$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json) Hash identifier: zM/MvJM3WbYsGP/EFkityeKBMfo3iDxuUw7fEnI62a4= Subject key identifier: A9:E5:45:58:1D:57:6B:8E:FD:DB:C4:E7:37:1C:89:3D:45:8B:97:BA Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft Manifest number: 1E Signing time: Sat 23 Aug 2025 08:06:23 +0000 Manifest this update: Sat 23 Aug 2025 08:06:22 +0000 Manifest next update: Sat 30 Aug 2025 08:06:22 +0000 Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: lU98dKmkxN65UDZoqQuF9oPaQPJqVBDzM0wVN97C9kM=) 2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Validity Not Before: Aug 23 08:06:22 2025 GMT Not After : Aug 30 08:06:22 2025 GMT Subject: CN=68a9767f-5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:16:84:2c:37:07:23:26:36:73:0e:77:01:cb: 4a:e1:fa:50:a3:73:49:21:11:70:e2:8d:84:03:42: 98:5d:a6:66:c5:78:45:30:48:8d:b4:ff:71:d8:fc: 3a:8d:24:ae:18:c5:75:ff:db:d8:45:6e:73:48:33: cc:58:7c:30:f7:77:e3:db:d7:05:35:65:0f:5c:bf: b4:d0:8a:c1:2c:30:fe:e8:57:e9:1e:e7:14:05:c3: 30:1f:b7:6a:b8:11:f9:3f:93:a5:43:25:0a:f3:9e: 91:52:95:4a:13:c2:b2:9e:0f:38:8b:49:7d:a4:8b: bc:18:46:63:d8:ff:0f:7d:b7:68:64:1d:21:e8:de: 33:4a:c9:86:0e:30:6c:e4:ac:93:f5:d0:83:93:f3: 34:a8:49:cb:02:7a:95:fe:e1:19:f2:9d:88:93:b5: 2f:82:b8:f8:de:11:c6:ab:80:92:69:c7:f1:b3:ac: 42:9d:b8:5a:db:42:ca:a4:e8:4d:2f:3f:d2:fa:6a: 30:a8:a4:e3:d4:8d:3e:ab:4d:37:42:b9:41:b0:50: 0a:2e:fb:c9:0c:da:8c:ef:3b:7e:70:ba:4f:53:7d: 0e:d6:95:9c:8d:06:78:ed:b2:1c:4a:fd:2a:2c:01: 6d:f9:df:a2:db:4a:ec:54:90:af:e2:09:d6:84:53: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:45:58:1D:57:6B:8E:FD:DB:C4:E7:37:1C:89:3D:45:8B:97:BA X509v3 Authority Key Identifier: keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:d9:f3:ba:6c:cd:18:d2:45:3a:ed:63:7c:0a:2f:a7:54: d0:a3:de:1f:ef:27:79:7b:9a:c9:89:56:dd:22:05:5b:72:2c: e9:bc:45:bb:50:37:ff:91:cb:c9:d8:82:d8:a9:12:00:ba:01: db:a5:24:ec:e3:a8:44:74:13:66:71:97:7f:82:84:bc:4d:2e: 74:38:f1:02:db:64:75:1d:1b:a9:4f:eb:ab:c6:a1:71:47:20: 8f:1d:f1:08:b4:e5:d5:3c:77:c6:38:4b:77:37:e0:83:09:aa: bc:50:37:2e:1e:65:c6:71:6e:4e:1c:a6:ca:b4:30:8e:2c:15: 17:5a:51:c5:08:14:5e:ce:ea:0f:c1:29:4c:0d:08:a3:7e:cf: 3c:46:e1:32:05:0b:e9:f1:65:57:1b:80:6e:0d:f2:e2:6b:09: 01:c6:12:2f:72:3f:9a:93:eb:16:8b:83:fd:48:c9:52:a7:05: 86:55:2f:ec:99:01:e9:e9:e1:1c:10:51:68:29:b6:74:f9:95: b0:cd:d2:56:e4:b3:e8:ad:00:18:8f:d6:72:12:c1:45:2e:28: 74:fd:0b:b7:ab:a3:89:0b:51:bf:7c:5f:0f:c2:f2:eb:50:0f: 5c:d2:47:58:b8:fb:f2:61:91:a6:70:b9:d5:f6:21:3b:fe:00: a7:12:7f:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoQUQwNzAyNDAyOTNBQ0RDNTI0Q0ExMzM2NTgyRDcwQzIx OUZDQzdFMDAeFw0yNTA4MjMwODA2MjJaFw0yNTA4MzAwODA2MjJaMBgxFjAUBgNV BAMTDTY4YTk3NjdmLTVhYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrFoQsNwcjJjZzDncBy0rh+lCjc0khEXDijYQDQphdpmbFeEUwSI20/3HY/DqN JK4YxXX/29hFbnNIM8xYfDD3d+Pb1wU1ZQ9cv7TQisEsMP7oV+ke5xQFwzAft2q4 Efk/k6VDJQrznpFSlUoTwrKeDziLSX2ki7wYRmPY/w99t2hkHSHo3jNKyYYOMGzk rJP10IOT8zSoScsCepX+4RnynYiTtS+CuPjeEcargJJpx/GzrEKduFrbQsqk6E0v P9L6ajCopOPUjT6rTTdCuUGwUAou+8kM2ozvO35wuk9TfQ7WlZyNBnjtshxK/Sos AW3536LbSuxUkK/iCdaEU+ONAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqeVFWB1X a47928TnNxyJPUWLl7owHwYDVR0jBBgwFoAUrQcCQCk6zcUkyhM2WC1wwhn8x+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzJEMzM1RTZBNTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFjQ1FDazZ6Y1VreWhNMldDMXd3aG44eC1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzJEMzM1RTZBNTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNV a3loTTJXQzF3d2huOHgtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKJe2fO6bM0Y0kU67WN8Ci+nVNCj3h/vJ3l7msmJVt0iBVtyLOm8RbtQ N/+Ry8nYgtipEgC6AdulJOzjqER0E2Zxl3+ChLxNLnQ48QLbZHUdG6lP66vGoXFH II8d8Qi05dU8d8Y4S3c34IMJqrxQNy4eZcZxbk4cpsq0MI4sFRdaUcUIFF7O6g/B KUwNCKN+zzxG4TIFC+nxZVcbgG4N8uJrCQHGEi9yP5qT6xaLg/1IyVKnBYZVL+yZ Aenp4RwQUWgptnT5lbDN0lbks+itABiP1nISwUUuKHT9C7ero4kLUb98Xw/C8utQ D1zSR1i4+/JhkaZwudX2ITv+AKcSf/Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:38 2025 by rpki-client