$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json) Hash identifier: Akg43+36YR++NTQU1nGOdQE/pfJGinigEYK2B5BHBqo= Subject key identifier: C0:52:C4:53:71:C7:01:B1:F4:AA:0D:ED:11:04:B9:32:EF:3D:89:D8 Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft Manifest number: 04 Signing time: Thu 03 Jul 2025 08:27:46 +0000 Manifest this update: Thu 03 Jul 2025 08:27:45 +0000 Manifest next update: Thu 10 Jul 2025 08:27:45 +0000 Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: rebtRSOhIM2aZZj6tx4QhSCy3s95xJNJ0TRE3igGkPk=) 2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Validity Not Before: Jul 3 08:27:45 2025 GMT Not After : Jul 10 08:27:45 2025 GMT Subject: CN=68663f01-522e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:01:e7:d0:a5:73:8e:b6:40:3c:ce:43:5b:71: c3:ae:60:54:fc:63:a1:56:11:75:d4:1a:f3:97:6f: 04:1a:e0:e7:77:8c:1e:81:5f:d2:13:52:ea:b7:3a: 29:76:b3:cb:88:c7:20:a4:62:0f:ac:cc:b2:30:91: de:27:5c:c8:53:92:69:95:c8:20:5a:f1:b4:31:ea: 5f:5b:48:e0:c5:4c:7c:e2:bd:7c:7e:23:70:05:d2: 88:e5:66:ba:5b:ad:dc:7b:af:0e:60:19:9f:0a:1c: e1:de:c0:ae:25:4f:da:b1:84:48:10:7e:0f:d3:9e: 0e:6e:02:a0:3c:6f:42:9d:1c:0e:8d:f2:3b:1a:88: 07:4f:27:1b:d8:da:72:d6:e9:9e:64:a6:63:05:52: bb:e2:53:5f:bf:b6:6a:74:d8:9a:78:8f:99:7a:1d: c3:1d:80:29:08:2c:c4:7f:f2:79:bf:96:76:ef:0c: c8:30:f9:fc:b2:ea:11:a6:9a:7b:75:3c:81:4a:50: 05:f4:57:26:cc:f2:65:e5:72:c0:36:cb:21:cf:dc: 25:89:ac:c6:a0:3d:9d:30:49:0b:ba:db:41:57:21: 8e:f4:c3:4e:e2:77:3d:52:28:7f:da:f6:2a:fe:98: cd:6d:30:44:09:cf:cb:24:df:1b:82:cb:ae:9b:4b: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:C4:53:71:C7:01:B1:F4:AA:0D:ED:11:04:B9:32:EF:3D:89:D8 X509v3 Authority Key Identifier: keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:08:6e:ff:95:03:1f:98:64:7c:68:0d:66:07:59:2d:94:70: 88:b4:d8:17:3f:6b:b4:05:24:3f:4f:6c:b6:22:7d:61:d1:f6: 18:3a:ee:4e:2a:d3:72:93:e2:a7:53:6d:f6:c8:04:75:b5:71: 40:27:a0:e7:56:7d:34:77:4a:29:17:da:13:81:c0:3d:2e:a3: 07:19:7e:74:b7:df:80:a0:ae:b7:11:56:14:48:13:9d:3d:46: 42:40:1c:1e:bf:66:2b:4a:b0:a0:ff:2e:1e:67:3f:87:ef:79: dd:36:16:6f:4b:ed:41:cb:eb:eb:21:84:e6:a5:1b:3d:d5:dd: 7f:9b:41:31:7a:96:34:d7:ef:29:98:45:8e:d8:21:9e:fa:a3: 03:0f:a3:1b:eb:13:ac:33:61:2c:28:14:2e:48:bb:63:f3:7c: e4:8e:50:cc:40:6f:20:e5:da:14:e9:7c:8d:eb:51:ba:83:03: a3:61:d8:b3:de:6a:54:9a:1b:34:bf:15:67:88:e7:ff:75:ef: a3:8d:b4:49:78:c8:67:41:7d:f4:f9:b8:c0:62:36:ca:b1:1f: 87:bb:cf:df:c0:ed:98:50:44:2d:2c:54:57:d6:7a:55:67:60: e2:a7:c1:b8:18:37:d9:bb:fe:7f:26:63:d9:ea:73:8d:bd:0b: 28:dc:40:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoQUQwNzAyNDAyOTNBQ0RDNTI0Q0ExMzM2NTgyRDcwQzIx OUZDQzdFMDAeFw0yNTA3MDMwODI3NDVaFw0yNTA3MTAwODI3NDVaMBgxFjAUBgNV BAMTDTY4NjYzZjAxLTUyMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkAefQpXOOtkA8zkNbccOuYFT8Y6FWEXXUGvOXbwQa4Od3jB6BX9ITUuq3Oil2 s8uIxyCkYg+szLIwkd4nXMhTkmmVyCBa8bQx6l9bSODFTHzivXx+I3AF0ojlZrpb rdx7rw5gGZ8KHOHewK4lT9qxhEgQfg/Tng5uAqA8b0KdHA6N8jsaiAdPJxvY2nLW 6Z5kpmMFUrviU1+/tmp02Jp4j5l6HcMdgCkILMR/8nm/lnbvDMgw+fyy6hGmmnt1 PIFKUAX0VybM8mXlcsA2yyHP3CWJrMagPZ0wSQu620FXIY70w07idz1SKH/a9ir+ mM1tMEQJz8sk3xuCy66bSy0rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwFLEU3HH AbH0qg3tEQS5Mu89idgwHwYDVR0jBBgwFoAUrQcCQCk6zcUkyhM2WC1wwhn8x+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzJEMzM1RTZBNTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFjQ1FDazZ6Y1VreWhNMldDMXd3aG44eC1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzJEMzM1RTZBNTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNV a3loTTJXQzF3d2huOHgtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0Ibv+VAx+YZHxoDWYHWS2UcIi02Bc/a7QFJD9PbLYifWHR9hg67k4q 03KT4qdTbfbIBHW1cUAnoOdWfTR3SikX2hOBwD0uowcZfnS334CgrrcRVhRIE509 RkJAHB6/ZitKsKD/Lh5nP4fved02Fm9L7UHL6+shhOalGz3V3X+bQTF6ljTX7ymY RY7YIZ76owMPoxvrE6wzYSwoFC5Iu2PzfOSOUMxAbyDl2hTpfI3rUbqDA6Nh2LPe alSaGzS/FWeI5/9176ONtEl4yGdBffT5uMBiNsqxH4e7z9/A7ZhQRC0sVFfWelVn YOKnwbgYN9m7/n8mY9nqc429CyjcQNU= -----END CERTIFICATE-----Generated at Fri Jul 4 10:25:35 2025 by rpki-client