$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: Vau6myZrjYBbSpsmIc32sqeTCUGwXtYdXfU6LuQC2B4= Subject key identifier: A4:2D:B6:3D:AE:D9:BC:5D:21:69:AE:D4:8D:8D:60:24:F6:51:2D:92 Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 39 Signing time: Sat 23 Aug 2025 07:51:10 +0000 Manifest this update: Sat 23 Aug 2025 07:51:10 +0000 Manifest next update: Sat 30 Aug 2025 07:51:10 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: tn3XH6yiNqWaVtVwLuy0vMIJ7wJaME7jtnVOB698Otc=) 2: E9331F863B2911F084C93028C4F9AE02.roa (hash: Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Aug 23 07:51:10 2025 GMT Not After : Aug 30 07:51:10 2025 GMT Subject: CN=68a972ee-b7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:f3:3e:aa:6b:d6:3c:33:61:4f:02:ae:04: e6:89:4c:61:20:e1:72:5b:a8:34:75:ec:db:dc:3b: bc:8e:e7:e1:9c:95:d2:16:86:09:4c:61:28:85:70: 55:e2:e0:b8:24:1b:51:80:26:ef:a1:93:37:a8:a9: 6a:0f:1b:75:37:61:1d:ce:46:05:fe:93:e9:72:a9: 4a:2d:fe:2c:76:99:fc:d6:92:89:4d:b1:a7:48:04: 77:52:f6:a2:fd:17:4c:ef:d9:6e:83:eb:04:6d:43: 82:6f:a0:41:a5:df:ae:31:ee:74:1d:d2:e3:14:0e: 1a:4f:ec:85:09:d4:88:62:d5:d0:01:a9:5b:c5:83: 6f:06:c9:67:d7:0a:a2:24:2a:ac:18:97:39:f4:05: 48:52:cb:3e:61:e0:82:91:36:68:9b:29:56:82:82: 88:50:c5:19:39:26:45:4f:49:a9:fc:df:17:44:b1: 6e:6e:91:54:27:c6:71:78:c9:c2:95:85:2e:2a:8c: 69:52:99:14:a7:cd:54:70:73:3b:1a:44:9a:cf:10: 5c:c5:8d:37:c8:29:79:2f:35:d3:e4:3e:0b:33:ad: d1:f9:19:58:0c:57:61:67:9a:20:6b:f6:39:a4:90: 27:ab:bf:29:ca:b1:25:52:5e:33:cb:91:41:5b:f1: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2D:B6:3D:AE:D9:BC:5D:21:69:AE:D4:8D:8D:60:24:F6:51:2D:92 X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2f:b9:5a:f5:c2:9f:58:27:9c:14:db:d9:88:81:2e:9a:8b: a6:a4:98:28:b2:5c:eb:83:bb:98:58:ac:db:26:1c:2e:df:b1: 61:47:b9:5a:eb:21:cb:df:00:0b:a8:52:ff:db:e2:e8:90:32: 81:8e:d8:36:30:2c:8e:b9:9b:28:60:23:a8:eb:05:8f:93:96: a9:8b:42:a6:96:14:8e:b3:88:9a:9a:44:3b:0a:60:c8:72:61: 93:3b:af:07:27:c4:a7:e1:6a:81:8e:da:7e:f0:ff:34:82:f9: ef:ca:96:cd:f7:6b:e5:b7:f2:60:31:99:4f:53:7c:2a:d8:e2: 88:c1:5a:17:a2:e6:a6:db:a4:20:33:ec:a0:a0:da:ad:86:17: 50:6c:83:84:25:7b:88:dd:c1:26:e5:39:97:79:31:c4:46:d4: e5:ea:49:51:33:06:47:98:db:ce:1f:53:b7:ae:c6:60:6c:68: 37:87:94:24:85:93:ac:e4:7a:6b:17:f0:2e:bc:44:4d:41:67: 74:35:5c:f8:3b:13:7f:44:98:46:74:1c:c5:38:36:c3:35:00: b0:24:88:74:2f:f6:c4:ef:99:a9:c8:35:cc:79:5f:2f:d2:48: 49:a6:55:e1:3f:a2:ed:9c:c8:a3:76:a6:6a:8b:84:c0:0a:ae: 26:1c:c7:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTA4MjMwNzUxMTBaFw0yNTA4MzAwNzUxMTBaMBgxFjAUBgNV BAMTDTY4YTk3MmVlLWI3ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDls/M+qmvWPDNhTwKuBOaJTGEg4XJbqDR17NvcO7yO5+GcldIWhglMYSiFcFXi 4LgkG1GAJu+hkzeoqWoPG3U3YR3ORgX+k+lyqUot/ix2mfzWkolNsadIBHdS9qL9 F0zv2W6D6wRtQ4JvoEGl364x7nQd0uMUDhpP7IUJ1Ihi1dABqVvFg28GyWfXCqIk KqwYlzn0BUhSyz5h4IKRNmibKVaCgohQxRk5JkVPSan83xdEsW5ukVQnxnF4ycKV hS4qjGlSmRSnzVRwczsaRJrPEFzFjTfIKXkvNdPkPgszrdH5GVgMV2FnmiBr9jmk kCervynKsSVSXjPLkUFb8TS1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpC22Pa7Z vF0haa7UjY1gJPZRLZIwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwvuVr1wp9YJ5wU29mIgS6ai6akmCiyXOuDu5hYrNsmHC7fsWFHuVrr IcvfAAuoUv/b4uiQMoGO2DYwLI65myhgI6jrBY+TlqmLQqaWFI6ziJqaRDsKYMhy YZM7rwcnxKfhaoGO2n7w/zSC+e/Kls33a+W38mAxmU9TfCrY4ojBWhei5qbbpCAz 7KCg2q2GF1Bsg4Qle4jdwSblOZd5McRG1OXqSVEzBkeY284fU7euxmBsaDeHlCSF k6zkemsX8C68RE1BZ3Q1XPg7E39EmEZ0HMU4NsM1ALAkiHQv9sTvmanINcx5Xy/S SEmmVeE/ou2cyKN2pmqLhMAKriYcx9s= -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:54 2025 by rpki-client