$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: qK2EU8yJpiZrtA0bTtR5/jhgRE4Dny+tuj0NjYCJRgc= Subject key identifier: 39:5A:E9:F8:D2:0F:AE:77:34:F7:10:09:19:77:58:A4:22:0F:8A:8C Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 15AD Signing time: Fri 22 Aug 2025 18:35:05 +0000 Manifest this update: Fri 22 Aug 2025 18:35:05 +0000 Manifest next update: Fri 29 Aug 2025 18:35:05 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: Nk8opRuCVWD35OSUmSX7NH+DjF9L1FbliZcXJEDu8/o=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Aug 22 18:35:05 2025 GMT Not After : Aug 29 18:35:05 2025 GMT Subject: CN=68a8b859-9eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:4e:4e:ef:b3:7a:19:af:82:32:9b:af:be: 99:77:9a:68:5a:59:86:9e:03:fb:df:bf:55:84:79: 44:c0:ed:ac:86:9f:5f:20:12:1d:ba:c3:99:82:e2: 2c:fc:7a:1a:07:7a:4b:59:e9:23:17:09:3e:af:3e: 9c:61:02:f0:54:8a:dd:45:23:44:44:48:73:89:25: 9b:3b:23:b6:47:2c:03:7d:a9:2a:97:ea:95:55:da: f6:a9:7a:f1:e3:e5:5b:68:81:42:1b:06:de:35:78: 4d:f7:0d:c4:37:15:e6:11:6d:11:34:a6:94:b4:70: fb:cb:9d:c6:5c:e5:c5:b1:03:64:7c:bd:21:c8:1f: 27:32:dd:99:c7:7c:f4:84:dc:62:4e:56:de:dd:c5: d4:47:2f:37:f5:c6:2c:a8:21:ac:35:07:1e:2c:50: 56:eb:16:01:d3:12:97:af:57:53:3d:d0:df:6d:99: e1:9f:b6:30:00:07:79:cd:d5:30:17:06:9a:48:85: 0d:61:52:92:bd:d4:37:b9:99:e7:6c:64:a9:9c:bb: e7:41:06:70:05:4f:8e:b3:cb:90:bc:9e:71:89:6c: 25:e2:06:bd:38:18:65:b5:3e:07:c6:c8:d7:cc:17: 3c:f6:70:32:a9:d0:51:7f:00:7f:5c:90:20:bc:f3: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:E9:F8:D2:0F:AE:77:34:F7:10:09:19:77:58:A4:22:0F:8A:8C X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:dc:07:31:c5:55:e3:1b:ab:00:cb:2b:c3:f8:e0:60:8c:e3: 77:2f:7b:73:87:b7:60:82:d2:ec:fd:0c:49:0e:69:61:6a:fb: ae:f9:e8:bb:fe:b1:08:9b:c7:08:f8:6e:ec:66:52:6e:73:a9: 5f:92:08:93:70:82:a1:f0:d5:10:b4:36:4f:28:e2:b1:77:dd: 8c:01:af:58:ef:c6:02:21:91:cf:1d:8d:95:f7:91:57:17:1b: a9:82:9d:2e:5e:e9:56:b9:92:76:c7:14:04:d8:f8:e0:1e:ce: f2:48:d3:25:c3:9a:ff:c5:d9:e4:28:f6:c2:c3:7c:17:28:2d: a6:d5:99:9d:d5:ce:7c:2e:c1:4c:3f:26:e2:e2:5c:0d:7b:eb: d1:62:9b:19:20:88:a3:3d:9f:87:31:2d:64:ef:a8:c0:0e:5d: ce:5a:a5:ce:af:8a:ce:e9:46:cf:52:4d:fb:f9:6c:5c:2e:1f: b6:0f:17:c9:fc:7d:d3:52:4e:7d:4c:2b:4d:d2:af:11:70:6a: 8a:35:71:79:af:28:08:bd:ed:5c:10:ed:23:62:f7:cb:7c:80: c3:72:d3:a0:2e:8c:d6:e7:dd:c6:91:36:83:fe:89:7d:0e:97: 2a:21:ca:9e:6e:9e:e4:25:9f:3d:f2:87:3f:3c:86:65:6e:9e: 9f:92:47:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwODIyMTgzNTA1WhcNMjUwODI5MTgzNTA1WjAYMRYwFAYD VQQDEw02OGE4Yjg1OS05ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOdOTu+zehmvgjKbr76Zd5poWlmGngP7379VhHlEwO2shp9fIBIdusOZguIs /HoaB3pLWekjFwk+rz6cYQLwVIrdRSNEREhziSWbOyO2RywDfakql+qVVdr2qXrx 4+VbaIFCGwbeNXhN9w3ENxXmEW0RNKaUtHD7y53GXOXFsQNkfL0hyB8nMt2Zx3z0 hNxiTlbe3cXURy839cYsqCGsNQceLFBW6xYB0xKXr1dTPdDfbZnhn7YwAAd5zdUw FwaaSIUNYVKSvdQ3uZnnbGSpnLvnQQZwBU+Os8uQvJ5xiWwl4ga9OBhltT4HxsjX zBc89nAyqdBRfwB/XJAgvPMmMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDla6fjS D653NPcQCRl3WKQiD4qMMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/3AcxxVXjG6sAyyvD+OBgjON3L3tzh7dggtLs/QxJDmlhavuu+ei7 /rEIm8cI+G7sZlJuc6lfkgiTcIKh8NUQtDZPKOKxd92MAa9Y78YCIZHPHY2V95FX Fxupgp0uXulWuZJ2xxQE2PjgHs7ySNMlw5r/xdnkKPbCw3wXKC2m1Zmd1c58LsFM Pybi4lwNe+vRYpsZIIijPZ+HMS1k76jADl3OWqXOr4rO6UbPUk37+WxcLh+2DxfJ /H3TUk59TCtN0q8RcGqKNXF5rygIve1cEO0jYvfLfIDDctOgLozW593GkTaD/ol9 DpcqIcqebp7kJZ898oc/PIZlbp6fkkfy -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:36 2025 by rpki-client