$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: 2ky+lymnUl0fwi8+OhirdrJRrWKa2pgo5G9996LN+TE= Subject key identifier: C3:6F:86:59:3E:73:DC:92:37:B4:AE:04:DC:71:20:CB:DA:82:44:8A Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 15A9 Signing time: Mon 18 Aug 2025 18:45:59 +0000 Manifest this update: Mon 18 Aug 2025 18:45:58 +0000 Manifest next update: Mon 25 Aug 2025 18:45:58 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: CUWfRTJBlfMMG+v4qW1D3wIQssAQY6/egjavOb1MTFE=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Aug 18 18:45:58 2025 GMT Not After : Aug 25 18:45:58 2025 GMT Subject: CN=68a374e6-acc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4c:c7:21:51:c7:fe:93:cd:7a:81:cf:91:d1: 46:14:a7:16:9e:d7:a9:68:4c:f2:ce:ba:53:92:c6: 05:e1:c1:e8:7c:c1:6b:1e:55:d2:f1:04:32:d8:5d: 5c:c2:cc:70:24:3a:28:06:a5:80:0b:9e:b8:a5:c1: 18:b4:ff:39:35:21:b8:c8:54:8c:b0:fb:66:1c:10: 32:02:d7:de:5e:56:f0:5c:4a:34:82:ed:0c:9e:5f: 04:82:1b:07:b2:2f:be:4a:c5:73:8d:d6:0c:20:5d: db:86:14:cf:d0:07:7b:86:0a:b4:c7:9f:d2:6d:8f: 41:ee:57:11:b1:29:10:3e:b3:4d:b2:75:ff:8f:4f: 11:dc:ff:0e:16:20:76:c8:6d:10:8c:ac:e4:25:8a: ee:fd:e3:20:bc:59:91:b9:cc:07:bd:2e:82:4d:80: 85:03:1d:3f:37:f3:3a:b7:c9:1a:21:66:7d:c0:d1: 11:27:01:e6:9f:56:1e:df:bf:ae:12:4d:28:6a:c6: 08:da:04:e6:82:af:1e:85:a9:07:cf:66:c2:69:c1: 3c:9c:fb:c2:5e:87:71:7f:09:55:c4:b3:40:07:77: d1:e4:26:9d:dc:fb:dc:2d:a3:d9:b9:71:b7:14:aa: 20:54:dc:45:a6:cd:ec:db:9f:02:34:66:a6:d8:97: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6F:86:59:3E:73:DC:92:37:B4:AE:04:DC:71:20:CB:DA:82:44:8A X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:95:85:49:5e:29:99:af:2f:1f:d3:c5:f8:a8:cb:80:59:6e: 36:c3:65:ac:49:e2:e1:e7:67:0b:b9:33:1f:b9:70:15:ce:98: 8b:90:35:ae:fd:38:b1:4c:b2:d8:59:0f:fc:9e:e8:d1:e3:d7: 24:26:b3:f1:5a:d0:53:1d:50:bd:d1:63:34:e5:39:f6:9b:b2: 6e:70:39:8d:41:09:80:a5:ce:ac:1d:26:c0:eb:a2:ba:86:e9: 40:ef:52:57:47:d4:ab:74:17:1d:f4:32:26:bd:ed:be:60:41: 3d:28:d0:d4:5d:15:71:b5:dd:e1:af:e7:61:72:ab:67:c3:f6: 0c:f2:b0:d2:da:70:ca:de:ca:22:df:bb:58:63:d8:35:80:3a: e4:ab:6f:7e:92:40:8d:94:79:f3:9e:0c:30:d3:e9:0b:f6:ba: 69:7b:a9:81:31:28:b0:fd:18:0e:87:09:2d:d1:02:af:bf:55: 23:f0:bc:cf:d7:be:ab:ff:36:04:10:74:96:9b:b3:0b:86:1b: 3c:93:59:87:da:a7:36:40:ed:03:01:3a:0a:46:0b:27:17:47: 6e:b8:15:59:3c:28:92:c5:c2:a3:b0:63:b1:92:4b:ac:b6:29: 82:75:06:21:5d:8f:77:82:38:13:5a:d6:6c:67:47:52:1e:26: c3:db:9a:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwODE4MTg0NTU4WhcNMjUwODI1MTg0NTU4WjAYMRYwFAYD VQQDEw02OGEzNzRlNi1hY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EzHIVHH/pPNeoHPkdFGFKcWntepaEzyzrpTksYF4cHofMFrHlXS8QQy2F1c wsxwJDooBqWAC564pcEYtP85NSG4yFSMsPtmHBAyAtfeXlbwXEo0gu0Mnl8EghsH si++SsVzjdYMIF3bhhTP0Ad7hgq0x5/SbY9B7lcRsSkQPrNNsnX/j08R3P8OFiB2 yG0QjKzkJYru/eMgvFmRucwHvS6CTYCFAx0/N/M6t8kaIWZ9wNERJwHmn1Ye37+u Ek0oasYI2gTmgq8ehakHz2bCacE8nPvCXodxfwlVxLNAB3fR5Cad3PvcLaPZuXG3 FKogVNxFps3s258CNGam2Jey5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNvhlk+ c9ySN7SuBNxxIMvagkSKMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdlYVJXimZry8f08X4qMuAWW42w2WsSeLh52cLuTMfuXAVzpiLkDWu /TixTLLYWQ/8nujR49ckJrPxWtBTHVC90WM05Tn2m7JucDmNQQmApc6sHSbA66K6 hulA71JXR9SrdBcd9DImve2+YEE9KNDUXRVxtd3hr+dhcqtnw/YM8rDS2nDK3soi 37tYY9g1gDrkq29+kkCNlHnzngww0+kL9rppe6mBMSiw/RgOhwkt0QKvv1Uj8LzP 176r/zYEEHSWm7MLhhs8k1mH2qc2QO0DAToKRgsnF0duuBVZPCiSxcKjsGOxkkus timCdQYhXY93gjgTWtZsZ0dSHibD25pY -----END CERTIFICATE-----Generated at Wed Aug 20 15:37:17 2025 by rpki-client