$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: m4thumEBRQiegljaWdQLKk323+BeOMk2x2aM6RG1gxg= Subject key identifier: 93:A5:3E:BB:06:88:57:AB:98:41:CB:20:04:98:DE:DA:13:D7:8C:11 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0CBB Signing time: Sun 24 Aug 2025 18:07:51 +0000 Manifest this update: Sun 24 Aug 2025 18:07:50 +0000 Manifest next update: Sun 31 Aug 2025 18:07:50 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: zz1QK0A30m7J3vTM/Su1yVqCyq0Yj7v2Xs7BDQIQo+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Aug 24 18:07:50 2025 GMT Not After : Aug 31 18:07:50 2025 GMT Subject: CN=68ab54f6-cf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:7b:32:83:cd:da:18:f6:c7:c2:85:05:60: 4b:62:f8:4a:93:d9:8c:fa:a7:53:62:34:47:b4:53: 31:73:62:89:b2:04:ef:e3:e9:e5:69:ab:1b:5a:29: 93:ed:ad:55:2b:31:fc:65:ed:82:95:32:95:bb:34: 43:83:b0:9d:34:15:73:95:70:37:0b:8e:71:16:20: 58:85:9c:f5:15:bc:f2:76:f9:59:d2:42:b0:4f:b2: 36:51:ef:fb:d6:f9:24:eb:b7:e4:a2:c2:04:3c:ce: 55:7c:65:b8:77:26:3c:d1:b6:cf:76:cf:c2:c5:f7: 19:c2:b6:ec:85:ce:91:58:bd:64:59:f0:3f:de:a4: c2:a1:a7:3d:87:41:93:e6:7f:fb:db:43:89:e3:6f: 58:91:8d:7d:7a:78:1f:aa:f7:2f:cc:fc:20:37:54: d1:ff:e2:e0:67:70:54:92:61:96:19:22:af:82:25: e0:09:8d:55:67:6e:52:00:b8:6a:a4:8e:65:8c:49: 95:87:80:c9:14:c8:a9:78:8f:db:82:f1:25:aa:55: 70:cd:5c:24:d2:b7:84:30:f0:9f:ec:c9:da:6d:7a: ab:ee:6c:33:f9:6a:bd:84:44:2f:59:bf:a1:e4:dc: 75:6a:dc:16:05:40:5e:1f:46:f6:89:cf:64:e3:11: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A5:3E:BB:06:88:57:AB:98:41:CB:20:04:98:DE:DA:13:D7:8C:11 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:28:24:2f:b9:34:e6:17:91:22:51:f4:75:78:76:b9:80:71: 92:81:32:4e:0b:71:82:51:6e:56:b3:9e:ec:5e:85:11:2e:a6: 3a:0c:b7:57:42:f8:30:1d:56:63:4a:fb:80:a8:86:1d:eb:37: 4c:39:45:7a:22:e8:9f:35:ee:87:be:79:2d:06:e5:b4:0d:39: 38:46:e1:8d:cd:e6:c0:c9:ca:34:71:0a:3f:2f:ad:e5:9b:33: 2b:27:97:cd:36:6d:3f:b2:76:2e:1e:79:2f:99:ef:9d:b3:7b: 60:4a:87:f8:e6:71:53:27:da:9f:e9:31:33:52:54:44:19:71: 76:da:4e:a1:e0:f1:89:3d:48:72:b8:71:bb:9b:9a:c5:c5:dc: 61:8e:3a:ce:81:d4:f6:b2:77:fb:34:09:4b:77:6c:19:71:dc: 43:cd:47:94:bd:71:01:48:71:09:db:b1:a7:46:78:d4:09:08: 92:91:15:af:95:3a:8e:b5:23:6f:fc:39:95:46:01:57:6b:c2: c2:45:b7:2a:a5:90:41:37:fd:bf:17:e0:61:a9:f7:ac:bb:f3: d2:ab:1c:1a:de:23:88:63:68:86:bd:21:61:f8:5d:dd:08:6a: 8e:d7:07:7d:be:e7:b5:ea:e0:74:12:42:70:87:2a:93:4b:2b: dd:a2:93:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwODI0MTgwNzUwWhcNMjUwODMxMTgwNzUwWjAYMRYwFAYD VQQDEw02OGFiNTRmNi1jZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wR7MoPN2hj2x8KFBWBLYvhKk9mM+qdTYjRHtFMxc2KJsgTv4+nlaasbWimT 7a1VKzH8Ze2ClTKVuzRDg7CdNBVzlXA3C45xFiBYhZz1FbzydvlZ0kKwT7I2Ue/7 1vkk67fkosIEPM5VfGW4dyY80bbPds/CxfcZwrbshc6RWL1kWfA/3qTCoac9h0GT 5n/720OJ429YkY19engfqvcvzPwgN1TR/+LgZ3BUkmGWGSKvgiXgCY1VZ25SALhq pI5ljEmVh4DJFMipeI/bgvElqlVwzVwk0reEMPCf7MnabXqr7mwz+Wq9hEQvWb+h 5Nx1atwWBUBeH0b2ic9k4xFJiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOlPrsG iFermEHLIASY3toT14wRMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1KCQvuTTmF5EiUfR1eHa5gHGSgTJOC3GCUW5Ws57sXoURLqY6DLdX QvgwHVZjSvuAqIYd6zdMOUV6IuifNe6HvnktBuW0DTk4RuGNzebAyco0cQo/L63l mzMrJ5fNNm0/snYuHnkvme+ds3tgSof45nFTJ9qf6TEzUlREGXF22k6h4PGJPUhy uHG7m5rFxdxhjjrOgdT2snf7NAlLd2wZcdxDzUeUvXEBSHEJ27GnRnjUCQiSkRWv lTqOtSNv/DmVRgFXa8LCRbcqpZBBN/2/F+Bhqfesu/PSqxwa3iOIY2iGvSFh+F3d CGqO1wd9vue16uB0EkJwhyqTSyvdopPc -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:12 2025 by rpki-client