$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: Iu9WdrWfTr6gqMWavwH8U2zVk8t4gRVAhHX1baCmTm4= Subject key identifier: 7E:A7:8A:E9:9D:EC:7A:1D:34:09:D0:FA:C0:C4:CF:D6:5F:CD:5E:CB Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0DE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0DC0 Signing time: Mon 30 Jun 2025 18:07:54 +0000 Manifest this update: Mon 30 Jun 2025 18:07:54 +0000 Manifest next update: Mon 07 Jul 2025 18:07:54 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: UHvwla+GBKaqBSHy8iyDNlLz2/lu+LlFeLa5so/j6Ac=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: fGrUYT1O2dItK4fIwYgIfLvCsJmlCIF/jYJCGwsc26A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3553 (0xde1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: Jun 30 18:07:54 2025 GMT Not After : Jul 7 18:07:54 2025 GMT Subject: CN=6862d27a-467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:2f:cd:9e:9f:3a:91:8a:94:70:94:fa:bd: 91:2f:16:e5:56:da:fd:ea:dd:81:0c:82:54:e3:75: 2b:a5:35:62:ee:a5:f7:5f:ca:68:54:81:f4:d8:27: 09:d5:9d:9c:f1:69:84:71:11:95:96:2b:ce:64:58: 74:cc:f6:ae:da:69:dd:0f:cf:22:c6:17:d6:5d:50: 36:28:40:f5:c9:21:b0:8c:e0:27:06:3e:56:df:7c: b0:2a:66:28:a4:1e:1f:c5:80:27:d0:24:3e:7a:95: f7:d1:ec:9a:48:a2:46:8d:4e:34:7c:93:b5:0c:71: dc:49:27:d8:a2:60:21:d1:1a:4a:fd:c1:c6:d6:4b: 69:fe:a5:a9:ea:c5:0f:ef:7b:21:7a:30:e2:15:dd: ab:41:52:7c:98:20:d5:f1:28:1f:3d:b0:19:ac:e3: 2e:2c:d8:11:1a:c6:ea:27:48:dd:d2:98:eb:9c:d6: 80:57:fc:a8:a5:2d:9f:04:13:49:90:50:6f:82:06: 19:d0:11:6f:2d:ef:ee:8f:6c:55:84:36:5f:1f:68: ac:66:7d:ba:5d:f5:ce:8c:8c:06:75:b2:a1:72:c8: c2:2f:4d:c0:c4:9e:19:33:eb:d1:b5:49:02:77:5c: b5:1c:b4:41:d5:b3:87:2b:47:f2:73:a2:93:44:e0: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A7:8A:E9:9D:EC:7A:1D:34:09:D0:FA:C0:C4:CF:D6:5F:CD:5E:CB X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:97:3b:25:5b:cc:5b:7e:54:09:65:1d:c0:ad:84:46:a8: 98:9e:2c:06:68:97:3b:0c:e4:8e:ec:55:a2:bd:52:33:98:4b: 78:d5:46:96:93:f0:d8:a4:e7:1e:ee:3b:8e:e0:8d:a5:fb:2e: de:1c:11:b0:69:5e:fc:23:71:82:2b:cc:6b:ee:c7:d3:28:4c: 93:24:34:9d:87:3e:c2:9b:15:bd:75:bc:dd:be:d9:bc:4b:d6: 60:c1:20:66:c0:44:1e:a7:6c:3a:9e:bc:0f:09:3a:c2:18:c3: 5a:fa:aa:46:12:b5:4c:e4:25:e7:6a:7a:24:ea:dd:b8:36:ec: da:3c:8b:e9:ca:91:7e:b3:70:42:7d:4a:6d:51:b0:55:7b:a4: f9:a6:c0:aa:26:20:57:7c:b4:29:77:3e:8d:55:70:b6:13:84: d8:08:34:5c:f5:be:71:de:63:1c:20:d9:28:ba:06:e5:e1:1e: c7:af:e6:35:80:68:ad:ea:8d:3b:f4:37:b3:71:a0:1a:84:ba: b7:c4:b3:20:b9:bd:e4:d1:63:da:db:a5:3b:c9:82:72:90:85: 2a:bf:9d:df:12:47:32:6d:8a:94:ff:3a:78:1d:54:bb:01:71: 34:5c:0f:a2:bc:78:1a:50:5f:e4:ac:e4:34:82:49:e0:35:96: 08:3f:78:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUwNjMwMTgwNzU0WhcNMjUwNzA3MTgwNzU0WjAYMRYwFAYD VQQDEw02ODYyZDI3YS00NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz0vzZ6fOpGKlHCU+r2RLxblVtr96t2BDIJU43UrpTVi7qX3X8poVIH02CcJ 1Z2c8WmEcRGVlivOZFh0zPau2mndD88ixhfWXVA2KED1ySGwjOAnBj5W33ywKmYo pB4fxYAn0CQ+epX30eyaSKJGjU40fJO1DHHcSSfYomAh0RpK/cHG1ktp/qWp6sUP 73shejDiFd2rQVJ8mCDV8SgfPbAZrOMuLNgRGsbqJ0jd0pjrnNaAV/yopS2fBBNJ kFBvggYZ0BFvLe/uj2xVhDZfH2isZn26XfXOjIwGdbKhcsjCL03AxJ4ZM+vRtUkC d1y1HLRB1bOHK0fyc6KTROA6CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6niumd 7HodNAnQ+sDEz9ZfzV7LMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNZc7JVvMW35UCWUdwK2ERqiYniwGaJc7DOSO7FWivVIzmEt41UaW k/DYpOce7juO4I2l+y7eHBGwaV78I3GCK8xr7sfTKEyTJDSdhz7CmxW9dbzdvtm8 S9ZgwSBmwEQep2w6nrwPCTrCGMNa+qpGErVM5CXnanok6t24NuzaPIvpypF+s3BC fUptUbBVe6T5psCqJiBXfLQpdz6NVXC2E4TYCDRc9b5x3mMcINkougbl4R7Hr+Y1 gGit6o079DezcaAahLq3xLMgub3k0WPa26U7yYJykIUqv53fEkcybYqU/zp4HVS7 AXE0XA+ivHgaUF/krOQ0gkngNZYIP3hm -----END CERTIFICATE-----Generated at Tue Jul 1 09:14:16 2025 by rpki-client