$ rpki-client -vvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft File: aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json) Hash identifier: ZN9veFqpBF6Zn8izV32Gf858x3o7JwYKNGiKG1ksXJ4= Subject key identifier: 1E:4B:8A:78:C2:9A:EE:9D:0B:C4:D5:9C:DD:E8:27:42:8A:E2:9A:62 Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 Certificate issuer: /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft Manifest number: 3E Signing time: Tue 01 Jul 2025 08:15:31 +0000 Manifest this update: Tue 01 Jul 2025 08:15:31 +0000 Manifest next update: Tue 08 Jul 2025 08:15:31 +0000 Files and hashes: 1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: Wg+24T06SFZXGaj8R+g6JkwaXJdnHMfAbdxmtJSc4Qo=) 2: 8D2816C4F90211EF99692E40C4F9AE02.roa (hash: +NqGztaEhZpUZkM4BrFHd/HmjU1Jxg/vDaPsvxdwGGQ=) 3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 3CWgpxVwX8rXbxNTGaUyko/Ji2jUUIx/aqwN4MmZ++Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3 Validity Not Before: Jul 1 08:15:31 2025 GMT Not After : Jul 8 08:15:31 2025 GMT Subject: CN=68639923-e3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:90:3a:fb:7e:5f:4b:16:a3:35:e1:a4:25: 12:c1:0b:80:a2:2b:27:af:76:60:dd:c7:b2:f9:4c: 34:65:8b:13:15:5a:87:12:06:0e:34:0e:67:dd:e6: ac:72:35:d0:e1:b3:64:1f:29:65:d6:bf:d5:a1:bb: fe:62:6e:2f:c4:64:f5:1f:fe:c6:a6:0e:b4:83:0d: 02:f1:54:db:e4:08:74:e1:ba:e3:40:ad:1c:e3:dc: 18:02:fd:de:5d:73:d7:9c:43:30:1a:40:e3:50:eb: f6:84:96:b9:f1:a6:32:00:35:bc:61:81:3e:d4:a2: e5:22:70:79:92:8f:74:ca:3d:e3:3f:5e:27:e8:fd: d6:79:ea:94:c9:7a:c0:34:d7:5d:69:e7:f1:df:64: 68:be:6d:af:42:92:14:60:68:69:27:20:15:6f:63: ad:a9:4f:23:11:0f:1f:58:0d:63:63:95:46:86:dd: 04:ed:ff:14:80:34:3d:27:1d:19:8d:74:e1:d4:0f: 0c:3d:4d:ed:d1:6b:65:70:76:8c:0f:37:82:b2:c2: ee:d9:0f:52:52:0d:97:21:59:1c:b9:eb:20:67:4b: 85:45:0b:6d:9f:db:b8:f2:1f:94:f4:63:da:aa:e1: 95:b7:40:e7:09:b1:1b:55:6b:f4:a1:96:f6:f7:14: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:8A:78:C2:9A:EE:9D:0B:C4:D5:9C:DD:E8:27:42:8A:E2:9A:62 X509v3 Authority Key Identifier: keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:de:9b:6b:a2:86:c0:11:05:1d:61:e7:5b:79:78:71:f6:f4: 6b:9c:2f:34:c5:fb:34:c0:c0:a6:69:b2:54:f5:0e:7b:66:3d: 2c:a7:7d:cc:22:bf:13:e8:62:50:cd:90:42:16:4c:56:31:a8: 20:62:73:a6:37:f1:5b:c0:e3:d8:b7:b4:e5:20:35:6a:7a:5e: f7:6e:2f:d5:19:f3:4f:b4:6d:e4:f5:e6:ff:10:c9:48:b5:10: e4:5f:aa:2c:b1:50:e7:18:7d:95:b2:63:77:92:b3:60:63:2e: 35:44:bf:7b:e5:79:60:a3:bc:bc:4f:2a:b1:89:e0:d4:77:ac: d1:6a:75:61:29:83:49:a1:c0:07:f1:05:26:eb:16:62:01:97: 35:e5:14:4c:8a:47:6b:59:96:d1:78:0a:fb:98:92:06:86:e4: 36:30:50:82:45:37:e3:94:49:b8:f3:e3:9b:a1:f7:a0:e2:b5: 70:26:d5:2a:08:3e:ea:9b:ea:2a:bd:cc:a2:a5:77:96:5e:81: 34:08:4a:85:39:a1:dc:35:2b:99:9d:b6:7b:7d:47:96:73:70: 86:d0:57:80:2b:3f:46:65:cf:0d:a4:08:f4:2b:3b:9a:d9:e9: 97:bb:93:cd:19:89:51:11:75:f9:8b:e6:e5:7c:c7:6d:31:f2: 96:78:de:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzYzRTExMC8GA1UEBRMoNjkwQzE2QTk3RUU0MEI4OUE2NENCMzFGNjJBOTlBNTYz MDA4MkRDMzAeFw0yNTA3MDEwODE1MzFaFw0yNTA3MDgwODE1MzFaMBgxFjAUBgNV BAMTDTY4NjM5OTIzLWUzZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9S5A6+35fSxajNeGkJRLBC4CiKyevdmDdx7L5TDRlixMVWocSBg40Dmfd5qxy NdDhs2QfKWXWv9Whu/5ibi/EZPUf/samDrSDDQLxVNvkCHThuuNArRzj3BgC/d5d c9ecQzAaQONQ6/aElrnxpjIANbxhgT7UouUicHmSj3TKPeM/Xifo/dZ56pTJesA0 111p5/HfZGi+ba9CkhRgaGknIBVvY62pTyMRDx9YDWNjlUaG3QTt/xSAND0nHRmN dOHUDww9Te3Ra2VwdowPN4Kywu7ZD1JSDZchWRy56yBnS4VFC22f27jyH5T0Y9qq 4ZW3QOcJsRtVa/Shlvb3FK2BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHkuKeMKa 7p0LxNWc3egnQorimmIwHwYDVR0jBBgwFoAUaQwWqX7kC4mmTLMfYqmaVjAILcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjNFLzg1Nzk1RkVDRjkw MTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRtbVRMTWZZcW1hVmpBSUxj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVF3V3FYN2tDNG1tVExNZllxbWFWakFJTGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjNFLzg1Nzk1RkVDRjkwMTExRUY5QzI0QzgxMkM0RjlBRTAyL2FRd1dxWDdrQzRt bVRMTWZZcW1hVmpBSUxjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKnem2uihsARBR1h51t5eHH29GucLzTF+zTAwKZpslT1DntmPSynfcwi vxPoYlDNkEIWTFYxqCBic6Y38VvA49i3tOUgNWp6XvduL9UZ80+0beT15v8QyUi1 EORfqiyxUOcYfZWyY3eSs2BjLjVEv3vleWCjvLxPKrGJ4NR3rNFqdWEpg0mhwAfx BSbrFmIBlzXlFEyKR2tZltF4CvuYkgaG5DYwUIJFN+OUSbjz45uh96DitXAm1SoI Puqb6iq9zKKld5ZegTQISoU5odw1K5mdtnt9R5ZzcIbQV4ArP0Zlzw2kCPQrO5rZ 6Ze7k80ZiVERdfmL5uV8x20x8pZ43pI= -----END CERTIFICATE-----Generated at Tue Jul 1 12:50:51 2025 by rpki-client