$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: lgOlnoO4vVjm1TEgcvytarGa3Mq6d06zJvLUrip5chA= Subject key identifier: E1:D1:E0:27:50:E1:44:47:31:F5:FB:EE:93:8C:A4:0F:E3:CA:27:C8 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0CBA Signing time: Fri 22 Aug 2025 18:16:49 +0000 Manifest this update: Fri 22 Aug 2025 18:16:48 +0000 Manifest next update: Fri 29 Aug 2025 18:16:48 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: LZdM3aOJfKN2XHT5DsjRFYvw5vVp3WrevtwKiSNULJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Aug 22 18:16:48 2025 GMT Not After : Aug 29 18:16:48 2025 GMT Subject: CN=68a8b411-c95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:81:35:55:85:9b:50:db:e2:46:93:c0:f8: 2e:ae:21:d2:1c:68:d5:64:e5:f8:79:54:7b:d9:3e: 12:ee:02:6c:4c:c7:04:dd:65:a5:78:05:0f:dc:94: 3a:f2:5c:f7:a6:fc:24:a7:3b:54:9f:65:97:62:e1: 08:64:64:72:58:43:46:0a:0f:a8:8e:5d:42:a6:e7: 0b:f3:ad:20:a0:df:a8:13:e2:5e:26:c5:71:1d:cf: b4:14:d1:92:74:8f:57:2a:37:91:fc:bf:eb:72:d9: 3b:29:d5:2c:8e:44:3d:ed:f0:4e:e2:01:f6:02:e3: 90:69:03:4a:08:ce:3d:58:a8:02:23:16:48:f3:da: 2d:4e:cf:9b:27:20:f2:0d:78:43:09:15:fb:0c:ed: 28:be:36:33:f9:7a:be:a9:71:dc:16:39:29:0b:30: 55:4a:f9:5e:98:0b:e6:90:ee:8d:59:6e:2a:d1:72: 57:e2:9b:a9:d9:b0:21:95:c2:68:f0:d6:21:39:ca: 16:6b:bb:ab:52:3d:8b:60:d7:73:b9:92:4d:bf:da: 67:7b:92:8f:52:d3:4b:60:a8:1a:30:78:81:40:24: c7:7f:4f:ca:d3:ac:2f:b4:a7:bd:90:e1:6d:8a:ff: 97:ca:14:e5:ad:0f:6e:76:39:4a:4d:c1:0f:2d:4e: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:E0:27:50:E1:44:47:31:F5:FB:EE:93:8C:A4:0F:E3:CA:27:C8 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:74:33:a9:ec:e6:13:33:58:d1:ea:bb:11:b0:bf:b7:b3:a5: c4:03:25:76:10:dd:cc:4b:94:1a:02:ad:3a:8d:06:37:1e:ba: 92:25:95:7c:1d:32:28:18:1d:67:46:16:bd:76:c8:7b:09:1f: da:14:6f:c7:2d:de:4d:14:c2:0c:ae:4c:c7:6c:b7:a8:5d:f3: 62:bc:ee:8b:ac:f1:ad:a3:a7:7f:74:27:72:d1:7e:c4:bd:ef: 25:7a:3d:dd:1d:d5:a2:23:db:94:fa:6d:05:6b:35:19:03:28: 76:a4:26:e7:cf:a7:a7:ea:df:74:cc:40:23:26:76:ce:a2:b2: 58:50:72:80:ea:a4:9a:9c:75:5b:8c:a6:16:aa:d5:68:03:e8: 0c:35:98:76:41:67:5c:5e:c3:58:93:8c:d5:5d:09:01:b3:06: 29:f6:e2:c7:67:82:fb:53:7e:76:a1:22:61:2c:ae:0c:7c:7f: 47:54:13:ec:1b:0c:60:dd:77:0a:a0:73:83:7f:be:c5:87:95: 33:53:dc:28:f6:41:50:fb:69:32:44:45:9c:b3:b4:03:a3:b6: 21:2c:95:88:f1:d1:dd:49:fd:37:a8:05:9f:88:1f:ca:78:78: 5c:dd:14:03:4f:1c:0f:56:78:e6:f8:b1:90:e3:8b:4f:e6:ce: 2e:59:41:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwODIyMTgxNjQ4WhcNMjUwODI5MTgxNjQ4WjAYMRYwFAYD VQQDEw02OGE4YjQxMS1jOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7qBNVWFm1Db4kaTwPguriHSHGjVZOX4eVR72T4S7gJsTMcE3WWleAUP3JQ6 8lz3pvwkpztUn2WXYuEIZGRyWENGCg+ojl1CpucL860goN+oE+JeJsVxHc+0FNGS dI9XKjeR/L/rctk7KdUsjkQ97fBO4gH2AuOQaQNKCM49WKgCIxZI89otTs+bJyDy DXhDCRX7DO0ovjYz+Xq+qXHcFjkpCzBVSvlemAvmkO6NWW4q0XJX4pup2bAhlcJo 8NYhOcoWa7urUj2LYNdzuZJNv9pne5KPUtNLYKgaMHiBQCTHf0/K06wvtKe9kOFt iv+XyhTlrQ9udjlKTcEPLU7a5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHR4CdQ 4URHMfX77pOMpA/jyifIMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOdDOp7OYTM1jR6rsRsL+3s6XEAyV2EN3MS5QaAq06jQY3HrqSJZV8 HTIoGB1nRha9dsh7CR/aFG/HLd5NFMIMrkzHbLeoXfNivO6LrPGto6d/dCdy0X7E ve8lej3dHdWiI9uU+m0FazUZAyh2pCbnz6en6t90zEAjJnbOorJYUHKA6qSanHVb jKYWqtVoA+gMNZh2QWdcXsNYk4zVXQkBswYp9uLHZ4L7U352oSJhLK4MfH9HVBPs Gwxg3XcKoHODf77Fh5UzU9wo9kFQ+2kyREWcs7QDo7YhLJWI8dHdSf03qAWfiB/K eHhc3RQDTxwPVnjm+LGQ44tP5s4uWUEL -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:09 2025 by rpki-client