$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: OfvArodyZggJ7zhmUhCK6H2YPOzEZjbYKXXd1LFXqWg= Subject key identifier: 77:9B:86:EE:23:4E:B7:C7:2F:BB:A5:B4:05:C2:E8:BD:10:91:EA:6E Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: A7 Signing time: Fri 05 Sep 2025 06:45:27 +0000 Manifest this update: Fri 05 Sep 2025 06:45:27 +0000 Manifest next update: Fri 12 Sep 2025 06:45:27 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: fnqdFEEuYpVZi7BhwbKOQzKPilTffxHOz/PUt0uaPPI=) 2: 2DE2034C7CE611F09D6F9158C4F9AE02.roa (hash: 9bfhDxpjGk5MpXlYmgoEbLayeYNZ5CvO3E2O+ZYV9gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Sep 5 06:45:27 2025 GMT Not After : Sep 12 06:45:27 2025 GMT Subject: CN=68ba8707-2ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:0c:8a:62:7a:8b:bf:fb:e2:ed:f8:54:26: 1d:8d:0e:92:a9:06:f0:fb:e9:fd:e8:ba:1c:49:e6: fe:98:3d:f4:28:09:04:45:33:77:3b:de:3f:5a:ef: 54:cb:c6:d5:cb:4d:ee:7e:39:f5:e3:39:2c:a7:43: 95:bc:88:99:7c:0d:9a:cd:01:69:9c:be:07:e6:f8: 7b:f1:12:cb:24:fb:c2:8a:04:f7:02:0d:b4:f9:0a: e3:41:91:9a:f7:ce:dc:2b:c0:af:d2:ca:8e:b3:33: 6d:e5:64:69:7a:d1:70:4e:5f:b1:d4:7e:ed:87:3b: 73:e4:e0:19:9f:ec:ad:b3:84:69:1e:c7:b5:5f:e3: d0:d3:f5:31:b0:8f:c7:ca:f1:7e:e0:47:bf:2d:c0: 53:d5:ad:d4:15:be:95:b0:4c:b6:a4:4e:89:c0:c6: 77:c1:48:08:56:4e:fc:9b:97:75:46:69:33:28:54: 4b:af:64:f9:a8:5d:60:f2:fb:cc:bf:82:35:e7:e0: bc:96:70:84:3d:e4:f4:fb:8f:f7:b9:9b:0e:cc:2c: 4c:8c:2f:bb:63:bf:8c:0a:d6:d3:f3:c0:6c:b4:3e: 4c:30:36:42:00:6e:95:1d:33:12:d5:31:56:d6:12: ea:4c:30:ac:76:77:98:b4:fa:2a:76:8a:8a:c0:e6: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9B:86:EE:23:4E:B7:C7:2F:BB:A5:B4:05:C2:E8:BD:10:91:EA:6E X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:de:c0:52:d0:25:cf:ea:59:f4:43:3d:be:eb:60:22:a3:d1: 94:f3:12:39:89:63:8b:0d:53:61:eb:00:d1:5b:de:bb:76:3d: 0a:a7:67:f9:f6:9b:3a:97:ee:d5:e9:34:1e:0e:2e:36:d9:b1: 25:99:d8:66:97:5d:5f:5f:2c:34:1f:9d:42:b2:81:2c:46:98: cd:14:9e:81:e7:14:14:af:da:83:15:a2:28:92:6d:15:bd:c5: 82:48:c0:43:5c:0c:b4:66:d5:1f:9e:8f:c5:f9:98:0a:4a:92: 0b:f8:7b:9f:05:29:c3:15:64:4f:27:17:04:34:73:54:aa:47: 46:87:a4:f2:62:0a:f4:73:fb:6c:dc:08:52:0b:25:73:fd:88: a9:09:2c:85:4c:4a:1e:32:f3:e6:d3:05:bd:aa:f1:6e:d7:ec: a2:6e:8a:74:1f:44:e3:ea:4e:e7:55:98:29:23:c9:82:c3:b2: f2:44:2a:f1:dc:fb:02:05:38:a3:50:89:5f:f3:58:1f:91:12: 90:99:5b:da:86:f6:f6:43:57:95:1c:f2:10:48:60:52:a3:54: 38:8e:f8:57:0f:4c:33:04:14:00:11:c4:d0:55:60:9d:b7:15: 82:5a:4f:73:81:5e:01:a8:7e:04:63:1f:09:09:fe:50:0f:3d: 9d:2d:a0:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUwOTA1MDY0NTI3WhcNMjUwOTEyMDY0NTI3WjAYMRYwFAYD VQQDEw02OGJhODcwNy0yYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnYMimJ6i7/74u34VCYdjQ6SqQbw++n96LocSeb+mD30KAkERTN3O94/Wu9U y8bVy03ufjn14zksp0OVvIiZfA2azQFpnL4H5vh78RLLJPvCigT3Ag20+QrjQZGa 987cK8Cv0sqOszNt5WRpetFwTl+x1H7thztz5OAZn+yts4RpHse1X+PQ0/UxsI/H yvF+4Ee/LcBT1a3UFb6VsEy2pE6JwMZ3wUgIVk78m5d1RmkzKFRLr2T5qF1g8vvM v4I15+C8lnCEPeT0+4/3uZsOzCxMjC+7Y7+MCtbT88BstD5MMDZCAG6VHTMS1TFW 1hLqTDCsdneYtPoqdoqKwObFWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHebhu4j TrfHL7ultAXC6L0QkepuMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo3sBS0CXP6ln0Qz2+62Aio9GU8xI5iWOLDVNh6wDRW967dj0Kp2f5 9ps6l+7V6TQeDi422bElmdhml11fXyw0H51CsoEsRpjNFJ6B5xQUr9qDFaIokm0V vcWCSMBDXAy0ZtUfno/F+ZgKSpIL+HufBSnDFWRPJxcENHNUqkdGh6TyYgr0c/ts 3AhSCyVz/YipCSyFTEoeMvPm0wW9qvFu1+yibop0H0Tj6k7nVZgpI8mCw7LyRCrx 3PsCBTijUIlf81gfkRKQmVvahvb2Q1eVHPIQSGBSo1Q4jvhXD0wzBBQAEcTQVWCd txWCWk9zgV4BqH4EYx8JCf5QDz2dLaBk -----END CERTIFICATE-----Generated at Sat Sep 6 16:52:40 2025 by rpki-client