$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: TuyGlF7RbGjGHzcc1UBRBSSLxFvRPee1CXy8yiRsoMc= Subject key identifier: 96:4C:79:D8:C4:20:86:BC:E7:D2:FC:37:04:2A:18:88:F4:D4:64:10 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 1579 Signing time: Wed 02 Jul 2025 18:43:37 +0000 Manifest this update: Wed 02 Jul 2025 18:43:36 +0000 Manifest next update: Wed 09 Jul 2025 18:43:36 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: /thuuzdcrf2PyDiJh91V3PL4iH3v89Q5ht2qYMPyjto=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Jul 2 18:43:36 2025 GMT Not After : Jul 9 18:43:36 2025 GMT Subject: CN=68657dd8-667c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:dd:b8:4e:7f:00:48:c3:bb:3a:43:77:c7: f8:e6:ac:3b:d9:e7:b6:2c:2e:19:c5:40:af:f9:7d: 8f:2a:4e:0c:5b:35:02:b1:98:fe:9f:31:f7:e3:f6: 60:73:df:d9:c5:d8:08:5a:3d:8b:d8:32:d1:14:8c: ca:e2:cb:8f:a3:36:bf:1e:6b:d8:24:4f:c1:6a:d3: 01:07:51:ac:8a:07:28:a0:0b:e8:e9:a7:7f:8f:43: 8e:5d:f1:45:f7:b2:c0:81:1f:d8:02:8e:40:97:5a: 42:10:ad:f0:ef:b8:43:fe:5a:d1:e8:03:ec:42:21: 3b:e8:bb:6d:81:12:b7:25:de:ad:ac:83:02:3e:1c: 06:96:32:e5:87:2f:f6:16:ec:2c:e8:64:d0:67:c5: 08:62:29:f6:e9:a4:9d:47:86:6d:82:e8:40:9d:9d: 4e:8f:af:dd:6b:1d:dd:48:68:75:63:11:f7:b4:e0: 59:03:be:f5:e2:e7:6e:f9:cd:5f:ba:7a:36:0c:98: d1:0f:a9:db:b0:ce:2d:26:cc:93:4e:30:a8:aa:d5: fc:be:4f:b7:5f:a5:f2:dd:e3:37:29:b7:f4:af:b2: 69:fd:24:18:96:b4:fc:61:86:b2:f6:e2:61:6e:50: 87:a4:af:5c:fe:c8:d2:99:3b:df:74:c5:2f:2f:75: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4C:79:D8:C4:20:86:BC:E7:D2:FC:37:04:2A:18:88:F4:D4:64:10 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:04:d4:b2:e7:cd:ec:3e:fa:a9:66:a8:b8:1e:5b:f0:f4:37: 14:7a:2f:72:37:21:b2:1e:ed:11:b0:75:b5:2c:aa:9b:ce:94: b8:71:04:b8:2c:d8:78:19:0c:84:d1:22:21:48:fd:b4:f2:12: aa:3a:a0:ae:39:12:56:df:2b:27:e7:06:4a:c5:fd:42:3f:3f: d7:a2:5e:26:f7:18:7d:8d:5e:d1:7a:c2:3a:da:4a:5b:64:56: ff:27:95:d0:4e:51:25:0b:46:3b:4c:92:c1:b9:dc:8f:f5:a1: 52:a5:c9:fe:4d:b7:7e:40:b2:0d:93:ad:95:e6:3b:0c:a5:f1: bf:18:cb:45:69:ff:f5:33:e5:9f:cf:5f:dd:85:28:89:81:5f: 61:1a:16:98:8e:70:a5:57:07:0e:2f:28:e0:fb:b3:b0:54:87: b9:9e:70:a8:20:7a:8d:52:d5:7a:94:30:d0:dd:9c:af:3e:ad: 44:da:4e:8b:50:20:8f:85:45:a0:c1:e8:b4:19:98:69:22:e8: 84:61:b0:8b:ba:13:e0:9d:9d:0d:dd:6d:06:63:2f:4a:f7:16: 9f:ea:ae:77:23:56:83:97:e0:77:88:8a:93:76:6a:0d:9a:60: 13:fa:6c:69:f9:1a:80:cd:e7:c7:a3:c6:10:f7:0b:22:eb:72: ea:03:ad:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwNzAyMTg0MzM2WhcNMjUwNzA5MTg0MzM2WjAYMRYwFAYD VQQDEw02ODY1N2RkOC02NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxbduE5/AEjDuzpDd8f45qw72ee2LC4ZxUCv+X2PKk4MWzUCsZj+nzH34/Zg c9/ZxdgIWj2L2DLRFIzK4suPoza/HmvYJE/BatMBB1GsigcooAvo6ad/j0OOXfFF 97LAgR/YAo5Al1pCEK3w77hD/lrR6APsQiE76LttgRK3Jd6trIMCPhwGljLlhy/2 Fuws6GTQZ8UIYin26aSdR4ZtguhAnZ1Oj6/dax3dSGh1YxH3tOBZA7714udu+c1f uno2DJjRD6nbsM4tJsyTTjCoqtX8vk+3X6Xy3eM3Kbf0r7Jp/SQYlrT8YYay9uJh blCHpK9c/sjSmTvfdMUvL3XYzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZMedjE IIa859L8NwQqGIj01GQQMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBNSy583sPvqpZqi4Hlvw9DcUei9yNyGyHu0RsHW1LKqbzpS4cQS4 LNh4GQyE0SIhSP208hKqOqCuORJW3ysn5wZKxf1CPz/Xol4m9xh9jV7ResI62kpb ZFb/J5XQTlElC0Y7TJLBudyP9aFSpcn+Tbd+QLINk62V5jsMpfG/GMtFaf/1M+Wf z1/dhSiJgV9hGhaYjnClVwcOLyjg+7OwVIe5nnCoIHqNUtV6lDDQ3ZyvPq1E2k6L UCCPhUWgwei0GZhpIuiEYbCLuhPgnZ0N3W0GYy9K9xaf6q53I1aDl+B3iIqTdmoN mmAT+mxp+RqAzefHo8YQ9wsi63LqA63i -----END CERTIFICATE-----Generated at Thu Jul 3 01:47:28 2025 by rpki-client