$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: ZQqiuuK8CXjzR5/b6G0VQHjG94PZhCygUI/B8QwoNkE= Subject key identifier: 1D:CB:96:2E:FD:20:79:4B:E8:E3:FF:0C:1D:BC:CA:B7:84:4B:2B:D3 Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 41 Signing time: Sat 23 Aug 2025 07:42:23 +0000 Manifest this update: Sat 23 Aug 2025 07:42:22 +0000 Manifest next update: Sat 30 Aug 2025 07:42:22 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: XCpKubwWcm0eyidEKf7XZgoaYdj7EfvXZz9M5BnQLnE=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Aug 23 07:42:22 2025 GMT Not After : Aug 30 07:42:22 2025 GMT Subject: CN=68a970de-e575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:ad:ff:3b:ef:c0:a5:d5:63:6c:1f:dd:df: 46:57:dd:b4:f7:c0:ea:f7:c7:63:22:91:f5:2c:8e: 06:73:0e:89:4a:2e:9b:60:7a:74:fc:18:b2:e0:66: c4:31:b4:84:82:5f:4c:3d:bc:d1:ca:b4:37:75:4b: ac:9f:9d:e1:08:75:7d:85:fc:45:89:05:78:fd:36: ba:f4:a0:b5:45:f4:c0:74:16:86:6a:6d:8c:01:18: d6:1b:68:bd:20:39:33:d1:e9:19:3c:72:26:11:2b: 37:9f:98:04:f4:ee:fe:a2:4c:04:44:4b:b4:05:5c: 41:07:77:5c:ba:cf:90:ac:d6:68:1d:5a:43:d5:6b: c8:c7:36:19:16:93:4b:8c:ea:d8:bd:5b:54:5f:51: 2c:c9:5e:2a:70:3f:d0:fa:a9:54:13:5b:09:95:58: 5f:d5:9e:32:20:ff:50:ba:62:7b:06:b4:55:34:59: d4:b4:bf:c2:b5:3c:ed:ef:3b:07:77:36:0d:b9:8d: bb:3c:35:48:22:c3:13:21:14:fa:a9:97:e8:08:64: d9:ba:fb:5f:0c:4e:94:f7:01:cc:48:15:c5:dd:1d: 5a:fd:e8:12:0d:67:8c:31:aa:bf:b2:46:63:8d:eb: a3:7c:3d:37:fe:bb:3c:eb:f4:78:e9:df:19:3e:c1: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CB:96:2E:FD:20:79:4B:E8:E3:FF:0C:1D:BC:CA:B7:84:4B:2B:D3 X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8a:36:86:0b:a4:72:2d:73:49:cc:3c:1f:06:1f:eb:b3:d1: 41:26:05:82:c4:ed:b1:41:58:b0:69:ee:be:8d:0e:f0:dc:74: cf:e7:da:b7:99:c4:89:c6:58:8b:82:b4:07:fc:e6:06:66:12: 73:dd:9e:03:b8:18:ad:44:5a:d4:98:9e:25:26:7e:48:20:49: 92:e8:ab:f4:76:33:c0:89:34:a7:b9:64:c3:18:e4:3f:e8:94: 50:6d:c7:44:39:42:4e:e5:09:16:6e:91:ae:77:56:e9:4a:08: 76:6a:b0:0b:b1:7e:7c:b2:40:76:bb:e3:73:0f:a8:50:a5:05: 81:c3:c8:ce:6b:26:4d:97:2e:72:d0:e0:e7:9a:d7:48:8f:10: 88:48:8e:5e:a4:5d:10:a4:4c:34:a4:45:a6:da:52:5a:7b:10: ed:19:38:af:74:a0:a2:7b:2c:87:a3:a6:69:0c:70:50:53:4b: 4c:da:bb:dd:28:31:ae:96:69:fe:cc:6d:9d:00:e0:2a:6c:8e: 89:bc:aa:7f:ce:9f:51:3b:bb:56:d5:27:b4:e4:b2:4e:5e:f8: f5:32:e7:b9:c7:a2:c7:83:48:51:26:c2:31:9d:36:ee:42:84: df:b9:77:5c:68:01:1d:67:0a:0a:2c:0a:e1:99:9a:ca:18:96: 6b:79:b2:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA4MjMwNzQyMjJaFw0yNTA4MzAwNzQyMjJaMBgxFjAUBgNV BAMTDTY4YTk3MGRlLWU1NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDir63/O+/ApdVjbB/d30ZX3bT3wOr3x2MikfUsjgZzDolKLptgenT8GLLgZsQx tISCX0w9vNHKtDd1S6yfneEIdX2F/EWJBXj9Nrr0oLVF9MB0FoZqbYwBGNYbaL0g OTPR6Rk8ciYRKzefmAT07v6iTARES7QFXEEHd1y6z5Cs1mgdWkPVa8jHNhkWk0uM 6ti9W1RfUSzJXipwP9D6qVQTWwmVWF/VnjIg/1C6YnsGtFU0WdS0v8K1PO3vOwd3 Ng25jbs8NUgiwxMhFPqpl+gIZNm6+18MTpT3AcxIFcXdHVr96BINZ4wxqr+yRmON 66N8PTf+uzzr9Hjp3xk+wd45AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHcuWLv0g eUvo4/8MHbzKt4RLK9MwHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAmKNoYLpHItc0nMPB8GH+uz0UEmBYLE7bFBWLBp7r6NDvDcdM/n2reZ xInGWIuCtAf85gZmEnPdngO4GK1EWtSYniUmfkggSZLoq/R2M8CJNKe5ZMMY5D/o lFBtx0Q5Qk7lCRZuka53VulKCHZqsAuxfnyyQHa743MPqFClBYHDyM5rJk2XLnLQ 4Oea10iPEIhIjl6kXRCkTDSkRabaUlp7EO0ZOK90oKJ7LIejpmkMcFBTS0zau90o Ma6Waf7MbZ0A4Cpsjom8qn/On1E7u1bVJ7Tksk5e+PUy57nHoseDSFEmwjGdNu5C hN+5d1xoAR1nCgosCuGZmsoYlmt5siM= -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:00 2025 by rpki-client