$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json) Hash identifier: VI0bYFgDJdquHomyuzJSWt7YGFra0PfBEZULM6RWqgA= Subject key identifier: 83:AD:3F:CB:F7:66:66:82:31:45:D0:A0:BA:04:78:A6:5A:9C:BA:F4 Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Certificate serial: 11A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft Manifest number: 1FD3 Signing time: Fri 22 Aug 2025 17:20:33 +0000 Manifest this update: Fri 22 Aug 2025 17:20:32 +0000 Manifest next update: Fri 29 Aug 2025 17:20:32 +0000 Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: XdmEuoDs6DXmw7o74Y6FQCuikjVlyeh2h4d2QvXrGM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4517 (0x11a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853 Validity Not Before: Aug 22 17:20:32 2025 GMT Not After : Aug 29 17:20:32 2025 GMT Subject: CN=68a8a6e1-e5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:8f:a0:b8:54:d3:3a:5a:83:c8:7f:b9:1c: 9a:06:5e:0b:bf:f7:0b:e7:c0:60:d8:43:54:ab:7f: dc:5c:1d:f1:f8:2c:28:03:87:10:c1:15:91:51:e1: 08:bc:4b:76:b9:60:73:e5:2c:eb:3a:c3:f0:47:79: d7:ed:bc:de:58:fc:ec:fb:e2:80:b8:a8:20:f5:b7: a4:9d:e8:fc:6b:89:84:b3:ef:6b:65:df:6f:cc:36: b3:2d:b1:85:ec:74:1f:84:a9:1e:db:f9:c9:1e:ec: fc:8a:38:21:aa:e2:5b:8e:1d:34:d1:24:f3:f8:46: 1b:73:57:b4:53:25:3f:e9:3b:01:2d:01:97:cd:a1: e0:42:3d:aa:f4:b0:82:0b:59:19:cc:a4:27:5e:cd: 2a:1c:52:44:f0:0c:ae:43:7d:71:66:6a:61:46:8d: 98:b1:1a:d3:95:95:09:1d:ea:fa:70:0d:e6:b3:b5: be:54:3e:67:25:1f:03:a9:7b:41:b8:b1:91:42:ab: 5f:0f:15:e5:4b:57:3b:44:60:db:d7:9b:a7:e1:90: 04:62:02:a6:d7:8c:37:97:8e:f3:2f:21:41:5f:f7: 11:a4:03:96:74:b9:a5:59:f2:33:32:c3:ed:2c:d7: 76:a4:d0:c5:2f:1c:b2:d6:46:ab:25:5b:a8:81:0e: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AD:3F:CB:F7:66:66:82:31:45:D0:A0:BA:04:78:A6:5A:9C:BA:F4 X509v3 Authority Key Identifier: keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:58:c9:56:8c:4d:fd:06:28:8c:31:94:e3:25:8f:3c:7b: b0:2a:de:33:7f:6a:1b:bd:28:6d:99:9e:dd:a3:bb:0b:1d:42: 81:3a:07:77:f9:0f:0b:27:a6:c5:e5:93:2a:3d:a5:00:34:cd: d8:31:43:be:11:04:d0:0a:9e:55:2c:a8:cf:64:0f:eb:e6:18: 6a:7c:a5:68:53:58:c6:51:39:35:5d:42:62:4f:b7:1e:46:8c: 49:b2:e7:01:4a:2f:bf:59:d1:39:dc:80:16:cf:11:68:1b:cf: 2b:e9:8b:db:5a:f8:11:ae:48:10:81:a3:9c:73:3b:e9:5c:39: 2e:6f:df:32:fc:2b:11:dc:7e:ca:db:2c:b9:ee:d1:3e:7e:48: 3c:44:1c:de:85:ab:13:b8:aa:e3:a3:e4:cc:f7:c3:0b:fc:31: 1f:69:00:a2:22:71:80:f9:89:d0:6a:62:a3:b2:17:09:cd:27: 2e:bb:95:4e:ef:50:e5:68:2b:ec:12:94:6e:9b:15:5c:90:24: be:c5:13:fc:92:32:50:3e:a4:3a:05:00:f6:b1:35:b7:de:4f: 41:d9:a0:a9:44:b5:e4:cb:ea:f2:3e:41:ae:70:bb:5b:23:79: 9e:4a:01:ab:10:d3:e8:23:01:8f:b6:6f:07:3f:d7:88:b5:3a: 30:01:02:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEIxMDFCNUFCNTE5QzJBRTY0QUJGQUQ2QTU2Rjg0M0RD MDk5MEE4NTMwHhcNMjUwODIyMTcyMDMyWhcNMjUwODI5MTcyMDMyWjAYMRYwFAYD VQQDEw02OGE4YTZlMS1lNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpCPoLhU0zpag8h/uRyaBl4Lv/cL58Bg2ENUq3/cXB3x+CwoA4cQwRWRUeEI vEt2uWBz5SzrOsPwR3nX7bzeWPzs++KAuKgg9beknej8a4mEs+9rZd9vzDazLbGF 7HQfhKke2/nJHuz8ijghquJbjh000STz+EYbc1e0UyU/6TsBLQGXzaHgQj2q9LCC C1kZzKQnXs0qHFJE8AyuQ31xZmphRo2YsRrTlZUJHer6cA3ms7W+VD5nJR8DqXtB uLGRQqtfDxXlS1c7RGDb15un4ZAEYgKm14w3l47zLyFBX/cRpAOWdLmlWfIzMsPt LNd2pNDFLxyy1karJVuogQ7eQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOtP8v3 ZmaCMUXQoLoEeKZanLr0MB8GA1UdIwQYMBaAFLEBtatRnCrmSr+talb4Q9wJkKhT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1Wkt2NjFxVnZoRDNBbVFx Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRRzFxMUdjS3VaS3Y2MXFWdmhEM0FtUXFGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjA2Qy9FOUQ2MkU3NEZFQUUxMUU4OTEwRDRENjZDNEY5QUUwMi9zUUcxcTFHY0t1 Wkt2NjFxVnZoRDNBbVFxRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAltVjJVoxN/QYojDGU4yWPPHuwKt4zf2obvShtmZ7do7sLHUKBOgd3 +Q8LJ6bF5ZMqPaUANM3YMUO+EQTQCp5VLKjPZA/r5hhqfKVoU1jGUTk1XUJiT7ce RoxJsucBSi+/WdE53IAWzxFoG88r6YvbWvgRrkgQgaOcczvpXDkub98y/CsR3H7K 2yy57tE+fkg8RBzehasTuKrjo+TM98ML/DEfaQCiInGA+YnQamKjshcJzScuu5VO 71DlaCvsEpRumxVckCS+xRP8kjJQPqQ6BQD2sTW33k9B2aCpRLXky+ryPkGucLtb I3meSgGrENPoIwGPtm8HP9eItTowAQIg -----END CERTIFICATE-----Generated at Sun Aug 24 06:35:13 2025 by rpki-client