$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: 75zgp/HnyuTvxC7gP/R/qvNbe+2KYlj3oOTNylldlsE= Subject key identifier: 11:56:0B:5C:73:3F:EC:38:E5:53:62:7C:3E:F2:C2:07:5E:59:4A:ED Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 1263 Signing time: Mon 30 Jun 2025 19:48:47 +0000 Manifest this update: Mon 30 Jun 2025 19:48:47 +0000 Manifest next update: Mon 07 Jul 2025 19:48:47 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: p5VdkVuwV2KPoubtj4+axuV/kve7T4U7+cD9NCkMBYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2645 (0xa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Jun 30 19:48:47 2025 GMT Not After : Jul 7 19:48:47 2025 GMT Subject: CN=6862ea1f-155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:33:43:dd:51:e6:92:45:b2:89:7c:11:d4: 24:a2:e2:6f:b7:1e:9f:d7:70:08:de:41:a7:ab:44: 53:e9:21:63:4d:56:a6:6f:39:18:13:9c:24:96:0c: 1d:5d:18:c1:10:b5:52:34:f3:c2:33:02:21:e0:d8: a8:39:11:ff:df:d8:f4:83:93:06:ac:7c:66:97:a2: 51:39:88:48:0a:b0:72:bd:ef:bd:5c:10:d0:f8:61: b9:5a:9e:ce:68:d0:99:8f:88:78:7d:9f:5d:02:b9: df:d2:1e:ce:b5:cf:ae:f6:f1:ea:41:9b:ab:a6:fd: 3d:d1:4e:04:e6:09:93:d5:f9:d3:0f:57:0f:9a:3c: 68:f4:25:35:3f:c0:14:b4:65:29:59:d1:77:c0:91: ea:dc:a6:bf:70:5a:66:cd:da:54:c4:5e:fe:37:a7: 3e:32:b9:8a:e6:1e:ec:24:ff:59:18:91:d2:b1:b6: ed:ef:d8:07:0d:32:96:95:ec:5b:c8:6f:4e:f2:8c: 17:f2:85:79:58:e1:ed:75:96:25:44:f7:b0:a4:69: 73:90:33:d8:31:4d:72:bb:b6:c3:5e:75:61:48:26: 88:ea:59:b7:d4:3b:ad:db:9d:11:89:eb:98:e9:b7: 15:21:bd:c5:ac:83:44:2e:44:5a:7c:58:f1:26:45: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:56:0B:5C:73:3F:EC:38:E5:53:62:7C:3E:F2:C2:07:5E:59:4A:ED X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e0:94:e3:08:2e:1d:43:c7:65:5b:ab:74:49:84:90:b2:be: 6b:f5:92:b9:fa:68:d6:41:77:3d:90:3b:ed:00:21:8c:d1:5d: aa:c6:b5:14:15:e7:d2:a3:65:ae:1b:b2:59:2c:6d:c2:e4:35: 2c:a3:56:49:a2:14:5e:3e:60:e6:26:0f:d7:03:6c:21:f8:49: 95:3e:9b:83:9b:d8:81:0b:c8:7b:b7:c9:a6:50:80:7c:ce:43: ff:50:a8:7a:8a:e2:cf:63:71:25:31:9a:8f:4f:f2:99:fe:3f: 8e:91:7d:dd:58:76:8a:17:62:4e:99:1f:9c:70:1b:38:07:81: bc:2a:5b:e1:bf:bc:a3:72:2a:4e:d2:7c:e8:20:e6:7d:66:35: 32:ae:a3:0b:99:34:60:3f:9e:56:b5:dd:a0:df:b9:cd:32:71: 6a:34:c8:88:3b:c8:6d:63:f4:2e:8e:84:c7:73:67:64:0d:2a: be:46:be:30:ef:ac:1f:96:c9:62:53:dc:5c:4c:29:47:87:36: 70:43:39:5b:f1:10:f6:fd:0f:3d:93:8d:59:2c:2c:1d:0c:09: 01:44:9c:60:07:5a:e2:39:82:2a:99:d6:11:c3:f0:e2:66:c9: 91:67:28:36:d4:7d:63:7a:68:fc:47:5d:ec:9e:d0:1a:b2:38: de:a2:da:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUwNjMwMTk0ODQ3WhcNMjUwNzA3MTk0ODQ3WjAYMRYwFAYD VQQDEw02ODYyZWExZi0xNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQEzQ91R5pJFsol8EdQkouJvtx6f13AI3kGnq0RT6SFjTVambzkYE5wklgwd XRjBELVSNPPCMwIh4NioORH/39j0g5MGrHxml6JROYhICrByve+9XBDQ+GG5Wp7O aNCZj4h4fZ9dArnf0h7Otc+u9vHqQZurpv090U4E5gmT1fnTD1cPmjxo9CU1P8AU tGUpWdF3wJHq3Ka/cFpmzdpUxF7+N6c+MrmK5h7sJP9ZGJHSsbbt79gHDTKWlexb yG9O8owX8oV5WOHtdZYlRPewpGlzkDPYMU1yu7bDXnVhSCaI6lm31Dut250RieuY 6bcVIb3FrINELkRafFjxJkVgvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFWC1xz P+w45VNifD7ywgdeWUrtMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU4JTjCC4dQ8dlW6t0SYSQsr5r9ZK5+mjWQXc9kDvtACGM0V2qxrUU FefSo2WuG7JZLG3C5DUso1ZJohRePmDmJg/XA2wh+EmVPpuDm9iBC8h7t8mmUIB8 zkP/UKh6iuLPY3ElMZqPT/KZ/j+OkX3dWHaKF2JOmR+ccBs4B4G8Klvhv7yjcipO 0nzoIOZ9ZjUyrqMLmTRgP55Wtd2g37nNMnFqNMiIO8htY/QujoTHc2dkDSq+Rr4w 76wflsliU9xcTClHhzZwQzlb8RD2/Q89k41ZLCwdDAkBRJxgB1riOYIqmdYRw/Di ZsmRZyg21H1jemj8R13sntAasjjeotqr -----END CERTIFICATE-----Generated at Tue Jul 1 20:18:16 2025 by rpki-client