$ rpki-client -vvf rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft File: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft (raw, json) Hash identifier: HP7kxVYxyh3unK//CqC81G9Ovn6tN+uqzmkgZksEtF8= Subject key identifier: 18:D5:A9:58:93:EA:CF:B3:55:98:7E:C9:6A:8E:C6:22:2B:BE:D4:7A Authority key identifier: 96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 Certificate issuer: /CN=A918779B/serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Certificate serial: 1026 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft Manifest number: 171B Signing time: Fri 22 Aug 2025 17:33:18 +0000 Manifest this update: Fri 22 Aug 2025 17:33:17 +0000 Manifest next update: Fri 29 Aug 2025 17:33:17 +0000 Files and hashes: 1: lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl (hash: heKMjz5Q4b8w5ZIGZ72rNXt/i54hWdrFtR9TeoGHoN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4134 (0x1026) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918779B, serialNumber=96A431ED067C3EB1E473C1304AC6DF9B762255A3 Validity Not Before: Aug 22 17:33:17 2025 GMT Not After : Aug 29 17:33:17 2025 GMT Subject: CN=68a8a9de-f22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:63:d5:3a:f2:8e:3d:da:0f:6f:04:85:79: 18:db:45:ac:37:8f:cf:3f:42:9f:e4:22:12:4a:85: 39:0b:df:f4:74:16:e6:8b:29:1e:dc:c9:00:14:25: e9:dc:c3:c4:dc:ec:27:99:b8:22:a5:28:47:72:9e: 07:3f:96:b5:01:fd:97:be:e5:e8:bd:bb:e9:80:f2: 78:f5:85:07:49:77:08:3b:7f:d7:08:ae:85:e3:0f: af:18:c6:70:e8:73:ef:3f:1e:24:36:19:8b:66:24: f0:12:15:d7:8a:95:2c:df:b0:a6:34:37:95:75:b7: 56:f3:bc:10:0d:c8:76:fe:60:c0:6e:54:95:f8:32: 04:fd:06:fa:54:59:55:b1:09:05:33:0e:51:5c:ab: 1d:b5:c8:4d:41:a8:ed:c6:bc:42:f7:15:6a:10:eb: bc:41:8e:65:f2:40:d1:93:ec:cf:f9:17:02:14:45: 9e:42:b1:de:7c:19:6d:69:0c:ce:5e:5c:5b:ec:3b: 9c:d2:f8:b7:ae:51:0c:c6:b4:6c:f9:89:ef:e7:d0: cd:a3:bb:6f:33:d1:b0:de:f0:eb:7d:2a:f6:82:f1: 44:91:d7:28:9b:cd:4b:dd:8f:c0:f7:16:7c:f9:04: 4f:1f:d5:c5:9a:e6:b7:f3:55:2a:a0:e7:ae:ed:4b: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D5:A9:58:93:EA:CF:B3:55:98:7E:C9:6A:8E:C6:22:2B:BE:D4:7A X509v3 Authority Key Identifier: keyid:96:A4:31:ED:06:7C:3E:B1:E4:73:C1:30:4A:C6:DF:9B:76:22:55:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918779B/7CF59FAA4A7211E983912180C4F9AE02/lqQx7QZ8PrHkc8EwSsbfm3YiVaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:02:aa:05:84:ed:cb:11:a2:f7:45:fe:12:91:69:0a:69:dc: db:02:c9:ac:31:ec:b7:a1:c0:4b:f7:cb:78:1b:42:27:3b:5a: bf:27:7b:65:f7:29:40:b1:60:5b:81:29:e1:3d:24:9e:e4:76: 9a:2c:42:24:33:12:2e:3d:91:8c:f6:26:13:e5:49:6b:49:82: 13:fe:b0:26:f1:24:02:8c:3b:7a:3c:db:de:de:b1:80:c1:53: ed:ab:ce:4d:97:91:7c:98:36:0c:cf:cc:fa:6e:b3:03:b1:c3: 47:9c:81:26:00:2d:10:92:ec:38:93:c7:69:07:bc:6c:e8:b2: 9e:66:29:54:35:20:f1:5e:b8:2c:99:fc:7b:82:96:ea:8c:92: 77:50:b4:bd:5e:e0:8d:85:b9:96:f9:a5:9a:e1:2a:64:96:2e: 0b:70:86:19:cc:3f:48:a5:0f:97:21:7c:b6:e8:ed:60:bc:a0: d4:09:c4:55:76:f5:32:f5:b0:a0:df:31:13:f7:87:4b:94:47: b9:d3:cb:59:62:cb:54:39:cf:b8:93:23:0e:32:fe:99:7e:52: ad:de:14:a0:68:d9:f5:5b:4f:f1:52:e1:02:0d:3e:20:ff:1c: 4a:c9:9d:f8:e7:63:d3:06:f6:08:df:02:41:c5:fb:a3:2f:75: 4b:6e:66:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3OUIxMTAvBgNVBAUTKDk2QTQzMUVEMDY3QzNFQjFFNDczQzEzMDRBQzZERjlC NzYyMjU1QTMwHhcNMjUwODIyMTczMzE3WhcNMjUwODI5MTczMzE3WjAYMRYwFAYD VQQDEw02OGE4YTlkZS1mMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZtj1Tryjj3aD28EhXkY20WsN4/PP0Kf5CISSoU5C9/0dBbmiyke3MkAFCXp 3MPE3OwnmbgipShHcp4HP5a1Af2XvuXovbvpgPJ49YUHSXcIO3/XCK6F4w+vGMZw 6HPvPx4kNhmLZiTwEhXXipUs37CmNDeVdbdW87wQDch2/mDAblSV+DIE/Qb6VFlV sQkFMw5RXKsdtchNQajtxrxC9xVqEOu8QY5l8kDRk+zP+RcCFEWeQrHefBltaQzO Xlxb7Duc0vi3rlEMxrRs+Ynv59DNo7tvM9Gw3vDrfSr2gvFEkdcom81L3Y/A9xZ8 +QRPH9XFmua381UqoOeu7UsYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjVqViT 6s+zVZh+yWqOxiIrvtR6MB8GA1UdIwQYMBaAFJakMe0GfD6x5HPBMErG35t2IlWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Nzc5Qi83Q0Y1OUZBQTRB NzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBySGtjOEV3U3NiZm0zWWlW YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxUXg3UVo4UHJIa2M4RXdTc2JmbTNZaVZhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Nzc5Qi83Q0Y1OUZBQTRBNzIxMUU5ODM5MTIxODBDNEY5QUUwMi9scVF4N1FaOFBy SGtjOEV3U3NiZm0zWWlWYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGAqoFhO3LEaL3Rf4SkWkKadzbAsmsMey3ocBL98t4G0InO1q/J3tl 9ylAsWBbgSnhPSSe5HaaLEIkMxIuPZGM9iYT5UlrSYIT/rAm8SQCjDt6PNve3rGA wVPtq85Nl5F8mDYMz8z6brMDscNHnIEmAC0Qkuw4k8dpB7xs6LKeZilUNSDxXrgs mfx7gpbqjJJ3ULS9XuCNhbmW+aWa4Spkli4LcIYZzD9IpQ+XIXy26O1gvKDUCcRV dvUy9bCg3zET94dLlEe508tZYstUOc+4kyMOMv6ZflKt3hSgaNn1W0/xUuECDT4g /xxKyZ3452PTBvYI3wJBxfujL3VLbmb2 -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:22 2025 by rpki-client