$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json) Hash identifier: u523KL8k1YCsRcBIVjXpEOR4L4xp0eeYp1n4CwzH2Ew= Subject key identifier: A7:5C:6D:0A:96:BA:BA:A3:5D:00:51:CE:2E:37:66:95:30:CC:F4:9C Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:14:56 +0000 Manifest this update: Sat 23 Aug 2025 08:14:55 +0000 Manifest next update: Sat 30 Aug 2025 08:14:55 +0000 Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: qOWSfB9eeNQY7xIUUVLRbrBfKJwY8u+81YolfoknSxk=) 2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Aug 23 08:14:55 2025 GMT Not After : Aug 30 08:14:55 2025 GMT Subject: CN=68a9787f-12f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:01:e0:64:8c:55:40:04:8a:14:aa:2d:94: c6:0f:87:cd:fc:cf:70:1b:89:da:cf:fb:82:96:ee: d6:04:d5:97:4f:19:c1:40:b5:63:13:74:b5:dd:1b: 34:bf:0c:a0:bf:de:0c:91:19:d9:2b:89:63:b1:f1: e4:26:99:85:22:48:13:db:24:48:8a:5a:2c:f5:03: 92:15:b7:1d:e4:ac:30:5e:73:19:43:e4:a0:eb:8e: 37:98:2c:12:42:65:ee:f7:4d:e8:8e:c5:bf:c5:4d: e3:2e:cc:73:82:47:9f:98:c0:4e:ee:c9:1b:36:cd: f0:74:5d:68:a3:f9:c4:c7:f2:65:25:0b:a9:ee:ac: 34:4f:0c:6e:ae:fd:6a:a0:ce:ab:b6:f6:88:64:d8: 66:26:38:61:e5:a5:59:38:ce:5a:b8:fe:88:6b:d0: a9:79:fc:b7:c1:a8:60:e1:b8:cc:76:7d:ed:9c:fa: 27:ec:08:c1:ca:2f:15:48:70:6a:ee:d8:77:85:4e: 32:02:2c:68:b0:d5:23:1f:60:b8:18:50:01:a8:a1: 2c:8f:77:c6:b7:d5:ab:e4:79:42:bf:81:8c:44:0a: 55:d0:d5:cc:78:92:df:ef:21:55:d0:b2:94:3c:c6: 03:c0:4f:cd:e4:27:ff:6c:72:68:b6:ba:d6:83:0c: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5C:6D:0A:96:BA:BA:A3:5D:00:51:CE:2E:37:66:95:30:CC:F4:9C X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f8:a4:89:d7:ca:0f:ab:59:c7:82:df:72:a5:76:7c:51:26: 12:35:b8:3e:59:6e:21:b9:dd:d5:0a:d6:04:c4:9a:6c:f4:b7: 7f:f7:0b:39:1e:ec:8c:d6:71:c1:77:bf:70:24:05:66:c2:b2: 69:28:96:51:88:14:57:df:de:63:7d:b6:e9:a5:93:59:e1:af: a7:11:7b:2c:9d:af:8b:dd:fb:79:3f:9d:4a:3d:5a:40:1b:e4: de:a1:d0:10:ef:17:74:54:77:47:f6:6e:be:33:fa:d5:ea:bc: 1e:97:1f:1c:87:a7:27:d3:34:8d:15:dd:93:df:7a:c3:72:d8: 3b:82:52:49:a7:ef:68:99:d9:f2:c5:a8:65:e5:d1:5f:19:8e: e6:d2:55:6b:13:48:4f:20:4f:e8:4b:d9:a9:b0:1d:61:38:26: df:60:09:84:c2:0c:e9:54:c9:da:cc:ef:78:0f:9e:42:ec:fb: 50:51:02:a4:13:c9:5d:4a:ee:4c:09:97:de:28:36:85:a0:09: e1:ae:46:53:c2:84:47:f9:c0:50:0b:ed:01:07:69:d1:01:1d: 6d:56:1e:e3:ae:f7:47:3e:3c:ef:78:e5:48:21:af:9b:4a:67: d1:e1:04:2a:20:a3:e7:4a:9e:41:3a:70:0a:75:fa:98:84:2c: b5:68:a3:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTA4MjMwODE0NTVaFw0yNTA4MzAwODE0NTVaMBgxFjAUBgNV BAMTDTY4YTk3ODdmLTEyZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrigHgZIxVQASKFKotlMYPh838z3AbidrP+4KW7tYE1ZdPGcFAtWMTdLXdGzS/ DKC/3gyRGdkriWOx8eQmmYUiSBPbJEiKWiz1A5IVtx3krDBecxlD5KDrjjeYLBJC Ze73TeiOxb/FTeMuzHOCR5+YwE7uyRs2zfB0XWij+cTH8mUlC6nurDRPDG6u/Wqg zqu29ohk2GYmOGHlpVk4zlq4/ohr0Kl5/LfBqGDhuMx2fe2c+ifsCMHKLxVIcGru 2HeFTjICLGiw1SMfYLgYUAGooSyPd8a31avkeUK/gYxEClXQ1cx4kt/vIVXQspQ8 xgPAT83kJ/9scmi2utaDDP5TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp1xtCpa6 uqNdAFHOLjdmlTDM9JwwHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzY3QjA5NDA2NjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2 WjZrZTdfNFd1azFTUkEtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB74pInXyg+rWceC33KldnxRJhI1uD5ZbiG53dUK1gTEmmz0t3/3Czke 7IzWccF3v3AkBWbCsmkollGIFFff3mN9tumlk1nhr6cReyydr4vd+3k/nUo9WkAb 5N6h0BDvF3RUd0f2br4z+tXqvB6XHxyHpyfTNI0V3ZPfesNy2DuCUkmn72iZ2fLF qGXl0V8ZjubSVWsTSE8gT+hL2amwHWE4Jt9gCYTCDOlUydrM73gPnkLs+1BRAqQT yV1K7kwJl94oNoWgCeGuRlPChEf5wFAL7QEHadEBHW1WHuOu90c+PO945Ughr5tK Z9HhBCogo+dKnkE6cAp1+piELLVoo0w= -----END CERTIFICATE-----Generated at Sat Aug 23 19:59:46 2025 by rpki-client