$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: 5C1Qt0Y1NnU3WXoQPIqOt2WLEN7OohB6U/j9lXYEDs0= Subject key identifier: 1B:85:8D:76:13:53:50:89:60:1F:AD:A5:5C:52:CE:C2:20:A4:42:42 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:37:32 +0000 Manifest this update: Sat 23 Aug 2025 06:37:31 +0000 Manifest next update: Sat 30 Aug 2025 06:37:31 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: PzoYRmnmcGV1KRhXykz4kvOEM+qxlxDDzseef10Ah04=) 2: 2DE2034C7CE611F09D6F9158C4F9AE02.roa (hash: 9bfhDxpjGk5MpXlYmgoEbLayeYNZ5CvO3E2O+ZYV9gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Aug 23 06:37:31 2025 GMT Not After : Aug 30 06:37:31 2025 GMT Subject: CN=68a961ab-7ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:c5:fe:fe:65:58:15:e8:d7:73:2a:66:24: 41:64:03:e9:e6:36:fc:8e:a2:5a:60:46:a8:d5:c4: c3:a4:8d:17:bc:df:94:b0:90:ec:28:39:74:38:81: 68:35:e9:c5:b8:c1:85:2e:70:85:21:d0:06:bf:f0: a9:73:69:be:e7:4e:b9:ec:29:ac:d5:df:e3:d2:7f: 17:de:d1:be:37:44:93:f8:74:ac:31:eb:1e:f5:bf: 6f:b6:29:a9:d1:7f:53:df:2e:00:0e:e7:f5:87:c5: 97:3e:d6:5e:f6:69:ff:6e:9d:94:e1:8d:38:a5:ba: 03:d7:03:2e:9b:b3:c8:32:5f:67:69:df:d6:a5:0f: 87:c0:0c:76:66:ef:c8:fe:e6:a6:d5:b0:eb:6f:9c: 92:84:c8:0d:2d:2f:19:c0:e9:42:63:01:4d:45:f8: ce:b8:9b:8e:ff:1e:9f:6b:77:67:19:60:33:49:d0: 3b:ed:67:45:31:27:4f:13:04:53:23:cb:7d:96:da: 5d:11:8e:7a:ab:d1:95:13:57:f2:a7:d8:7b:ca:37: 01:47:dc:54:76:14:95:64:82:1f:c5:7c:62:34:3b: ac:77:d2:71:e8:44:d0:73:d9:a3:3a:80:94:e7:13: b2:f5:9b:4a:ec:07:e0:fd:6f:0e:75:f0:57:2b:56: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:85:8D:76:13:53:50:89:60:1F:AD:A5:5C:52:CE:C2:20:A4:42:42 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:11:3d:82:e4:db:52:13:e2:48:ed:ff:c0:7f:74:63:d9:4c: 8d:58:dc:7b:7e:11:a7:98:88:43:0a:0c:17:61:2d:ea:e6:94: 59:15:26:7d:6c:42:d9:1e:04:16:ae:e6:85:47:c9:65:4a:d0: 03:f5:84:5d:21:ec:11:a7:59:90:b5:76:8a:14:ee:c4:3b:3d: f9:24:b4:f9:d4:b8:14:75:ab:2b:e4:48:65:90:e4:74:a7:0e: cd:24:b0:ea:93:25:30:28:df:00:2d:91:39:d9:47:11:d4:ca: 00:47:29:f7:e1:5e:86:68:da:95:29:34:fb:87:6b:21:05:09: c1:87:90:05:34:99:21:40:17:98:01:0f:ff:fe:04:21:6f:3f: 0f:5d:f8:25:de:60:f5:f7:26:20:2b:7d:99:77:1f:a4:08:ca: 26:ff:80:c5:b4:1b:7f:4c:2c:2e:df:c9:4b:2a:c8:d4:e5:d7: 7b:a0:c5:2f:0d:63:75:61:8c:cd:9e:9c:9c:02:2a:20:c2:ff: 63:f4:57:b0:24:2e:32:1e:d7:78:28:d5:09:f6:30:38:b3:c3: 6d:37:2f:3c:46:96:02:61:02:92:0a:7b:53:e2:cf:1a:28:c6: 22:0d:8f:b2:2f:b1:c0:69:d7:46:bf:55:49:eb:98:db:c0:67: 2b:b2:bc:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUwODIzMDYzNzMxWhcNMjUwODMwMDYzNzMxWjAYMRYwFAYD VQQDEw02OGE5NjFhYi03YWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nDF/v5lWBXo13MqZiRBZAPp5jb8jqJaYEao1cTDpI0XvN+UsJDsKDl0OIFo NenFuMGFLnCFIdAGv/Cpc2m+50657Cms1d/j0n8X3tG+N0ST+HSsMese9b9vtimp 0X9T3y4ADuf1h8WXPtZe9mn/bp2U4Y04pboD1wMum7PIMl9nad/WpQ+HwAx2Zu/I /uam1bDrb5yShMgNLS8ZwOlCYwFNRfjOuJuO/x6fa3dnGWAzSdA77WdFMSdPEwRT I8t9ltpdEY56q9GVE1fyp9h7yjcBR9xUdhSVZIIfxXxiNDusd9Jx6ETQc9mjOoCU 5xOy9ZtK7Afg/W8OdfBXK1aUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuFjXYT U1CJYB+tpVxSzsIgpEJCMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8yRUI2MDc5NjlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0Ex cjJpMzdBQ1ZXT2dTN1FsZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQET2C5NtSE+JI7f/Af3Rj2UyNWNx7fhGnmIhDCgwXYS3q5pRZFSZ9 bELZHgQWruaFR8llStAD9YRdIewRp1mQtXaKFO7EOz35JLT51LgUdasr5EhlkOR0 pw7NJLDqkyUwKN8ALZE52UcR1MoARyn34V6GaNqVKTT7h2shBQnBh5AFNJkhQBeY AQ///gQhbz8PXfgl3mD19yYgK32Zdx+kCMom/4DFtBt/TCwu38lLKsjU5dd7oMUv DWN1YYzNnpycAiogwv9j9FewJC4yHtd4KNUJ9jA4s8NtNy88RpYCYQKSCntT4s8a KMYiDY+yL7HAaddGv1VJ65jbwGcrsrzd -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:53 2025 by rpki-client