$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: 1xYt5AWTu03PnYjzBv50/+41A0jJN1rFi6PKpVMvK8o= Subject key identifier: 5D:CC:99:DF:C4:53:1A:73:5F:4D:F3:F6:42:38:BB:96:64:AA:A0:56 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 27 Signing time: Thu 03 Jul 2025 08:03:29 +0000 Manifest this update: Thu 03 Jul 2025 08:03:29 +0000 Manifest next update: Thu 10 Jul 2025 08:03:29 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: GwGR+j76eQl87Sz/3KCuWhY2oG/zf9UoXjkilb/W7ng=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Jul 3 08:03:29 2025 GMT Not After : Jul 10 08:03:29 2025 GMT Subject: CN=68663951-f7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:d0:db:72:02:99:96:ea:81:b7:ea:1d:14: 71:61:e2:15:35:d9:26:fe:9a:14:0d:92:30:da:a9: 57:e0:b6:61:0d:77:bc:ba:0c:01:b2:ee:2f:c1:12: 8c:43:d7:d7:a0:b7:55:6e:33:fc:6d:5d:00:33:9e: ab:53:50:f8:31:cd:ad:3f:49:48:ee:16:7a:60:7a: a1:db:18:cc:7d:eb:08:3e:a3:d8:82:02:3e:33:7a: bb:3e:94:7e:b1:28:3e:69:52:94:75:57:45:8a:41: ec:8e:77:83:dd:49:e9:74:5e:bf:0f:e3:ad:d8:7f: d3:db:31:31:aa:7f:6c:c6:83:14:38:2f:90:b6:1c: 41:21:d1:a7:e1:78:ea:48:e6:1c:5c:f8:60:d5:c9: a6:9a:91:fd:3a:19:cd:04:cd:56:d8:59:05:c4:af: ce:54:99:b7:1c:c0:20:21:79:19:e5:ad:97:f1:a5: 4a:7f:64:26:c3:06:db:4b:e6:1b:2b:a5:cc:15:26: c8:f1:90:81:a1:fd:86:30:a0:83:49:da:3d:4b:3d: 2d:e1:92:c0:83:af:1e:fd:27:ad:65:1c:84:64:b0: 3d:b8:63:99:0b:6d:08:94:6c:86:9a:e3:ba:d6:29: 43:bc:50:b6:d4:0c:af:ef:ce:73:74:6f:18:45:ed: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:99:DF:C4:53:1A:73:5F:4D:F3:F6:42:38:BB:96:64:AA:A0:56 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b5:c6:6d:4b:38:0c:70:ff:65:75:07:2b:f1:f3:4d:fb:81: 47:86:f9:50:b6:f7:ff:82:82:2b:e7:8c:30:96:82:69:b8:ca: 24:53:ef:d1:fd:ee:d1:42:db:17:3d:7a:5d:0d:ba:9a:9b:14: dd:85:8b:e1:be:69:6e:10:60:dd:fb:c7:d1:5c:79:b2:7e:d7: c4:ee:ec:71:18:38:f2:8d:83:3b:fe:ec:0e:cc:90:94:c6:61: 09:04:f3:53:13:8a:6d:dd:e5:11:e5:cb:43:ee:ad:18:0a:c6: 52:42:83:d8:04:de:28:8e:c7:d8:da:d0:73:53:0e:36:bf:59: b1:88:de:b4:d1:ad:fd:dd:f9:f4:76:d4:21:af:53:1c:6d:d6: c2:e4:4f:33:68:e5:d4:a7:98:51:df:48:78:c4:50:98:a4:f8: b4:99:18:1e:74:22:1b:d0:64:34:48:e7:fd:02:95:8c:ee:48: 1a:0b:49:a0:64:57:44:19:80:9d:37:1f:bd:f5:72:77:ce:0b: 30:e0:b3:84:49:c9:eb:1c:a7:8b:d2:e1:9b:b6:69:5a:f5:97: 72:ec:8a:58:3b:ed:70:57:09:a2:31:0c:4e:c3:2f:1c:04:19: b1:c6:22:ce:b7:14:92:04:e7:9f:a0:c8:55:58:af:51:be:8b: 2f:b5:86:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA3MDMwODAzMjlaFw0yNTA3MTAwODAzMjlaMBgxFjAUBgNV BAMTDTY4NjYzOTUxLWY3ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa0tDbcgKZluqBt+odFHFh4hU12Sb+mhQNkjDaqVfgtmENd7y6DAGy7i/BEoxD 19egt1VuM/xtXQAznqtTUPgxza0/SUjuFnpgeqHbGMx96wg+o9iCAj4zers+lH6x KD5pUpR1V0WKQeyOd4PdSel0Xr8P463Yf9PbMTGqf2zGgxQ4L5C2HEEh0afheOpI 5hxc+GDVyaaakf06Gc0EzVbYWQXEr85UmbccwCAheRnlrZfxpUp/ZCbDBttL5hsr pcwVJsjxkIGh/YYwoINJ2j1LPS3hksCDrx79J61lHIRksD24Y5kLbQiUbIaa47rW KUO8ULbUDK/vznN0bxhF7RYdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXcyZ38RT GnNfTfP2Qji7lmSqoFYwHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACe1xm1LOAxw/2V1Byvx8037gUeG+VC29/+CgivnjDCWgmm4yiRT79H9 7tFC2xc9el0NupqbFN2Fi+G+aW4QYN37x9FcebJ+18Tu7HEYOPKNgzv+7A7MkJTG YQkE81MTim3d5RHly0PurRgKxlJCg9gE3iiOx9ja0HNTDja/WbGI3rTRrf3d+fR2 1CGvUxxt1sLkTzNo5dSnmFHfSHjEUJik+LSZGB50IhvQZDRI5/0ClYzuSBoLSaBk V0QZgJ03H731cnfOCzDgs4RJyescp4vS4Zu2aVr1l3Lsilg77XBXCaIxDE7DLxwE GbHGIs63FJIE55+gyFVYr1G+iy+1hkc= -----END CERTIFICATE-----Generated at Thu Jul 3 17:53:41 2025 by rpki-client