$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft File: Mqch0wW1KTmxanDu43n7nIIQmhI.mft (raw, json) Hash identifier: LcNBnc4wS4BW00zQnHAwpbUUNbTp9lVdzig/CDuAAx0= Subject key identifier: 59:7A:1C:58:C9:2C:7D:2C:19:9D:D3:86:E5:05:CE:9E:BD:8E:B8:7F Authority key identifier: 32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 Certificate issuer: /CN=A912D71D/serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft Manifest number: 16 Signing time: Thu 03 Jul 2025 08:15:08 +0000 Manifest this update: Thu 03 Jul 2025 08:15:07 +0000 Manifest next update: Thu 10 Jul 2025 08:15:07 +0000 Files and hashes: 1: Mqch0wW1KTmxanDu43n7nIIQmhI.crl (hash: q9Ncf7NiL1PbGaclvvLwSfbEljNjd0rgPYQJVfzE4Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D71D, serialNumber=32A721D305B52939B16A70EEE379FB9C82109A12 Validity Not Before: Jul 3 08:15:07 2025 GMT Not After : Jul 10 08:15:07 2025 GMT Subject: CN=68663c0b-448d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:57:1c:a4:cb:dc:e8:3d:b1:ac:ae:c9:e1: ec:3b:ec:49:3d:1c:aa:92:07:3c:7c:2c:b4:dc:95: 2e:d3:78:93:35:4a:5c:d5:a3:63:36:29:7b:92:b9: 7f:cc:3c:92:b2:2b:12:4b:05:ec:2b:08:19:e0:e4: 46:e7:14:bb:8d:6e:39:f6:78:13:2f:83:68:b4:27: fd:aa:72:41:a5:85:b9:69:ad:57:24:aa:c3:ef:10: 46:57:6e:df:17:1e:19:19:40:32:71:ea:94:3e:2b: a8:d4:be:e2:78:51:ff:5a:7b:ad:a8:b7:12:02:0b: 36:1d:55:e7:30:66:a9:16:0f:dd:d7:37:25:24:80: cd:d9:16:64:dc:04:8f:01:ff:e8:60:a7:71:b9:36: 94:bd:42:f1:56:62:d6:86:8a:39:d5:f8:d1:3b:40: 75:f5:8c:56:a7:22:92:74:51:03:ce:d6:c6:22:e7: 59:c4:41:33:eb:55:65:b3:a1:ce:a1:d2:be:ac:f9: ff:c9:45:88:13:df:db:e2:46:1d:c9:a7:df:e0:6f: 42:67:cd:3d:cc:57:8c:df:76:b2:5e:7c:7f:dd:13: e7:01:a0:bc:4c:ea:6b:63:a6:5e:c3:2f:8e:b9:03: 65:4e:2c:15:3f:63:ce:37:06:77:8f:5b:b3:a5:7e: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7A:1C:58:C9:2C:7D:2C:19:9D:D3:86:E5:05:CE:9E:BD:8E:B8:7F X509v3 Authority Key Identifier: keyid:32:A7:21:D3:05:B5:29:39:B1:6A:70:EE:E3:79:FB:9C:82:10:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mqch0wW1KTmxanDu43n7nIIQmhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/262C9B0236CE11F0A2A69C1FC4F9AE02/Mqch0wW1KTmxanDu43n7nIIQmhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7a:a8:4d:2f:a2:bd:61:ac:8d:4c:62:36:56:a1:60:59:97: 8e:02:be:05:81:8e:aa:4f:4c:6f:d6:49:1f:77:ca:cf:99:7f: 4f:ca:69:ba:88:db:3a:2a:af:a4:1a:fa:9e:bd:46:1b:8e:92: 5b:58:73:23:6e:1a:1a:af:d6:f5:50:f0:95:ea:5b:22:d8:0b: 2b:1d:2f:65:ad:09:1f:99:16:1b:ed:7b:64:70:ff:f3:75:45: e2:64:5e:e3:95:e6:b4:a3:50:cd:50:77:da:9b:dd:f7:0a:2b: d8:53:dc:ee:6d:d5:50:7b:c8:ce:aa:83:24:1f:fc:46:28:1f: 25:b2:94:33:9e:07:9f:6f:46:3a:6b:81:1c:8d:da:60:68:a3: 27:54:21:bb:b9:1c:79:03:41:52:6c:e4:38:90:09:6e:36:39: cd:b5:d3:33:da:fa:ac:10:08:0c:0c:2e:2a:08:8a:6d:e5:c5: ee:84:34:ab:da:be:d8:04:24:98:13:a0:61:44:ac:47:ca:00: 27:07:e6:cc:a5:7b:10:86:09:71:be:e9:60:6d:0c:eb:79:a3: 27:e4:f7:34:14:78:aa:09:d2:62:b3:4e:a2:c1:2d:c9:1c:51: 23:fe:61:d5:f4:de:37:bd:a7:66:33:f0:34:7e:b4:37:41:82: 7f:bd:cd:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RDcxRDExMC8GA1UEBRMoMzJBNzIxRDMwNUI1MjkzOUIxNkE3MEVFRTM3OUZCOUM4 MjEwOUExMjAeFw0yNTA3MDMwODE1MDdaFw0yNTA3MTAwODE1MDdaMBgxFjAUBgNV BAMTDTY4NjYzYzBiLTQ0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxeFccpMvc6D2xrK7J4ew77Ek9HKqSBzx8LLTclS7TeJM1SlzVo2M2KXuSuX/M PJKyKxJLBewrCBng5EbnFLuNbjn2eBMvg2i0J/2qckGlhblprVckqsPvEEZXbt8X HhkZQDJx6pQ+K6jUvuJ4Uf9ae62otxICCzYdVecwZqkWD93XNyUkgM3ZFmTcBI8B /+hgp3G5NpS9QvFWYtaGijnV+NE7QHX1jFanIpJ0UQPO1sYi51nEQTPrVWWzoc6h 0r6s+f/JRYgT39viRh3Jp9/gb0JnzT3MV4zfdrJefH/dE+cBoLxM6mtjpl7DL465 A2VOLBU/Y843BnePW7OlfhI3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWXocWMks fSwZndOG5QXOnr2OuH8wHwYDVR0jBBgwFoAUMqch0wW1KTmxanDu43n7nIIQmhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJENzFELzI2MkM5QjAyMzZD RTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1RteGFuRHU0M243bklJUW1o SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXFjaDB3VzFLVG14YW5EdTQzbjduSUlRbWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE NzFELzI2MkM5QjAyMzZDRTExRjBBMkE2OUMxRkM0RjlBRTAyL01xY2gwd1cxS1Rt eGFuRHU0M243bklJUW1oSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAx6qE0vor1hrI1MYjZWoWBZl44CvgWBjqpPTG/WSR93ys+Zf0/KabqI 2zoqr6Qa+p69RhuOkltYcyNuGhqv1vVQ8JXqWyLYCysdL2WtCR+ZFhvte2Rw//N1 ReJkXuOV5rSjUM1Qd9qb3fcKK9hT3O5t1VB7yM6qgyQf/EYoHyWylDOeB59vRjpr gRyN2mBooydUIbu5HHkDQVJs5DiQCW42Oc210zPa+qwQCAwMLioIim3lxe6ENKva vtgEJJgToGFErEfKACcH5sylexCGCXG+6WBtDOt5oyfk9zQUeKoJ0mKzTqLBLckc USP+YdX03je9p2Yz8DR+tDdBgn+9zY4= -----END CERTIFICATE-----Generated at Thu Jul 3 12:09:42 2025 by rpki-client