b2:b1: 0c:e6:71:e3:e7:56:a7:18:8c:8e:33:a7:e0:1b:51:fc:87:f5: 0f:1c:7f:c4:b9:40:11:b3:bf:3d:69:08:de:a6:6c:c9:23:57: 48:a3:83:23:5b:60:aa:0e:07:d3:a8:a5:9d:12:2d:72:25:9f: 12:5d:6e:a8:46:b3:e6:d9:09:56:7a:e5:ca:87:9a:8d:a9:ef: 8d:f3:fd:9c:4f:77:ad:dc:44:f0:93:90:d0:04:ae:a1:cb:a0: b9:f3:18:04:98:84:48:44:b6:d8:91:a2:76:53:02:0e:d3:47: 12:c8:f9:90:94:9d:64:b7:56:dc:e7:ba:5d:8d:1b:54:e2:d2: 6f:c0:1b:13:f6:8a:a3:bf:7e:59:f6:fa:5d:17:9d:de:d4:62: 74:6e:e8:46:96:50:75:c7:48:18:4f:cd:72:3d:96:af:fb:13: 36:4f:eb:0b:3a:d8:58:7a:ed:43:a5:b4:72:fe:d3:11:61:95: f1:dd:c5:90:3a:c5:85:44:64:8b:1a:8e:7f:f1:b7:2f:46:be: 75:cf:54:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUwNzIwMjI0MjM3WhcNMjUwNzI3MjI0MjM3WjAYMRYwFAYD VQQDEw02ODdkNzBkZC00NjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjmkGpx11B5h8mSsGs0VK9gqgODrP81vOk03o7zrUlhidBYHBJTcxrJYbFtT yow2zfkPFqSlzqZs8bG3TwqJfyd3KZvekMxXkGd22zrlXhUrxQLWlWGVDlNHGlMT ZJaJmcGU6wZZjw/7WIWxaRl/zvwuHFhelo+w0DwbsX6lJdNOtzDXdO+5eV8j8NDq ht7H+ByPy46VyuLiJOpjnT3/8l5U5dMwPhzCOuDK3WqZ2BBurV4yuzGTX3LVGDwR 0OESunzlVycE68WevBrt8l6T4eZ34qxynpX0bZCOm60AJlnVfw+jjK5KKNtujK47 fxYV/OdQpRZW1WcLv/ZjhzLSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOghk7IW WvPEDb+uHR6RBDbjIQTkMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhFmvs/6ADbz/j063CctZobyxHTCohhXgpc966AShtETRtPboXx30 QV2kpDtoe/y5pZJ9srEM5nHj51anGIyOM6fgG1H8h/UPHH/EuUARs789aQjepmzJ I1dIo4MjW2CqDgfTqKWdEi1yJZ8SXW6oRrPm2QlWeuXKh5qNqe+N8/2cT3et3ETw k5DQBK6hy6C58xgEmIRIRLbYkaJ2UwIO00cSyPmQlJ1kt1bc57pdjRtU4tJvwBsT 9oqjv35Z9vpdF53e1GJ0buhGllB1x0gYT81yPZav+xM2T+sLOthYeu1DpbRy/tMR YZXx3cWQOsWFRGSLGo5/8bcvRr51z1Rp -----END CERTIFICATE-----Generated at Mon Jul 21 06:51:42 2025 by rpki-client