$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: M1I4VA6+6LXJbLp4Q2/G/ks7yTtO/LPBpKxJZhts54k= Subject key identifier: FB:11:EA:D0:B7:08:1F:40:32:C5:D6:69:69:E2:A0:DF:3D:50:32:24 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 11A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1FD5 Signing time: Sun 24 Aug 2025 17:10:54 +0000 Manifest this update: Sun 24 Aug 2025 17:10:53 +0000 Manifest next update: Sun 31 Aug 2025 17:10:53 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: Y/EttqmkKTy5k4kNY2IysinaYzbajqpm60pvCaHsLjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4518 (0x11a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Aug 24 17:10:53 2025 GMT Not After : Aug 31 17:10:53 2025 GMT Subject: CN=68ab479d-ccc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:fa:d8:55:9d:99:8e:e0:fe:3f:59:e4:1c: ec:fa:18:dc:c3:1a:dc:d9:ee:b0:12:ed:a1:47:73: f9:ab:50:2b:a8:9a:38:c4:68:fd:e5:11:7f:43:a6: 26:fc:f3:99:01:24:ba:12:19:70:1d:0c:41:9d:4d: 87:6a:2c:9c:3c:d8:45:71:ff:e4:34:d2:02:95:00: b4:35:bc:1e:a5:16:72:4c:19:65:f1:29:84:3a:24: a3:49:10:ab:c3:bd:3f:6c:25:b8:b3:02:b8:88:9b: 24:95:e4:81:33:fc:b0:09:56:eb:d0:0b:56:d4:69: 8c:91:31:66:48:00:24:4e:12:52:f2:64:44:22:4e: 24:e7:ca:cd:82:ab:ab:80:58:ac:e7:d2:36:64:70: a9:55:2f:61:61:18:52:83:b8:05:f1:f7:a8:a6:b8: 74:f0:49:49:2c:f4:bb:f9:3a:39:17:fe:bd:b7:8b: 05:55:3d:4a:8c:a9:42:53:ce:f0:86:dc:c8:2f:53: 5b:f4:18:f6:8e:13:b6:cf:a5:25:d3:bb:c9:a5:94: 52:9c:c9:9e:2e:04:31:a7:61:57:79:d1:f5:0f:06: 8a:78:ce:e5:dc:87:29:15:08:b2:44:c4:20:5c:5e: d4:ba:e5:b1:b9:1f:f2:97:6b:9f:b5:6c:c6:9a:c8: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:11:EA:D0:B7:08:1F:40:32:C5:D6:69:69:E2:A0:DF:3D:50:32:24 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c9:59:b1:f7:83:9f:3e:62:d3:c3:cc:d7:9e:9f:95:1a:4d: 6e:d0:b8:7e:2e:e3:c8:d6:04:ad:21:7a:5d:a4:92:15:5f:69: 61:13:d7:40:8e:1e:8c:ec:de:4a:80:be:bf:92:f7:71:14:eb: c5:b6:e7:fc:fb:f1:8a:58:45:78:fa:90:6a:8b:66:b8:78:7a: 0a:87:56:85:89:45:19:f3:1d:6f:8e:ee:04:f0:3a:8e:02:ab: 07:18:4e:21:89:8f:0b:1a:89:e7:9e:12:fe:61:66:78:57:48: bb:09:59:9d:69:fe:e5:10:ab:f7:01:85:a1:0d:a7:0f:7e:31: 53:ae:0d:b8:83:11:7f:c0:66:f6:3e:56:5c:ef:bf:8c:96:10: 39:f8:b8:11:36:29:9d:fe:cc:f0:14:3b:3e:e9:f7:49:c0:23: ea:44:27:a7:45:09:2b:09:ae:e7:80:47:cd:41:bd:d0:c8:9b: 95:54:6a:c4:01:f6:c1:10:82:02:d7:57:55:0a:90:11:90:a3: 08:b3:f1:7a:64:b4:7c:0c:cb:38:47:44:cb:13:23:d2:77:73: 50:11:0a:47:12:4c:73:03:9a:84:92:6f:98:47:ae:78:ae:53: aa:37:5b:50:b9:9f:35:b7:5e:fb:78:46:c1:fd:99:87:98:4f: 5c:33:d1:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwODI0MTcxMDUzWhcNMjUwODMxMTcxMDUzWjAYMRYwFAYD VQQDEw02OGFiNDc5ZC1jY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZD62FWdmY7g/j9Z5Bzs+hjcwxrc2e6wEu2hR3P5q1ArqJo4xGj95RF/Q6Ym /POZASS6EhlwHQxBnU2HaiycPNhFcf/kNNIClQC0NbwepRZyTBll8SmEOiSjSRCr w70/bCW4swK4iJskleSBM/ywCVbr0AtW1GmMkTFmSAAkThJS8mREIk4k58rNgqur gFis59I2ZHCpVS9hYRhSg7gF8feoprh08ElJLPS7+To5F/69t4sFVT1KjKlCU87w htzIL1Nb9Bj2jhO2z6Ul07vJpZRSnMmeLgQxp2FXedH1DwaKeM7l3IcpFQiyRMQg XF7UuuWxuR/yl2uftWzGmsgVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsR6tC3 CB9AMsXWaWnioN89UDIkMB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiyVmx94OfPmLTw8zXnp+VGk1u0Lh+LuPI1gStIXpdpJIVX2lhE9dA jh6M7N5KgL6/kvdxFOvFtuf8+/GKWEV4+pBqi2a4eHoKh1aFiUUZ8x1vju4E8DqO AqsHGE4hiY8LGonnnhL+YWZ4V0i7CVmdaf7lEKv3AYWhDacPfjFTrg24gxF/wGb2 PlZc77+MlhA5+LgRNimd/szwFDs+6fdJwCPqRCenRQkrCa7ngEfNQb3QyJuVVGrE AfbBEIIC11dVCpARkKMIs/F6ZLR8DMs4R0TLEyPSd3NQEQpHEkxzA5qEkm+YR654 rlOqN1tQuZ81t177eEbB/ZmHmE9cM9Fb -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:14 2025 by rpki-client