$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: y54U88eAXSnxqIkujf3U4LtXWxWF19uChjydPyRC6aA= Subject key identifier: 0E:2E:43:B1:BC:C6:B7:5B:EE:A2:9C:F1:06:B6:E4:96:98:84:77:B5 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 0708 Signing time: Mon 30 Jun 2025 22:13:00 +0000 Manifest this update: Mon 30 Jun 2025 22:13:00 +0000 Manifest next update: Mon 07 Jul 2025 22:13:00 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: IGTU3WSgFlgGurw8i3tKznKro/u8RzEJIUZO8CGBTuc=) 2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: Jun 30 22:13:00 2025 GMT Not After : Jul 7 22:13:00 2025 GMT Subject: CN=68630bec-9438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:2e:71:8d:3e:f2:ff:98:e4:17:1e:26:26: 58:ea:37:08:06:88:cb:0e:03:87:bb:b7:0a:59:a1: 35:a5:e0:04:32:6b:af:4d:ed:a9:d0:bf:fc:5d:13: 2f:b6:95:d0:3f:fb:df:a5:01:ac:9b:c6:82:c4:47: 93:64:47:65:cc:8e:22:39:a4:5f:07:4d:cb:08:4c: 16:5f:1c:10:40:20:ec:63:88:4d:d3:22:61:d4:2d: 8e:3f:49:1c:f3:5b:c3:ab:45:b0:3c:c8:7b:40:20: 43:1e:79:00:30:e3:78:5e:d3:f1:e9:e9:b7:ec:81: 19:e1:c1:64:66:b2:0f:ed:3a:da:ae:62:0e:e5:15: f7:6f:b8:ed:82:99:16:3b:e8:76:6c:ec:48:86:6a: df:a7:e6:ba:bf:e2:bb:27:f2:f5:70:0c:80:8d:a3: c7:b6:d5:57:97:47:63:10:ce:f0:05:83:c4:23:c8: d8:0a:77:81:07:5e:3f:f3:27:a5:0c:8b:ba:25:df: 58:23:16:fe:d7:17:84:4f:ab:9a:77:17:53:2f:6a: 9b:27:f6:2e:e1:73:6f:80:40:15:3f:f7:aa:f7:ff: 09:b5:3a:40:f5:9b:9b:fd:4f:80:31:73:b0:a4:d9: 5a:d3:d3:02:5d:cb:07:51:ae:af:6d:74:90:b0:f2: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:43:B1:BC:C6:B7:5B:EE:A2:9C:F1:06:B6:E4:96:98:84:77:B5 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:32:4b:68:d1:d7:b2:df:fe:f7:3f:28:29:d5:5f:3e:cd:8f: 72:d8:6e:9b:17:cb:43:d4:52:b7:71:e8:e4:b9:a2:33:e9:a0: 09:bf:ef:a8:30:2f:1d:90:46:c7:b2:4d:1e:3e:3d:b7:96:3d: f3:2a:b1:aa:fc:84:d1:e2:fb:83:f3:59:a4:e1:89:2a:ab:80: eb:09:80:c9:3d:b1:0f:0c:68:9c:1b:b8:cd:6e:c9:61:22:2f: 80:fd:83:86:f4:1f:f5:9d:c1:a4:dd:17:8a:00:03:e6:09:f5: b9:fe:35:e4:10:66:c3:05:18:43:72:26:fc:9a:07:4b:44:b9: db:13:d0:69:c0:fb:32:78:d6:ef:8d:8a:8f:7d:31:03:64:bd: 3b:77:ae:9d:25:de:6c:49:60:04:f5:db:6b:4e:4e:5e:fe:cf: 20:75:31:4c:a8:1b:14:61:d9:d0:03:41:72:6d:f2:c2:1b:46: a8:e1:26:16:5c:f2:75:63:5c:b8:c8:f7:01:16:28:4a:d8:bd: 9b:f8:3c:74:d0:6a:84:0c:e4:8f:b6:6f:79:0b:a4:de:14:c6: 47:34:3f:58:69:b4:72:12:fb:04:a8:9f:36:b3:cc:c0:bc:e6: 3a:e1:8f:b7:ae:f0:19:be:a1:ca:7a:bb:72:58:b6:ba:be:e1: 40:c6:29:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjUwNjMwMjIxMzAwWhcNMjUwNzA3MjIxMzAwWjAYMRYwFAYD VQQDEw02ODYzMGJlYy05NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtsucY0+8v+Y5BceJiZY6jcIBojLDgOHu7cKWaE1peAEMmuvTe2p0L/8XRMv tpXQP/vfpQGsm8aCxEeTZEdlzI4iOaRfB03LCEwWXxwQQCDsY4hN0yJh1C2OP0kc 81vDq0WwPMh7QCBDHnkAMON4XtPx6em37IEZ4cFkZrIP7TrarmIO5RX3b7jtgpkW O+h2bOxIhmrfp+a6v+K7J/L1cAyAjaPHttVXl0djEM7wBYPEI8jYCneBB14/8yel DIu6Jd9YIxb+1xeET6uadxdTL2qbJ/Yu4XNvgEAVP/eq9/8JtTpA9Zub/U+AMXOw pNla09MCXcsHUa6vbXSQsPIsWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4uQ7G8 xrdb7qKc8Qa25JaYhHe1MB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Mkto0dey3/73Pygp1V8+zY9y2G6bF8tD1FK3cejkuaIz6aAJv++o MC8dkEbHsk0ePj23lj3zKrGq/ITR4vuD81mk4Ykqq4DrCYDJPbEPDGicG7jNbslh Ii+A/YOG9B/1ncGk3ReKAAPmCfW5/jXkEGbDBRhDcib8mgdLRLnbE9BpwPsyeNbv jYqPfTEDZL07d66dJd5sSWAE9dtrTk5e/s8gdTFMqBsUYdnQA0FybfLCG0ao4SYW XPJ1Y1y4yPcBFihK2L2b+Dx00GqEDOSPtm95C6TeFMZHND9YabRyEvsEqJ82s8zA vOY64Y+3rvAZvqHKertyWLa6vuFAxil3 -----END CERTIFICATE-----Generated at Wed Jul 2 19:30:39 2025 by rpki-client