$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json) Hash identifier: oBoFt5kKstIpiqK6rQacuFOGFjjR0A+rMtFSAJAnzXc= Subject key identifier: D9:E5:FF:AC:17:66:D8:72:A3:58:BF:49:BD:67:63:C8:2A:29:F7:D9 Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Certificate serial: 16E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft Manifest number: 16D2 Signing time: Fri 04 Jul 2025 16:55:55 +0000 Manifest this update: Fri 04 Jul 2025 16:55:54 +0000 Manifest next update: Fri 11 Jul 2025 16:55:54 +0000 Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: QwhBq7w8qyXo5ICJqoeOZzb57q21G9BpAzx19cNcfZo=) 2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5861 (0x16e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4 Validity Not Before: Jul 4 16:55:54 2025 GMT Not After : Jul 11 16:55:54 2025 GMT Subject: CN=6868079b-043c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:61:cb:44:44:35:04:86:4c:76:c8:4a:ec: ba:37:ee:17:dd:08:03:27:00:9d:e7:71:a8:5a:b7: 77:22:c6:54:9b:9b:62:d2:62:04:07:1d:72:6b:81: 1a:e1:f9:08:04:10:75:ed:7e:a6:c3:6c:d6:8b:9f: 62:61:c6:85:c4:ae:4c:a2:61:8d:a3:6d:55:57:86: 3b:07:29:99:ac:cc:40:a0:05:ae:ec:bb:7c:19:79: bc:3c:2b:12:a5:51:7c:98:a0:6c:19:08:d7:c3:d1: 36:b7:a1:9f:4d:8a:fc:c9:5e:36:c2:17:5a:f7:b6: 02:0a:8f:1b:26:90:c6:44:e3:04:02:c4:cf:4f:9c: 26:1c:32:aa:72:09:8a:f4:05:73:6e:0a:8d:8b:0e: 9d:ee:62:7e:c4:73:fd:6d:2a:91:1c:9a:47:37:a4: 64:69:bc:f2:5d:74:d1:15:8c:63:5e:fb:7f:62:bf: 01:1e:7f:bb:65:f2:bf:ab:3d:28:f3:96:7d:83:ef: 06:1d:d4:9f:ea:54:39:d9:ae:04:e0:2e:85:26:91: 16:e0:3f:7d:83:ae:0a:8c:e1:d0:f3:51:19:71:7d: d7:fd:c9:00:53:fa:48:df:3f:36:4e:54:56:e6:94: 2f:1e:03:ac:18:18:cd:e5:d5:fe:5f:e5:03:82:d2: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:FF:AC:17:66:D8:72:A3:58:BF:49:BD:67:63:C8:2A:29:F7:D9 X509v3 Authority Key Identifier: keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c6:ed:70:33:71:58:57:c8:05:90:69:44:ef:0a:be:d4:35: a1:06:b6:a6:e8:da:10:e2:7c:6f:91:ec:2e:f9:83:c4:95:46: 6a:0f:21:f1:b6:82:51:74:8e:75:8f:f8:b5:c5:83:36:28:8d: cd:c9:e6:b0:c8:75:29:9a:c3:0b:42:cd:61:ee:5a:b4:10:3c: fc:f1:81:06:04:41:53:53:a3:4d:4b:3d:f4:16:d8:ce:1d:32: a8:ec:8e:cb:9f:ea:63:ee:20:b1:98:da:df:3a:c9:94:11:9c: b2:ca:26:1c:70:36:16:a6:a6:a0:4b:42:f3:26:ae:c6:81:97: f8:8f:2f:1b:9b:e5:97:bd:12:a2:b8:4c:0a:05:f2:9c:fe:07: 22:72:e4:8c:f5:2f:44:fb:c8:c3:5c:10:d7:4e:aa:e3:a6:d0: b7:08:58:81:f5:3d:6f:a9:4c:4b:26:e5:bf:94:df:aa:5a:a1: fc:76:74:3f:59:70:a4:e4:d2:4b:48:bd:37:e5:d5:02:27:6f: c1:bb:df:f6:0a:09:c5:7c:ba:0b:a7:21:8d:b2:c7:41:38:75: f0:dc:ba:97:d1:5d:d1:ca:54:63:dd:8e:4f:e5:6d:6b:5b:a6: e2:bc:f4:0e:4c:2e:ad:34:0e:30:5d:1f:04:2a:cf:1f:1e:99: 70:79:56:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD M0MwMkVDRjQwHhcNMjUwNzA0MTY1NTU0WhcNMjUwNzExMTY1NTU0WjAYMRYwFAYD VQQDEw02ODY4MDc5Yi0wNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T9hy0RENQSGTHbISuy6N+4X3QgDJwCd53GoWrd3IsZUm5ti0mIEBx1ya4Ea 4fkIBBB17X6mw2zWi59iYcaFxK5MomGNo21VV4Y7BymZrMxAoAWu7Lt8GXm8PCsS pVF8mKBsGQjXw9E2t6GfTYr8yV42whda97YCCo8bJpDGROMEAsTPT5wmHDKqcgmK 9AVzbgqNiw6d7mJ+xHP9bSqRHJpHN6RkabzyXXTRFYxjXvt/Yr8BHn+7ZfK/qz0o 85Z9g+8GHdSf6lQ52a4E4C6FJpEW4D99g64KjOHQ81EZcX3X/ckAU/pI3z82TlRW 5pQvHgOsGBjN5dX+X+UDgtJOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnl/6wX Zthyo1i/Sb1nY8gqKffZMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3 UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6 anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNxu1wM3FYV8gFkGlE7wq+1DWhBram6NoQ4nxvkewu+YPElUZqDyHx toJRdI51j/i1xYM2KI3NyeawyHUpmsMLQs1h7lq0EDz88YEGBEFTU6NNSz30FtjO HTKo7I7Ln+pj7iCxmNrfOsmUEZyyyiYccDYWpqagS0LzJq7GgZf4jy8bm+WXvRKi uEwKBfKc/gcicuSM9S9E+8jDXBDXTqrjptC3CFiB9T1vqUxLJuW/lN+qWqH8dnQ/ WXCk5NJLSL035dUCJ2/Bu9/2CgnFfLoLpyGNssdBOHXw3LqX0V3RylRj3Y5P5W1r W6bivPQOTC6tNA4wXR8EKs8fHplweVbD -----END CERTIFICATE-----Generated at Sat Jul 5 22:10:31 2025 by rpki-client