$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: REkwV7PoVdmiNoDRgAk+z0tGJYhO5sMQ6ieC7zp7TuY= Subject key identifier: 24:E5:81:68:68:BB:2A:E5:7C:FD:36:D9:C3:24:1D:39:FD:B4:95:8E Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: C3 Signing time: Sat 31 May 2025 05:24:49 +0000 Manifest this update: Sat 31 May 2025 05:24:49 +0000 Manifest next update: Sat 07 Jun 2025 05:24:49 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: vKHXCNqtlVQBzPdtQH2lXff6Ty2hupTvVMv/ex1vKTM=) 2: 55291FA016B511EFA244974BC4F9AE02.roa (hash: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: May 31 05:24:49 2025 GMT Not After : Jun 7 05:24:49 2025 GMT Subject: CN=683a92a1-cdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:56:1c:ce:03:b7:f2:ef:21:83:60:26:da: 02:4f:e8:e9:c4:57:7b:c7:5e:29:2f:5c:72:be:56: 72:7a:7b:4f:4f:62:d7:81:b8:e8:2b:96:2a:7f:d1: c7:91:19:36:6d:f0:29:1c:76:fb:6b:ef:31:80:c1: e7:ed:e5:84:4b:bf:85:07:38:4f:9f:ee:9e:59:98: 6b:1c:3a:c2:8e:63:43:24:1a:f2:b6:2c:f4:01:38: 3a:8b:54:32:2a:b0:5e:11:e6:18:67:48:dd:1e:f0: 82:bb:5e:bb:5e:6b:d2:89:4c:4d:9c:62:4b:26:17: 92:6b:dc:e8:95:9e:d3:fa:81:a7:a6:b4:79:3f:21: bc:3f:95:b4:47:20:bc:01:92:62:31:f7:8a:57:9d: 8e:bb:f1:bc:08:2e:81:48:d4:ba:b2:cc:ee:5e:0d: 5b:c6:f1:66:56:68:2a:bb:73:64:cd:07:96:4a:2c: 46:ca:45:c1:f0:08:5b:fa:bd:33:e9:44:a2:74:48: dc:38:e2:52:3a:d6:7b:ab:3a:48:b4:c2:84:c0:d4: cb:54:b5:42:1e:9a:60:65:1e:86:2a:a4:1e:82:30: 20:f7:d7:2b:79:05:17:39:54:0a:b2:30:91:24:5e: 27:44:ea:72:1f:e6:02:7e:05:99:7a:c0:3a:1a:d9: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E5:81:68:68:BB:2A:E5:7C:FD:36:D9:C3:24:1D:39:FD:B4:95:8E X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e2:df:04:ee:fb:20:5f:7e:d6:30:31:45:86:66:a4:ae:4a: e2:57:0c:88:64:7a:fe:7f:29:1d:9d:41:ed:de:0d:6b:cb:f0: 8b:97:0d:2a:f1:43:88:91:7d:76:c8:7f:00:25:a2:c2:a5:d2: a6:78:d4:2f:3c:53:09:5a:d5:5b:9d:9c:98:a2:82:06:18:f0: c3:99:ee:fa:a1:32:1f:6e:8b:ee:0b:e4:04:70:14:aa:06:f5: 3a:99:02:83:9d:4d:d5:21:ad:7e:46:fc:71:1c:56:f1:e9:f7: ee:aa:8e:56:71:6a:39:ba:87:9e:c5:06:51:a3:a0:d4:c1:5b: 9a:f7:c4:fa:68:ae:ca:f1:38:f7:bb:8b:ad:04:27:61:c3:53: 0f:30:b1:6f:4d:8a:1a:a6:8b:a4:c2:a3:c4:6e:07:fc:ab:dd: 94:3e:94:be:8e:b0:b1:8a:9d:6f:5f:03:07:bd:45:07:cb:1e: dd:3a:68:4e:74:6a:09:66:a1:56:b4:ff:6e:ba:7b:85:20:76: dd:e5:2e:82:56:ff:7c:b1:c7:18:4d:46:64:9f:7f:40:06:10: c1:8f:45:53:93:b7:95:93:d3:c6:ee:52:97:f1:be:95:e2:ee: be:a2:82:a2:08:24:2e:1a:38:c5:c3:0a:2a:35:38:77:fc:b2: 13:a6:8a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUwNTMxMDUyNDQ5WhcNMjUwNjA3MDUyNDQ5WjAYMRYwFAYD VQQDEw02ODNhOTJhMS1jZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwulWHM4Dt/LvIYNgJtoCT+jpxFd7x14pL1xyvlZyentPT2LXgbjoK5Yqf9HH kRk2bfApHHb7a+8xgMHn7eWES7+FBzhPn+6eWZhrHDrCjmNDJBrytiz0ATg6i1Qy KrBeEeYYZ0jdHvCCu167XmvSiUxNnGJLJheSa9zolZ7T+oGnprR5PyG8P5W0RyC8 AZJiMfeKV52Ou/G8CC6BSNS6sszuXg1bxvFmVmgqu3NkzQeWSixGykXB8Ahb+r0z 6USidEjcOOJSOtZ7qzpItMKEwNTLVLVCHppgZR6GKqQegjAg99creQUXOVQKsjCR JF4nROpyH+YCfgWZesA6GtniXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTlgWho uyrlfP022cMkHTn9tJWOMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+4t8E7vsgX37WMDFFhmakrkriVwyIZHr+fykdnUHt3g1ry/CLlw0q 8UOIkX12yH8AJaLCpdKmeNQvPFMJWtVbnZyYooIGGPDDme76oTIfbovuC+QEcBSq BvU6mQKDnU3VIa1+RvxxHFbx6ffuqo5WcWo5uoeexQZRo6DUwVua98T6aK7K8Tj3 u4utBCdhw1MPMLFvTYoapoukwqPEbgf8q92UPpS+jrCxip1vXwMHvUUHyx7dOmhO dGoJZqFWtP9uunuFIHbd5S6CVv98sccYTUZkn39ABhDBj0VTk7eVk9PG7lKX8b6V 4u6+ooKiCCQuGjjFwwoqNTh3/LITpop9 -----END CERTIFICATE-----Generated at Sat May 31 16:59:29 2025 by rpki-client