$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: T39HmtD/0MwveBzNhvO7PW/U80dRzjkgVWFyjogszB8= Subject key identifier: 01:81:99:27:B0:5B:E4:B5:85:FF:2E:80:BB:8C:7D:96:45:44:8E:65 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 01E7 Signing time: Thu 03 Jul 2025 02:43:59 +0000 Manifest this update: Thu 03 Jul 2025 02:43:58 +0000 Manifest next update: Thu 10 Jul 2025 02:43:58 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: TzM5cxt3dIsibB8I8uzwbP1VU42lgA9VFYIyOehP5NE=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Jul 3 02:43:58 2025 GMT Not After : Jul 10 02:43:58 2025 GMT Subject: CN=6865ee6f-2c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:9d:63:88:19:4c:61:1a:a6:00:af:fe:63: c9:16:1d:ab:de:60:62:ce:e5:bd:ac:20:fe:1d:5e: 8e:16:08:f2:33:ae:f9:c8:c9:fd:7f:31:d3:5d:c3: 5c:9a:14:e7:6f:bd:c8:d5:84:11:83:22:3c:8c:41: 9d:d3:3b:ca:d1:70:c4:13:47:c8:b4:c8:ea:c1:d8: 0d:58:8f:9d:4f:b1:a4:7a:f8:83:4f:8b:08:a3:21: 5c:41:60:37:40:c1:e7:40:19:ad:de:22:11:83:49: ab:e6:28:d2:2d:e0:5d:ef:7b:de:81:1f:b9:84:16: 19:77:4c:63:26:fd:6f:bc:35:4c:40:12:92:10:01: 50:18:fa:9d:66:76:c2:fc:4e:c7:54:89:f1:d0:a2: 67:66:14:d3:62:8c:8a:ad:7f:91:99:ea:72:3b:3d: c5:f7:89:45:f9:29:47:c0:53:f4:3d:40:75:3f:b5: 21:e6:0f:fa:2e:16:bc:6c:0f:f0:46:af:ec:dd:25: a5:f8:34:97:88:29:8d:be:58:16:90:1a:c3:bf:3b: 75:b4:11:4b:19:fb:f9:18:5a:b7:60:fc:2f:84:13: 5b:be:f3:79:8b:af:ef:58:3c:f1:27:4a:55:8a:ed: f7:9f:a0:21:21:69:05:41:0e:13:ca:ce:d8:4d:a4: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:81:99:27:B0:5B:E4:B5:85:FF:2E:80:BB:8C:7D:96:45:44:8E:65 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:fd:42:e4:6c:9f:cd:5f:c1:f2:35:96:92:b5:32:2a:4c:2b: 2b:dc:cc:6e:62:a0:e8:b7:f6:88:3a:eb:44:77:34:d3:c8:01: 7c:15:20:e5:23:c9:14:cc:fd:07:6a:d3:36:36:6b:e6:1c:e3: 04:29:aa:0a:00:0e:ee:98:a6:4f:94:11:56:b8:12:ec:44:47: 3e:d1:8c:7d:8b:fe:35:06:2e:5f:c8:7b:50:23:fd:ba:29:76: d0:bc:66:d9:8a:66:6f:94:11:6e:a0:82:19:68:fd:5f:e5:d4: b9:6c:c7:32:86:5d:f5:cc:91:05:60:46:59:fb:f7:7c:b9:94: a2:f2:96:a4:f4:f8:09:ab:b0:84:93:02:1c:65:1d:83:02:83: f5:ae:87:68:72:a0:a5:67:ad:73:e0:3e:6e:be:fe:b1:c3:0f: b6:0c:f8:da:87:2d:22:2c:04:54:28:02:6a:48:36:75:1a:ca: 71:f3:71:cc:b2:6c:1b:34:63:47:20:66:f9:e8:ff:4e:22:20: be:d5:00:83:5c:c8:cb:1e:20:6f:c9:3b:ae:0b:64:68:74:87: f3:f1:e2:39:44:19:05:d4:7a:39:5c:e2:01:b6:99:37:5f:f3: 48:60:d3:19:69:4f:08:b0:b6:b7:d5:70:1d:76:85:4f:aa:06: 1f:03:3f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjUwNzAzMDI0MzU4WhcNMjUwNzEwMDI0MzU4WjAYMRYwFAYD VQQDEw02ODY1ZWU2Zi0yYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzmdY4gZTGEapgCv/mPJFh2r3mBizuW9rCD+HV6OFgjyM675yMn9fzHTXcNc mhTnb73I1YQRgyI8jEGd0zvK0XDEE0fItMjqwdgNWI+dT7GkeviDT4sIoyFcQWA3 QMHnQBmt3iIRg0mr5ijSLeBd73vegR+5hBYZd0xjJv1vvDVMQBKSEAFQGPqdZnbC /E7HVInx0KJnZhTTYoyKrX+RmepyOz3F94lF+SlHwFP0PUB1P7Uh5g/6Lha8bA/w Rq/s3SWl+DSXiCmNvlgWkBrDvzt1tBFLGfv5GFq3YPwvhBNbvvN5i6/vWDzxJ0pV iu33n6AhIWkFQQ4Tys7YTaQOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGBmSew W+S1hf8ugLuMfZZFRI5lMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl/ULkbJ/NX8HyNZaStTIqTCsr3MxuYqDot/aIOutEdzTTyAF8FSDl I8kUzP0HatM2NmvmHOMEKaoKAA7umKZPlBFWuBLsREc+0Yx9i/41Bi5fyHtQI/26 KXbQvGbZimZvlBFuoIIZaP1f5dS5bMcyhl31zJEFYEZZ+/d8uZSi8pak9PgJq7CE kwIcZR2DAoP1rodocqClZ61z4D5uvv6xww+2DPjahy0iLARUKAJqSDZ1Gspx83HM smwbNGNHIGb56P9OIiC+1QCDXMjLHiBvyTuuC2RodIfz8eI5RBkF1Ho5XOIBtpk3 X/NIYNMZaU8IsLa31XAddoVPqgYfAz+O -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:07 2025 by rpki-client