$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: AyrQZ/G7Fu3Dai229UFeQwcdid8QpsvUwagiJA4wtSk= Subject key identifier: B2:1E:D7:2E:3E:23:70:10:8A:32:07:29:41:DE:50:31:B1:D4:65:C6 Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AB9 Signing time: Wed 02 Jul 2025 19:45:02 +0000 Manifest this update: Wed 02 Jul 2025 19:45:01 +0000 Manifest next update: Wed 09 Jul 2025 19:45:01 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: 9cVAwVaftXdRh22x/oR98poB6Ojg1AheD9UB+OBMqWI=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: kRz4OHfhPxe5EPvefvMi3Xao6izuUxMq6U5mJJMpf2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: Jul 2 19:45:01 2025 GMT Not After : Jul 9 19:45:01 2025 GMT Subject: CN=68658c3e-04ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:b8:b4:5d:67:c5:f9:3e:9e:20:9a:60:bb: 1e:4a:ec:87:71:16:99:a8:91:f6:ff:a7:26:72:bd: 1a:f5:1e:3c:97:cc:43:84:70:34:7c:e3:a8:6a:12: df:2a:73:0b:00:ad:8b:ff:04:cf:7c:d1:1d:bb:f6: 12:06:e9:a0:bd:51:1d:1d:bc:72:ef:2b:4b:66:de: 12:b2:d7:0b:94:7b:8d:7f:91:aa:ef:57:31:ba:34: 79:7b:3b:b1:10:4b:c4:ec:51:cd:ff:30:87:63:cb: d4:92:b4:3b:c5:fa:9c:35:11:8c:b4:4f:56:a4:47: 18:b6:2e:b5:34:c0:05:30:74:67:99:90:73:4d:55: 25:ae:48:8e:75:90:67:ba:ff:6c:b6:86:90:ad:ae: d5:6c:60:bf:27:1b:f9:b4:45:ee:ef:42:5f:f3:e6: a0:d8:f8:f9:f5:6c:1e:dc:6d:68:d6:9d:17:c9:51: 00:46:ba:10:22:fe:99:9f:3e:55:24:9f:c0:7e:67: 45:e3:0c:dd:ea:b8:4a:ab:a4:d4:0f:53:dd:6c:a9: a9:74:72:26:59:f4:79:6e:a1:73:fe:29:1b:f9:b3: ff:49:1f:76:1c:64:e0:27:ce:3f:69:22:08:bc:3c: 14:e4:27:f5:2e:83:c8:e4:67:2a:60:24:6d:b4:72: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:D7:2E:3E:23:70:10:8A:32:07:29:41:DE:50:31:B1:D4:65:C6 X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1d:85:8e:4f:d7:36:1d:76:91:6f:8f:b5:a5:81:ca:88:45: e0:6d:96:e5:e9:0b:da:94:24:22:c9:21:29:03:02:ba:a5:3e: af:fd:bf:c1:09:cf:6e:24:91:01:6f:fc:f5:a0:12:26:44:15: 77:26:b6:6c:94:12:00:9c:0a:86:b9:5c:a0:fa:ca:49:51:84: f1:61:9c:cc:28:6d:98:76:10:ac:4a:33:26:d1:db:29:58:7b: cc:53:97:4e:4d:6d:0a:55:9d:ee:f9:e3:93:f6:89:69:84:91: 47:c2:da:58:fd:44:d9:a6:34:4b:e6:0f:ed:dd:c7:c1:5b:77: f3:78:28:1f:b9:79:ac:23:7b:c1:09:de:7f:9b:fd:11:db:ae: d3:a5:71:aa:a7:0c:65:95:5d:96:0b:fc:93:79:bd:60:66:6b: 44:46:c8:4e:cb:5c:93:d5:b0:5c:5b:09:ec:c0:fc:60:06:f3: 4b:a3:dc:d5:c5:74:21:80:fc:f9:33:28:78:aa:fc:1a:37:bc: 9a:d9:4f:14:ae:3f:28:45:7f:48:39:d0:32:02:98:f4:14:94: f9:47:a9:92:42:e1:4f:0f:01:d2:84:ac:9a:51:39:2c:af:73: db:a6:de:4c:f1:e6:49:e9:5b:41:f1:a1:f9:03:56:da:f6:a5: 86:4a:3f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUwNzAyMTk0NTAxWhcNMjUwNzA5MTk0NTAxWjAYMRYwFAYD VQQDEw02ODY1OGMzZS0wNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDK4tF1nxfk+niCaYLseSuyHcRaZqJH2/6cmcr0a9R48l8xDhHA0fOOoahLf KnMLAK2L/wTPfNEdu/YSBumgvVEdHbxy7ytLZt4SstcLlHuNf5Gq71cxujR5ezux EEvE7FHN/zCHY8vUkrQ7xfqcNRGMtE9WpEcYti61NMAFMHRnmZBzTVUlrkiOdZBn uv9stoaQra7VbGC/Jxv5tEXu70Jf8+ag2Pj59Wwe3G1o1p0XyVEARroQIv6Znz5V JJ/AfmdF4wzd6rhKq6TUD1PdbKmpdHImWfR5bqFz/ikb+bP/SR92HGTgJ84/aSII vDwU5Cf1LoPI5GcqYCRttHLVGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIe1y4+ I3AQijIHKUHeUDGx1GXGMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHYWOT9c2HXaRb4+1pYHKiEXgbZbl6QvalCQiySEpAwK6pT6v/b/B Cc9uJJEBb/z1oBImRBV3JrZslBIAnAqGuVyg+spJUYTxYZzMKG2YdhCsSjMm0dsp WHvMU5dOTW0KVZ3u+eOT9olphJFHwtpY/UTZpjRL5g/t3cfBW3fzeCgfuXmsI3vB Cd5/m/0R267TpXGqpwxllV2WC/yTeb1gZmtERshOy1yT1bBcWwnswPxgBvNLo9zV xXQhgPz5Myh4qvwaN7ya2U8Urj8oRX9IOdAyApj0FJT5R6mSQuFPDwHShKyaUTks r3Pbpt5M8eZJ6VtB8aH5A1ba9qWGSj/o -----END CERTIFICATE-----Generated at Thu Jul 3 14:19:20 2025 by rpki-client