$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json) Hash identifier: B7dgMvibDwEJAfYZmkEtvacs2ReQMAx/FA10RhcL9O4= Subject key identifier: 71:9B:86:D9:E1:C1:2E:9A:08:6F:52:8D:F1:3A:98:6B:12:4C:DB:29 Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft Manifest number: 07B5 Signing time: Fri 22 Aug 2025 21:25:29 +0000 Manifest this update: Fri 22 Aug 2025 21:25:28 +0000 Manifest next update: Fri 29 Aug 2025 21:25:28 +0000 Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: MaFb+HifJ3Hn25zVrBLhmdrx0zxYXV2C4eAFkkGfPVg=) 2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: 5bBWhpUzFVVFApumie9XG8UpL1cOYbfpPDdsz7OV/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Aug 22 21:25:28 2025 GMT Not After : Aug 29 21:25:28 2025 GMT Subject: CN=68a8e049-68c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d7:39:45:43:69:80:86:b0:7e:4a:13:13:a5: f3:99:29:4a:53:53:f8:c5:91:07:67:b8:3f:ed:5a: aa:60:42:a9:f8:8a:8e:79:f6:69:18:85:96:24:de: 9a:e1:13:ad:c5:36:7f:98:4a:6b:0d:00:c5:3f:aa: 87:21:f6:28:93:b4:43:0d:d8:ed:5f:a0:a8:98:39: c9:1d:3c:f0:63:ed:c1:d4:78:85:6a:b9:89:9a:4c: 47:c5:f2:df:a1:00:83:7b:5b:ef:a2:4e:67:e8:51: d8:1c:20:86:80:fe:80:1b:ae:0e:64:b2:94:bb:3b: c3:47:25:29:2d:a0:69:d4:0e:5a:80:6f:13:5f:e0: e8:fa:3e:96:17:1f:6d:71:c9:ec:6f:64:56:6b:6b: 70:9b:17:77:87:1b:1b:ad:85:be:59:82:ea:e6:1e: 71:c3:c1:2d:95:d2:dd:45:15:9d:55:cf:c9:42:20: 6e:d2:dc:36:59:3c:5f:b6:55:c0:e4:1c:02:d5:ab: 4e:1f:fd:bb:0c:1c:e9:4c:fd:5f:0e:12:e5:42:d2: f3:b7:8d:9a:46:ab:7d:15:53:b1:e1:a4:8b:43:5c: 1f:33:03:73:f2:37:a0:2c:89:a7:76:74:0a:d6:07: 4b:eb:c3:3d:fb:50:54:49:28:c3:34:c2:f6:21:fe: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:86:D9:E1:C1:2E:9A:08:6F:52:8D:F1:3A:98:6B:12:4C:DB:29 X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b4:d4:c7:b6:48:fb:f6:b1:4c:a5:70:18:91:aa:3a:9e:ab: db:99:35:87:3e:dd:b0:3f:c5:b5:3d:37:27:1a:6d:39:74:ba: 29:70:78:b0:b6:f9:58:a5:b3:0c:0e:07:c4:9e:de:c6:33:62: c3:15:d7:5f:08:35:3d:92:80:95:d9:36:e5:28:6b:45:84:66: 2a:27:98:02:02:a8:ad:ca:92:0c:85:6f:fa:7b:bf:da:fe:51: 7b:82:b2:00:0b:65:02:0a:ef:bd:26:74:8d:45:5b:a9:bb:f7: a8:39:f8:4b:93:20:04:bb:8e:00:ab:b3:6b:a8:d3:7f:39:0d: b2:74:0c:16:73:cb:26:30:27:78:5f:00:03:69:5a:86:7f:95: af:d1:6e:27:e7:91:e9:30:88:73:29:97:93:8e:13:cd:ef:9d: d3:6e:8a:a7:57:64:cd:dd:cc:85:7b:ae:87:f1:f8:e6:d0:f1: d9:26:a1:6f:48:af:a1:be:74:2e:9d:de:f6:09:91:1a:c7:8a: f4:70:3b:79:b8:c7:e7:a4:d1:68:82:2d:8a:a1:5e:be:8d:25: 98:13:06:ae:e7:24:08:14:d9:07:8b:2f:db:ee:ac:b1:ca:b5: c1:6e:17:26:b3:5f:e1:ec:f8:0f:c2:e9:79:19:58:84:6e:c3: 18:02:c6:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUwODIyMjEyNTI4WhcNMjUwODI5MjEyNTI4WjAYMRYwFAYD VQQDEw02OGE4ZTA0OS02OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+dc5RUNpgIawfkoTE6XzmSlKU1P4xZEHZ7g/7VqqYEKp+IqOefZpGIWWJN6a 4ROtxTZ/mEprDQDFP6qHIfYok7RDDdjtX6ComDnJHTzwY+3B1HiFarmJmkxHxfLf oQCDe1vvok5n6FHYHCCGgP6AG64OZLKUuzvDRyUpLaBp1A5agG8TX+Do+j6WFx9t ccnsb2RWa2twmxd3hxsbrYW+WYLq5h5xw8EtldLdRRWdVc/JQiBu0tw2WTxftlXA 5BwC1atOH/27DBzpTP1fDhLlQtLzt42aRqt9FVOx4aSLQ1wfMwNz8jegLImndnQK 1gdL68M9+1BUSSjDNML2If7LQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGbhtnh wS6aCG9SjfE6mGsSTNspMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAtNTHtkj79rFMpXAYkao6nqvbmTWHPt2wP8W1PTcnGm05dLopcHiw tvlYpbMMDgfEnt7GM2LDFddfCDU9koCV2TblKGtFhGYqJ5gCAqitypIMhW/6e7/a /lF7grIAC2UCCu+9JnSNRVupu/eoOfhLkyAEu44Aq7NrqNN/OQ2ydAwWc8smMCd4 XwADaVqGf5Wv0W4n55HpMIhzKZeTjhPN753TboqnV2TN3cyFe66H8fjm0PHZJqFv SK+hvnQund72CZEax4r0cDt5uMfnpNFogi2KoV6+jSWYEwau5yQIFNkHiy/b7qyx yrXBbhcms1/h7PgPwul5GViEbsMYAsYT -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:11 2025 by rpki-client