$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: FUT3zHv8iuCy+hYxmOvCA2GE71Edwl0XJOeIATAv+G0= Subject key identifier: 74:E2:BD:31:3E:4A:C3:35:66:0D:93:5C:04:1F:8B:55:BD:AD:B7:26 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0C9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0C9E Signing time: Sat 28 Jun 2025 17:57:55 +0000 Manifest this update: Sat 28 Jun 2025 17:57:54 +0000 Manifest next update: Sat 05 Jul 2025 17:57:54 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: pnzaj45yv1lZu7cL3HvqnUWbmjjIepOJuwTYAlTF+C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Jun 28 17:57:54 2025 GMT Not After : Jul 5 17:57:54 2025 GMT Subject: CN=68602d23-3155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:be:e0:15:93:68:45:04:12:2d:46:91:98: 31:cc:be:d0:97:c6:5a:9d:97:ca:63:1a:05:ef:8f: c9:e2:14:15:2b:d3:5c:d1:24:d8:bb:0f:ef:9a:75: 33:05:fe:67:5b:02:72:85:d2:f5:bf:ec:78:c2:24: ec:95:54:f3:09:d6:f2:a8:2c:57:5c:e5:4b:95:7f: d3:15:fc:d4:71:ab:84:ca:32:74:59:63:57:34:29: 36:db:1a:41:4f:ef:23:70:ee:06:3a:a9:45:71:a1: e0:08:3d:f4:d9:d8:7e:27:33:d7:38:7a:4e:80:64: 8c:d4:04:05:90:55:ee:1d:1e:42:0d:68:9f:9b:80: c0:fe:54:1e:ca:64:a0:39:19:fe:6c:23:9f:5f:a5: f4:1b:65:d0:fc:4d:39:fb:d0:14:1f:f6:d7:de:f4: 32:e6:08:11:61:8a:7a:c0:90:d8:7e:5f:1f:80:b6: 1c:55:d1:4a:36:20:8c:d3:e3:9d:98:93:40:c9:6c: 23:1c:36:90:c3:08:26:46:a9:20:dd:ae:0b:14:71: 66:1b:6f:88:b5:ed:3b:1d:9d:fc:4c:67:fe:14:d5: 48:bb:49:e4:1c:f4:36:54:1b:6a:86:31:41:78:8d: a1:65:a6:35:cf:4d:c0:91:fc:7f:1b:55:c8:e1:e5: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E2:BD:31:3E:4A:C3:35:66:0D:93:5C:04:1F:8B:55:BD:AD:B7:26 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:99:7a:d0:66:98:fb:76:5e:b4:91:1b:63:42:77:87:2a:e2: 59:b9:42:fe:e2:c9:a5:d6:5c:53:bf:73:b5:47:39:4c:af:e2: 19:5e:05:3f:10:d4:99:a2:22:a5:77:24:33:78:3c:c6:9c:2e: cc:3c:a2:c2:87:a2:64:5e:cc:49:9e:d3:6c:92:84:f7:04:31: 9e:75:23:00:a4:76:99:bc:ed:c2:29:dd:13:67:3c:82:31:61: b5:8b:a9:e9:72:8b:17:78:41:07:ac:d7:48:a1:98:9b:92:d8: 58:51:b9:82:9a:3b:57:55:75:55:c9:ad:0b:bf:ae:76:16:4f: 5e:8c:55:ba:2f:75:6f:9f:1d:e1:bf:44:80:15:53:71:c2:4a: d5:07:29:16:e8:78:9e:f9:bc:6b:25:62:49:8b:ee:f9:2b:4c: 76:a4:dd:12:b7:e5:35:09:f6:0e:67:5e:bb:e2:39:4a:30:4e: 35:71:4a:e4:bd:50:e7:61:11:e8:cc:cd:6e:b4:7d:16:fe:2f: 65:db:c6:9f:a6:cb:60:68:13:ae:67:40:39:b0:a7:79:11:96: 23:f0:44:88:a4:33:7a:15:0f:a7:88:f9:3e:40:92:27:d4:c7: 41:77:ad:ee:6c:2a:c3:2b:ff:80:e8:63:02:fe:8e:44:99:05: 2a:77:67:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwNjI4MTc1NzU0WhcNMjUwNzA1MTc1NzU0WjAYMRYwFAYD VQQDEw02ODYwMmQyMy0zMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlke+4BWTaEUEEi1GkZgxzL7Ql8ZanZfKYxoF74/J4hQVK9Nc0STYuw/vmnUz Bf5nWwJyhdL1v+x4wiTslVTzCdbyqCxXXOVLlX/TFfzUcauEyjJ0WWNXNCk22xpB T+8jcO4GOqlFcaHgCD302dh+JzPXOHpOgGSM1AQFkFXuHR5CDWifm4DA/lQeymSg ORn+bCOfX6X0G2XQ/E05+9AUH/bX3vQy5ggRYYp6wJDYfl8fgLYcVdFKNiCM0+Od mJNAyWwjHDaQwwgmRqkg3a4LFHFmG2+Ite07HZ38TGf+FNVIu0nkHPQ2VBtqhjFB eI2hZaY1z03Akfx/G1XI4eUL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTivTE+ SsM1Zg2TXAQfi1W9rbcmMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATmXrQZpj7dl60kRtjQneHKuJZuUL+4sml1lxTv3O1RzlMr+IZXgU/ ENSZoiKldyQzeDzGnC7MPKLCh6JkXsxJntNskoT3BDGedSMApHaZvO3CKd0TZzyC MWG1i6npcosXeEEHrNdIoZibkthYUbmCmjtXVXVVya0Lv652Fk9ejFW6L3Vvnx3h v0SAFVNxwkrVBykW6Hie+bxrJWJJi+75K0x2pN0St+U1CfYOZ1674jlKME41cUrk vVDnYRHozM1utH0W/i9l28afpstgaBOuZ0A5sKd5EZYj8ESIpDN6FQ+niPk+QJIn 1MdBd63ubCrDK/+A6GMC/o5EmQUqd2c1 -----END CERTIFICATE-----Generated at Mon Jun 30 09:38:33 2025 by rpki-client