$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: /ZkO7TjVPmN1iqwyB4ZIXlJWB3KPkwL1DYW8GO5sSKM= Subject key identifier: 0C:ED:CA:7B:4B:8E:C0:C3:B4:0D:C3:BF:B7:12:F7:C8:CA:6F:95:42 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C02 Signing time: Wed 02 Jul 2025 19:03:38 +0000 Manifest this update: Wed 02 Jul 2025 19:03:38 +0000 Manifest next update: Wed 09 Jul 2025 19:03:38 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: 2kXXC+kkPC4uB6Wb73uThsUu5xswl1PDaosWP73l7Ko=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: vd/2YU/fZHY0X+88OePyC1GrfRf3guoIzxWdo48FOwA=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Jul 2 19:03:38 2025 GMT Not After : Jul 9 19:03:38 2025 GMT Subject: CN=6865828a-a144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:b8:d5:75:a8:d0:94:1d:10:a4:c5:2a:87: e5:33:9d:8d:24:1e:7d:bb:8c:01:ed:22:d9:0f:39: 5a:13:22:0e:e0:cd:3f:f2:e2:3b:a0:b4:c2:57:7b: 95:9e:93:1d:22:7b:c7:90:14:f3:aa:91:bb:47:e5: bd:53:72:b9:6a:85:1a:62:e0:9c:dc:1e:4a:f6:c9: 14:24:c3:6d:e1:03:99:3e:1b:f6:73:c1:c7:40:0b: 04:31:e8:f6:4d:64:d3:72:39:96:bd:14:30:c7:c3: d6:3f:9a:1f:11:71:55:ea:4d:c3:25:e5:5a:1a:c3: d3:12:45:b4:1a:80:41:87:5e:14:0a:87:f5:e6:8d: 79:af:7d:27:a5:13:22:b3:a3:45:bc:85:bc:70:2d: 28:7c:da:51:25:55:01:24:02:81:7f:c1:e2:dc:40: 57:a9:32:e6:c6:17:b3:4e:43:06:7c:8b:fa:1c:c3: dd:57:37:70:35:72:5d:19:68:c4:7c:de:0c:13:16: 18:a2:a2:ec:4e:b6:a1:fc:57:f2:f1:25:d1:ad:e7: 08:9f:95:0f:f9:e8:ca:19:d0:49:40:d7:ee:bd:07: bb:ed:da:e4:be:12:87:74:f9:a2:90:c0:25:6d:a8: c3:d2:cc:ca:98:46:ee:ef:e8:e4:17:3f:3e:29:6e: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:CA:7B:4B:8E:C0:C3:B4:0D:C3:BF:B7:12:F7:C8:CA:6F:95:42 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:26:8f:4f:f3:1e:15:e3:7e:ed:30:99:58:7e:50:41:1f:8e: 31:e7:28:1a:89:6a:09:b2:92:1f:c7:94:da:20:b8:40:da:78: c3:01:29:9c:e4:e8:be:6a:9a:53:a1:82:60:3c:af:78:71:ae: f0:76:72:5a:2c:e9:e4:f3:6e:72:af:41:19:56:f9:7d:e6:83: 28:46:c5:e4:50:9b:22:b2:ac:32:a8:4f:e1:22:58:7c:bb:8c: 7d:54:b7:7f:37:3a:8b:ef:3c:19:69:41:c0:00:be:01:47:11: af:ce:db:5a:7b:30:54:c1:f4:af:71:b0:ed:65:ed:a6:8a:ba: 21:99:a8:52:bf:82:f7:2d:49:a4:08:22:61:ee:55:9c:5b:2b: 3c:3b:f1:f4:2c:e8:9f:80:5c:ad:9b:58:36:e8:e6:04:e8:f1: 1d:c4:65:5d:1e:f8:5d:ba:72:50:07:05:42:cf:27:15:e0:74: 9b:4f:9f:b4:ef:f4:7f:48:e8:16:51:19:91:68:ce:55:0e:96: ff:dd:ca:8e:12:d4:2e:cb:8f:ca:32:fb:e2:fd:0e:5a:42:b4: 6e:5a:ac:91:29:be:96:a7:ce:b5:d8:27:1d:db:44:c9:e2:d7: 07:11:83:d4:0f:79:a0:1d:00:98:76:16:48:39:b7:04:e1:93: 85:2a:a7:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUwNzAyMTkwMzM4WhcNMjUwNzA5MTkwMzM4WjAYMRYwFAYD VQQDEw02ODY1ODI4YS1hMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eu41XWo0JQdEKTFKoflM52NJB59u4wB7SLZDzlaEyIO4M0/8uI7oLTCV3uV npMdInvHkBTzqpG7R+W9U3K5aoUaYuCc3B5K9skUJMNt4QOZPhv2c8HHQAsEMej2 TWTTcjmWvRQwx8PWP5ofEXFV6k3DJeVaGsPTEkW0GoBBh14UCof15o15r30npRMi s6NFvIW8cC0ofNpRJVUBJAKBf8Hi3EBXqTLmxhezTkMGfIv6HMPdVzdwNXJdGWjE fN4MExYYoqLsTrah/Ffy8SXRrecIn5UP+ejKGdBJQNfuvQe77drkvhKHdPmikMAl bajD0szKmEbu7+jkFz8+KW6wWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAztyntL jsDDtA3Dv7cS98jKb5VCMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYJo9P8x4V437tMJlYflBBH44x5ygaiWoJspIfx5TaILhA2njDASmc 5Oi+appToYJgPK94ca7wdnJaLOnk825yr0EZVvl95oMoRsXkUJsisqwyqE/hIlh8 u4x9VLd/NzqL7zwZaUHAAL4BRxGvzttaezBUwfSvcbDtZe2mirohmahSv4L3LUmk CCJh7lWcWys8O/H0LOifgFytm1g26OYE6PEdxGVdHvhdunJQBwVCzycV4HSbT5+0 7/R/SOgWURmRaM5VDpb/3cqOEtQuy4/KMvvi/Q5aQrRuWqyRKb6Wp8612Ccd20TJ 4tcHEYPUD3mgHQCYdhZIObcE4ZOFKqeF -----END CERTIFICATE-----Generated at Thu Jul 3 04:26:43 2025 by rpki-client