$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: TK7s5roRZP2BojaILyZpeBBfiT50GSR75th8hApZUpw= Subject key identifier: 17:B5:CE:7B:F2:B8:5F:21:8C:E0:F7:86:C3:87:42:BF:69:AC:73:C0 Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: D5 Signing time: Sat 05 Jul 2025 05:52:37 +0000 Manifest this update: Sat 05 Jul 2025 05:52:36 +0000 Manifest next update: Sat 12 Jul 2025 05:52:36 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: FmiZF+YUfzxoKoLDne7iRn2bvCBueL7aA/+erEPqAJI=) 2: 55291FA016B511EFA244974BC4F9AE02.roa (hash: 4G05qDBih2f7QXu4EvcFu/Hi3cjZoiJAPBz1/2wvj2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Jul 5 05:52:36 2025 GMT Not After : Jul 12 05:52:36 2025 GMT Subject: CN=6868bda4-5275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:ae:49:5d:7d:30:05:46:5a:23:00:21:9a: 4c:8b:5a:aa:fb:f6:52:8a:c0:40:41:10:26:6e:7a: 82:6c:03:0e:a6:10:dc:9d:6c:d3:ae:9b:71:f1:ed: ef:33:3e:2f:d7:b6:dc:16:44:25:2d:60:52:fa:ad: 87:6e:90:d3:74:fc:de:97:d2:a4:21:02:97:be:61: 79:3e:b3:af:be:d5:a9:67:1b:79:b3:cc:1b:8b:c3: 5b:ae:07:90:91:c1:01:3c:75:1b:5b:12:45:83:4a: 27:26:9b:c3:39:4b:0b:7a:2c:00:de:16:7e:03:3b: 76:69:2e:9c:45:2d:71:0b:59:19:22:51:ae:ee:48: ec:0a:6d:ab:d4:e9:dc:e9:8c:4f:36:de:0b:73:23: 83:c3:4b:0e:81:0e:af:37:9b:19:fc:45:57:c3:a8: bb:fc:87:8a:a2:cb:ea:b4:d5:c1:de:8d:35:91:8b: 2d:08:2c:a2:94:c4:98:22:d4:ff:16:ef:a4:6c:a0: 72:52:20:b4:4c:f6:35:b2:a4:2a:0b:4e:3d:2c:9b: 78:35:b4:e7:cc:80:94:fe:f7:74:5d:91:cc:f3:a9: 39:c6:40:28:88:ca:90:e8:35:fd:62:c9:41:43:19: d4:45:37:63:55:bf:5d:65:5e:22:ac:9a:7b:9d:28: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:CE:7B:F2:B8:5F:21:8C:E0:F7:86:C3:87:42:BF:69:AC:73:C0 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c7:a1:9c:21:da:c3:48:ac:4a:22:77:84:ed:82:62:49:17: 09:2c:4f:4b:1a:81:20:a5:fa:da:85:77:8d:71:7f:43:d7:09: ec:41:9f:0c:1b:96:d6:8e:f2:e5:5d:0c:f9:9a:8c:b8:b4:d9: 11:18:1d:f8:dc:05:1e:5e:3b:07:40:2d:71:8f:a5:43:55:dc: 70:ae:10:3b:5b:85:2a:7d:6b:c9:19:ca:1b:9d:01:f9:21:63: 1f:50:08:70:5a:f6:bf:f5:27:c2:32:f3:e2:90:51:0f:f5:df: c6:93:68:e6:6b:0f:74:60:46:10:56:17:bc:61:b8:5f:67:6a: 66:ce:44:e5:06:b3:6a:f0:08:41:29:44:b6:5d:3a:b6:41:1d: dd:42:27:3a:07:64:02:f3:45:01:df:ff:46:4e:81:44:76:d4: 15:ef:13:d4:c6:b8:e7:46:70:d7:98:f2:7d:6d:c8:fd:4f:22: 71:49:5d:d6:0b:7c:2b:3c:07:75:a6:a2:fa:35:f1:3c:a7:3f: 11:0d:fc:02:f8:d4:bd:f6:2f:ef:96:95:93:a3:1b:a4:df:b0: 4f:0c:07:1f:03:2f:0f:f5:09:18:a4:a7:db:62:50:bd:96:9f: 58:ed:e2:9d:96:6e:30:89:50:4d:f4:70:03:10:e7:0f:e1:5e: 57:6b:b7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUwNzA1MDU1MjM2WhcNMjUwNzEyMDU1MjM2WjAYMRYwFAYD VQQDEw02ODY4YmRhNC01Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6KuSV19MAVGWiMAIZpMi1qq+/ZSisBAQRAmbnqCbAMOphDcnWzTrptx8e3v Mz4v17bcFkQlLWBS+q2HbpDTdPzel9KkIQKXvmF5PrOvvtWpZxt5s8wbi8NbrgeQ kcEBPHUbWxJFg0onJpvDOUsLeiwA3hZ+Azt2aS6cRS1xC1kZIlGu7kjsCm2r1Onc 6YxPNt4LcyODw0sOgQ6vN5sZ/EVXw6i7/IeKosvqtNXB3o01kYstCCyilMSYItT/ Fu+kbKByUiC0TPY1sqQqC049LJt4NbTnzICU/vd0XZHM86k5xkAoiMqQ6DX9YslB QxnURTdjVb9dZV4irJp7nSgQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe1znvy uF8hjOD3hsOHQr9prHPAMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbx6GcIdrDSKxKIneE7YJiSRcJLE9LGoEgpfrahXeNcX9D1wnsQZ8M G5bWjvLlXQz5moy4tNkRGB343AUeXjsHQC1xj6VDVdxwrhA7W4UqfWvJGcobnQH5 IWMfUAhwWva/9SfCMvPikFEP9d/Gk2jmaw90YEYQVhe8YbhfZ2pmzkTlBrNq8AhB KUS2XTq2QR3dQic6B2QC80UB3/9GToFEdtQV7xPUxrjnRnDXmPJ9bcj9TyJxSV3W C3wrPAd1pqL6NfE8pz8RDfwC+NS99i/vlpWToxuk37BPDAcfAy8P9QkYpKfbYlC9 lp9Y7eKdlm4wiVBN9HADEOcP4V5Xa7fx -----END CERTIFICATE-----Generated at Sat Jul 5 14:40:09 2025 by rpki-client