$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: aV/tAzGx/msGZtWWNUfby9q+gfjzgpW95fnF00Xe4lI= Subject key identifier: D5:8E:3E:61:89:F2:30:39:EC:30:7B:6A:D3:AE:91:A2:5A:F7:87:B5 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: 8C Signing time: Sun 20 Jul 2025 16:14:47 +0000 Manifest this update: Sun 20 Jul 2025 16:14:46 +0000 Manifest next update: Sun 27 Jul 2025 16:14:46 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: sabDsd/7e9nJC3PEy7QiEJjMYSarULGGeUtDNuIkPZA=) 2: 59FE5CAE624811F0BB5AEE59C4F9AE02.roa (hash: /BO7MOv6a+eIAb796aVsjc+9xJ9r/nsjgcF5LLCvMTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Jul 20 16:14:46 2025 GMT Not After : Jul 27 16:14:46 2025 GMT Subject: CN=687d15f7-b613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:99:ac:3f:f9:4b:53:d3:c2:59:03:bd:90: bd:dc:1e:92:75:b1:02:56:d3:a6:28:21:c5:a4:2d: 38:8d:85:39:e7:4d:92:70:89:9b:44:da:2a:ec:bd: 08:8f:8a:e7:f8:5f:72:c5:a6:a1:18:07:d5:70:47: 90:cd:98:b1:eb:29:1d:4e:e1:8f:1d:49:28:44:b2: d6:d9:33:0e:41:fb:11:ee:99:fd:27:d3:d8:b8:86: 97:0a:b9:44:9e:73:b2:0e:59:c9:c6:76:be:08:88: 0d:73:4b:e6:ca:77:42:2c:ed:0f:e0:71:26:e6:37: 99:29:af:3d:34:a7:f3:fb:0c:81:64:2e:b0:18:88: 38:d1:1e:94:5c:68:f6:9a:81:58:94:de:a4:90:48: 8f:3d:3c:1a:c5:12:bf:98:ae:96:f1:f6:a3:9a:e7: f9:1e:d8:fb:cb:f7:a9:50:b2:22:f1:d5:db:4d:12: c6:78:2a:52:56:f9:5e:41:bb:03:09:6b:de:09:33: 1d:5b:f1:fd:73:da:0a:68:3d:d2:29:4a:21:ac:eb: 75:59:b5:20:e9:32:6e:17:ea:56:ac:6f:fb:3b:72: 0f:08:d8:ae:75:ea:3e:8f:e1:3d:9d:04:c4:7c:d3: 64:d0:20:6b:de:3b:9a:f5:88:84:f3:0b:bb:f7:95: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8E:3E:61:89:F2:30:39:EC:30:7B:6A:D3:AE:91:A2:5A:F7:87:B5 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6b:d2:52:69:c3:7a:36:88:2d:e6:75:df:c1:97:74:08:44: 2d:95:ed:e8:cf:2d:36:2e:48:46:7c:4d:95:a7:94:d7:fc:00: 28:e2:e9:e3:91:a4:69:7a:b9:b5:6e:da:80:10:de:60:d8:a3: c0:9b:01:8d:f6:48:4b:c3:6f:42:2e:5f:60:e4:99:bf:84:a8: e2:29:32:96:29:45:43:d2:0a:68:f4:a6:cd:3e:bc:26:7e:9a: 34:61:ad:7f:22:0f:fb:8a:49:52:d0:34:2e:66:68:6d:49:b5: 0e:6d:5d:e2:1f:e3:3d:92:65:7d:eb:b3:8b:bc:6b:16:a2:32: 55:dd:db:59:12:1c:14:be:be:eb:ea:0a:95:c0:95:11:72:4c: 66:9a:40:86:d1:17:9a:ed:e9:55:8f:2a:00:7c:83:86:ba:9c: 9a:79:15:bc:1c:a9:22:e6:c4:fa:b0:4a:32:46:f8:da:68:1c: 73:a5:ab:f9:24:57:28:62:56:6b:50:b5:09:59:70:2d:be:de: c6:d1:94:68:c2:f2:97:ac:a2:c2:22:88:07:b6:60:36:db:6d: 61:ef:43:39:be:01:64:53:d5:6a:b3:9d:a6:3f:52:42:24:70: a0:ae:db:7f:bb:c0:50:5b:c8:de:24:8e:a5:c7:58:f6:f7:aa: 1f:1a:86:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUwNzIwMTYxNDQ2WhcNMjUwNzI3MTYxNDQ2WjAYMRYwFAYD VQQDEw02ODdkMTVmNy1iNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAuZrD/5S1PTwlkDvZC93B6SdbECVtOmKCHFpC04jYU5502ScImbRNoq7L0I j4rn+F9yxaahGAfVcEeQzZix6ykdTuGPHUkoRLLW2TMOQfsR7pn9J9PYuIaXCrlE nnOyDlnJxna+CIgNc0vmyndCLO0P4HEm5jeZKa89NKfz+wyBZC6wGIg40R6UXGj2 moFYlN6kkEiPPTwaxRK/mK6W8fajmuf5Htj7y/epULIi8dXbTRLGeCpSVvleQbsD CWveCTMdW/H9c9oKaD3SKUohrOt1WbUg6TJuF+pWrG/7O3IPCNiudeo+j+E9nQTE fNNk0CBr3jua9YiE8wu795VW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWOPmGJ 8jA57DB7atOukaJa94e1MB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfa9JSacN6Nogt5nXfwZd0CEQtle3ozy02LkhGfE2Vp5TX/AAo4unj kaRperm1btqAEN5g2KPAmwGN9khLw29CLl9g5Jm/hKjiKTKWKUVD0gpo9KbNPrwm fpo0Ya1/Ig/7iklS0DQuZmhtSbUObV3iH+M9kmV967OLvGsWojJV3dtZEhwUvr7r 6gqVwJURckxmmkCG0Rea7elVjyoAfIOGupyaeRW8HKki5sT6sEoyRvjaaBxzpav5 JFcoYlZrULUJWXAtvt7G0ZRowvKXrKLCIogHtmA2221h70M5vgFkU9Vqs52mP1JC JHCgrtt/u8BQW8jeJI6lx1j296ofGoYQ -----END CERTIFICATE-----Generated at Sun Jul 20 20:42:49 2025 by rpki-client