$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json) Hash identifier: IlU/GpVATp5W3tiZiKQUE0C39Za+dJe2aXxVW9QIryM= Subject key identifier: BF:DB:63:29:8D:B6:CD:7F:DB:B8:66:B4:8E:48:1F:10:61:04:4B:C2 Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft Manifest number: 1D Signing time: Fri 05 Sep 2025 08:26:15 +0000 Manifest this update: Fri 05 Sep 2025 08:26:15 +0000 Manifest next update: Fri 12 Sep 2025 08:26:15 +0000 Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: cStbAqqUou0VlnEpcEM5kWfBKDv7QTr3Qtdrd+jvMs4=) 2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Sep 5 08:26:15 2025 GMT Not After : Sep 12 08:26:15 2025 GMT Subject: CN=68ba9ea7-900e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:e8:33:9f:1f:a6:3d:19:d9:e0:df:64:e2: 33:a0:af:36:56:62:da:3d:f4:ca:be:d3:6c:ee:80: a8:4e:53:05:35:fe:64:2e:e2:75:2f:b4:14:1c:6d: a7:3f:f1:d0:24:05:ee:a6:31:db:ad:7a:73:b6:50: 55:92:d8:ad:6d:9e:43:0b:4a:99:83:62:24:ca:02: ff:83:c7:7e:c6:48:7b:7e:37:73:9d:bb:cf:62:22: c1:ef:1c:12:4c:01:20:37:06:8b:97:5d:ca:aa:ef: b4:cd:7d:4b:42:0f:04:5b:b3:4c:6e:66:b2:e3:2c: c5:ea:99:a9:4e:ce:e7:67:96:61:aa:04:14:e0:fc: 6a:13:16:94:44:80:62:5c:80:94:e7:0d:d1:2b:c2: 10:7e:21:51:64:e8:bb:bc:19:bf:4f:94:3f:cd:33: 92:fe:e4:62:01:dd:c4:2e:e5:e7:59:fb:49:1e:53: 8c:36:a6:3a:c1:1c:64:af:40:98:ee:da:95:19:f7: 24:07:01:6a:f1:e6:62:72:52:e4:f6:b6:a6:9e:71: a0:b3:d4:c4:9b:66:26:0d:2e:36:a7:40:3a:81:65: 91:37:29:f7:5d:55:64:d3:46:2b:6a:9c:5b:9c:e4: 4b:66:c3:4e:6b:05:55:99:ff:24:17:fd:a3:c1:d9: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DB:63:29:8D:B6:CD:7F:DB:B8:66:B4:8E:48:1F:10:61:04:4B:C2 X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:6e:6a:1f:a0:e5:ae:23:85:24:ff:fd:07:75:6b:2c:7d:29: 26:f4:87:ee:27:d0:00:58:30:2e:e4:7c:62:6c:a2:8e:13:85: 1d:8c:69:44:b9:ad:33:3a:39:37:e7:84:04:83:64:d2:b3:98: 69:4f:5a:c3:e2:85:8c:02:a5:f5:27:5b:35:fd:5f:b4:c8:26: 66:2a:94:a9:85:45:e4:6d:d7:4b:9c:6a:b9:5a:e7:b2:02:e1: c0:02:7b:e9:df:1f:fa:97:ef:38:af:18:d6:0d:6c:b1:ec:43: 2b:62:eb:86:d9:de:5b:91:c9:07:66:ec:ce:38:5a:89:21:89: dc:f2:41:9e:24:26:81:94:3a:4d:8c:1c:35:e3:26:b5:4f:b7: 78:02:5d:d5:90:57:1a:41:b6:29:b5:39:00:10:8a:11:3e:bf: 07:ca:8d:ac:12:c2:32:40:c6:17:94:1f:fb:de:bd:e4:8a:83: 61:71:e5:09:cd:96:e3:65:79:ec:29:24:da:90:7c:0f:3e:c0: 2e:11:fc:5e:84:88:12:83:2a:0d:ac:e1:4c:cb:72:b1:6c:ba: 20:e2:be:d6:6b:c4:d9:a3:bc:08:5d:94:08:ac:bb:d4:27:35: 31:d4:b6:e5:67:13:23:d5:bc:0c:da:b2:b4:16:24:95:31:6c: cc:2c:45:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTA5MDUwODI2MTVaFw0yNTA5MTIwODI2MTVaMBgxFjAUBgNV BAMTDTY4YmE5ZWE3LTkwMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOc+gznx+mPRnZ4N9k4jOgrzZWYto99Mq+02zugKhOUwU1/mQu4nUvtBQcbac/ 8dAkBe6mMdutenO2UFWS2K1tnkMLSpmDYiTKAv+Dx37GSHt+N3Odu89iIsHvHBJM ASA3BouXXcqq77TNfUtCDwRbs0xuZrLjLMXqmalOzudnlmGqBBTg/GoTFpREgGJc gJTnDdErwhB+IVFk6Lu8Gb9PlD/NM5L+5GIB3cQu5edZ+0keU4w2pjrBHGSvQJju 2pUZ9yQHAWrx5mJyUuT2tqaecaCz1MSbZiYNLjanQDqBZZE3KfddVWTTRitqnFuc 5Etmw05rBVWZ/yQX/aPB2awVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv9tjKY22 zX/buGa0jkgfEGEES8IwHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzY3QjA5NDA2NjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2 WjZrZTdfNFd1azFTUkEtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHFuah+g5a4jhST//Qd1ayx9KSb0h+4n0ABYMC7kfGJsoo4ThR2MaUS5 rTM6OTfnhASDZNKzmGlPWsPihYwCpfUnWzX9X7TIJmYqlKmFReRt10ucarla57IC 4cACe+nfH/qX7zivGNYNbLHsQyti64bZ3luRyQdm7M44WokhidzyQZ4kJoGUOk2M HDXjJrVPt3gCXdWQVxpBtim1OQAQihE+vwfKjawSwjJAxheUH/veveSKg2Fx5QnN luNleewpJNqQfA8+wC4R/F6EiBKDKg2s4UzLcrFsuiDivtZrxNmjvAhdlAisu9Qn NTHUtuVnEyPVvAzasrQWJJUxbMwsRUI= -----END CERTIFICATE-----Generated at Sat Sep 6 20:53:00 2025 by rpki-client