$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: bwfCSbU/wIozlk66FU4/1R6KHDaZ/GlMeGibDppdZUo= Subject key identifier: 02:72:32:C7:B5:81:62:0F:F3:CB:66:52:BA:8D:BC:BA:79:48:1C:9B Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: F2 Signing time: Sat 23 Aug 2025 05:27:42 +0000 Manifest this update: Sat 23 Aug 2025 05:27:42 +0000 Manifest next update: Sat 30 Aug 2025 05:27:42 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: 9HQRXRLetKdwsf2k7d6qrqlx0I0BG8uUhyRO0vy3q04=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: 1KiFLWub5BHrSO0tUJ2uOHpJ+a6PoNSbEd3Z8qezbIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Aug 23 05:27:42 2025 GMT Not After : Aug 30 05:27:42 2025 GMT Subject: CN=68a9514e-37c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:9d:70:0a:f7:83:53:81:46:6d:da:cc:6d: 58:bb:d8:53:01:52:8e:63:75:68:84:11:2f:fe:27: 08:4d:c1:1d:45:b4:4b:67:86:e3:b9:c3:19:3f:44: d8:f0:a4:72:aa:8f:5b:68:51:d1:a4:54:59:ac:0b: 3d:d1:1e:6e:ac:65:fd:4c:0b:a8:e3:cd:53:ec:80: c4:8f:cb:05:bc:91:1f:92:ed:57:40:bc:8f:79:ed: 8c:01:43:22:e2:e5:92:41:88:1d:bb:32:87:11:6d: 6a:96:ee:92:8a:41:40:e8:e1:5f:a6:82:19:df:a1: 77:bd:2e:a2:07:82:68:51:31:c9:69:0f:37:58:65: 84:bb:26:72:a3:6c:96:ff:48:d3:be:d7:2a:a0:2e: 84:1e:17:0b:32:df:8b:b9:ab:5e:dd:aa:0b:67:3f: f5:30:1f:3b:7b:21:c2:1b:7a:8e:b7:4b:9c:2d:bb: d8:cf:86:aa:d4:e9:e2:52:b1:4a:c9:6d:b4:a8:a1: 17:b5:4c:d8:c9:1c:39:77:80:1c:5c:24:8b:b2:ae: 75:e4:12:07:48:39:1f:72:33:d6:a3:03:e5:93:6f: 60:e9:65:46:7e:ee:6a:85:7b:59:59:92:61:10:17: 9d:33:e8:12:ba:28:2d:4d:ea:d7:de:da:0b:3b:56: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:32:C7:B5:81:62:0F:F3:CB:66:52:BA:8D:BC:BA:79:48:1C:9B X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5e:9c:25:6c:67:bc:f9:75:e6:eb:8a:05:fa:b5:f0:a3:8e: fa:e7:e1:33:04:22:90:2b:66:70:72:96:52:0d:ba:f6:e7:4a: 8f:3a:da:e3:d1:9f:52:c8:43:d6:bc:18:88:5c:3b:84:95:3e: 64:5f:1d:6b:ed:32:fa:aa:84:9d:15:20:bb:6c:ce:20:6c:79: c1:76:df:02:48:7c:ea:5d:7d:a1:1b:ac:70:ad:9e:c9:6f:1a: 4c:d5:0a:74:5d:b0:b4:56:61:82:a8:c7:cc:bb:42:21:dd:48: 86:da:2b:dc:84:7b:5d:76:34:82:65:e4:cd:e2:2d:89:a0:4d: 7d:88:41:48:0c:20:19:02:ea:11:3b:ed:35:51:2a:ba:9d:5b: e6:62:77:71:9c:70:07:59:88:4f:67:1f:df:ce:f4:f8:1f:63: 86:ef:69:91:30:60:b7:71:d0:ab:a9:1f:90:77:42:cc:8c:bf: 54:56:af:44:e1:83:13:ed:bd:7d:96:07:8c:e8:5c:d6:54:fc: 3a:2e:1e:5a:63:34:06:ed:16:74:97:c2:87:c9:29:9f:03:6f: 46:07:b4:18:8f:f6:80:d7:35:63:1c:12:39:5b:f3:e7:b5:62: 93:cb:e9:9a:df:3c:04:13:9e:6c:de:6a:28:1d:90:e8:f5:aa: 67:de:c1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUwODIzMDUyNzQyWhcNMjUwODMwMDUyNzQyWjAYMRYwFAYD VQQDEw02OGE5NTE0ZS0zN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluqdcAr3g1OBRm3azG1Yu9hTAVKOY3VohBEv/icITcEdRbRLZ4bjucMZP0TY 8KRyqo9baFHRpFRZrAs90R5urGX9TAuo481T7IDEj8sFvJEfku1XQLyPee2MAUMi 4uWSQYgduzKHEW1qlu6SikFA6OFfpoIZ36F3vS6iB4JoUTHJaQ83WGWEuyZyo2yW /0jTvtcqoC6EHhcLMt+Luate3aoLZz/1MB87eyHCG3qOt0ucLbvYz4aq1OniUrFK yW20qKEXtUzYyRw5d4AcXCSLsq515BIHSDkfcjPWowPlk29g6WVGfu5qhXtZWZJh EBedM+gSuigtTerX3toLO1ZNXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJyMse1 gWIP88tmUrqNvLp5SBybMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPXpwlbGe8+XXm64oF+rXwo4765+EzBCKQK2ZwcpZSDbr250qPOtrj 0Z9SyEPWvBiIXDuElT5kXx1r7TL6qoSdFSC7bM4gbHnBdt8CSHzqXX2hG6xwrZ7J bxpM1Qp0XbC0VmGCqMfMu0Ih3UiG2ivchHtddjSCZeTN4i2JoE19iEFIDCAZAuoR O+01USq6nVvmYndxnHAHWYhPZx/fzvT4H2OG72mRMGC3cdCrqR+Qd0LMjL9UVq9E 4YMT7b19lgeM6FzWVPw6Lh5aYzQG7RZ0l8KHySmfA29GB7QYj/aA1zVjHBI5W/Pn tWKTy+ma3zwEE55s3mooHZDo9apn3sEb -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:38 2025 by rpki-client