$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: Zt63pAsefQGufE3a2oLXxv9Z93K1GnphtEie93y/hNc= Subject key identifier: 15:23:97:B1:52:87:09:16:30:30:37:19:65:E0:D8:CB:7B:E2:3A:BE Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 072E Signing time: Mon 30 Jun 2025 19:43:22 +0000 Manifest this update: Mon 30 Jun 2025 19:43:21 +0000 Manifest next update: Mon 07 Jul 2025 19:43:21 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: ohLVX4ZFVuyvBWvJllKGhcKfn6s9/AMCsYtxBs2Omww=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Jun 30 19:43:21 2025 GMT Not After : Jul 7 19:43:21 2025 GMT Subject: CN=6862e8d9-295b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:31:d1:83:99:ac:99:92:6f:40:8f:3f:73: 79:07:0e:d4:6a:50:4c:7a:ad:10:e6:f8:45:27:0b: dc:8f:d9:eb:fc:5b:95:42:a2:0b:3f:d2:1a:61:ce: af:40:03:e6:83:03:a1:01:58:04:91:7b:3c:d4:f9: f9:31:f5:5a:16:cd:5a:f5:13:ab:03:cb:e0:a7:81: ca:2a:a6:01:3a:54:3c:a1:24:de:dc:97:74:7b:67: 7f:ab:3f:bc:25:59:f5:5c:d5:fa:54:7e:77:6f:d5: 82:72:44:58:d9:94:11:cd:2f:60:c3:19:97:e8:22: 42:fb:2c:77:bf:86:8d:7b:cc:40:b3:cf:2c:c9:7b: c7:39:a3:f9:e9:9d:60:3d:26:f8:54:d8:ff:e0:e4: 29:e0:4d:c7:8c:cf:ed:e8:2e:8e:43:27:d0:91:55: b7:d1:aa:dd:6a:e2:5e:7d:70:9c:7f:7a:d2:62:34: 2f:84:46:69:29:5f:2a:dc:d9:bd:75:09:68:26:ee: 27:2b:9b:d2:99:f1:98:50:18:5c:37:b3:66:f0:ca: 42:71:ee:b6:e5:78:56:af:8b:59:9d:7e:56:75:f7: 43:cc:0e:0e:34:35:14:a6:bd:48:3a:f1:4e:54:3d: 35:a3:86:e4:9f:eb:36:bb:24:62:71:d3:3f:68:5d: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:23:97:B1:52:87:09:16:30:30:37:19:65:E0:D8:CB:7B:E2:3A:BE X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3e:eb:59:32:44:76:8d:40:9b:ee:02:a8:da:41:81:ab:ca: 50:08:25:3a:a1:ab:21:49:2c:b7:7a:ea:1c:66:6d:55:ac:ae: ac:dc:62:79:e3:79:8e:b2:ad:71:54:d0:bd:d8:26:b3:10:3f: dc:23:f0:b5:cd:57:0f:ee:3d:e6:f1:77:3a:34:a0:2e:46:c3: fb:01:70:16:33:6d:54:6f:f8:73:44:99:9a:81:7d:c4:62:67: 00:b1:3a:dc:e7:0e:c8:ee:05:40:c9:5f:1a:b1:82:dd:7f:15: 7a:8f:80:33:ed:65:0d:9b:29:c9:7c:20:5a:e6:ef:50:59:ef: 0f:a0:c8:8c:77:13:3c:63:c5:62:7a:9f:cc:f7:49:f2:1d:35: a4:5a:d1:fa:e7:0c:4d:71:25:3e:1c:b0:05:64:7d:9e:7b:e8: e6:8e:2c:d4:5c:45:d6:6a:fd:06:93:df:ce:82:d7:0f:06:de: c5:e6:f2:69:a0:ca:10:0d:2a:cf:ca:2b:19:58:75:48:d0:00: ad:86:c5:ee:4f:c1:39:cf:23:93:1e:2f:4c:30:35:7d:e5:93: b7:c0:0f:11:a5:73:bc:aa:f7:23:2c:58:c8:8b:2c:76:f1:2b: da:fa:17:f2:b6:d9:7e:df:ba:93:6f:0e:bf:b4:26:eb:57:9a: 66:26:74:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUwNjMwMTk0MzIxWhcNMjUwNzA3MTk0MzIxWjAYMRYwFAYD VQQDEw02ODYyZThkOS0yOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN4x0YOZrJmSb0CPP3N5Bw7UalBMeq0Q5vhFJwvcj9nr/FuVQqILP9IaYc6v QAPmgwOhAVgEkXs81Pn5MfVaFs1a9ROrA8vgp4HKKqYBOlQ8oSTe3Jd0e2d/qz+8 JVn1XNX6VH53b9WCckRY2ZQRzS9gwxmX6CJC+yx3v4aNe8xAs88syXvHOaP56Z1g PSb4VNj/4OQp4E3HjM/t6C6OQyfQkVW30ardauJefXCcf3rSYjQvhEZpKV8q3Nm9 dQloJu4nK5vSmfGYUBhcN7Nm8MpCce625XhWr4tZnX5WdfdDzA4ONDUUpr1IOvFO VD01o4bkn+s2uyRicdM/aF3JQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUjl7FS hwkWMDA3GWXg2Mt74jq+MB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2PutZMkR2jUCb7gKo2kGBq8pQCCU6oashSSy3euocZm1VrK6s3GJ5 43mOsq1xVNC92CazED/cI/C1zVcP7j3m8Xc6NKAuRsP7AXAWM21Ub/hzRJmagX3E YmcAsTrc5w7I7gVAyV8asYLdfxV6j4Az7WUNmynJfCBa5u9QWe8PoMiMdxM8Y8Vi ep/M90nyHTWkWtH65wxNcSU+HLAFZH2ee+jmjizUXEXWav0Gk9/OgtcPBt7F5vJp oMoQDSrPyisZWHVI0ACthsXuT8E5zyOTHi9MMDV95ZO3wA8RpXO8qvcjLFjIiyx2 8Sva+hfyttl+37qTbw6/tCbrV5pmJnTa -----END CERTIFICATE-----Generated at Wed Jul 2 19:55:38 2025 by rpki-client