$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: gGPPWA9IHPADGm/Oiv126hkLkADpLhEkizbOiqLmXow= Subject key identifier: EC:F1:69:DB:43:16:00:F9:7E:FE:F5:09:57:BB:79:DD:5F:36:39:D0 Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 064C Signing time: Mon 30 Jun 2025 22:55:50 +0000 Manifest this update: Mon 30 Jun 2025 22:55:50 +0000 Manifest next update: Mon 07 Jul 2025 22:55:50 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: ewyOjumGDMJbo8HiHSsjpaZeQ01S5WOSUhPJU8zzs7s=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: sQNOj4qancKoB72U0bVcoarcyKvmrTavihgBPexyxuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Jun 30 22:55:50 2025 GMT Not After : Jul 7 22:55:50 2025 GMT Subject: CN=686315f6-8925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:81:a0:f5:3e:cd:a9:d3:8a:e1:ff:c5:f4: 47:9e:bc:a5:e0:75:76:3c:8b:ab:44:96:c9:4a:e8: 3b:26:c5:92:50:d2:c6:90:d6:65:79:48:8f:24:8b: 83:ac:47:04:67:9a:5d:fb:10:73:55:54:e2:91:e3: fa:43:03:ac:e5:97:34:d8:84:59:82:43:23:dd:a9: 92:d7:cf:ad:93:26:fb:3e:8c:a3:f1:5b:43:d3:99: 1f:77:4d:63:eb:a6:6d:91:9d:79:a6:9c:b3:25:85: 18:69:16:32:14:78:e1:e4:6b:86:0c:66:61:f0:c3: 9f:e0:f7:19:25:9a:97:42:4a:a7:cd:5f:59:b8:56: 0d:23:59:e7:7e:d9:dd:11:5b:19:d2:fb:b2:e2:4d: 04:77:fb:ab:22:19:14:26:1d:46:75:84:79:ee:be: 48:fc:db:af:90:db:a5:3f:26:f8:8a:7a:0c:89:3e: e0:d4:a2:b5:a2:30:38:89:ad:ee:7a:e7:d4:13:c1: 19:80:96:13:86:82:bc:35:1b:e5:3a:f4:5f:f4:2a: 43:b0:25:64:ff:07:b9:29:07:83:6d:eb:f4:70:0a: 3c:66:34:5d:cc:4f:26:fe:2c:95:01:8c:a4:a8:c5: 15:da:5a:b5:df:d6:f0:af:10:d6:da:c6:61:4c:ef: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:69:DB:43:16:00:F9:7E:FE:F5:09:57:BB:79:DD:5F:36:39:D0 X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:45:57:0d:ac:c5:a4:ac:c8:6b:b1:86:51:b9:d4:cf:e3: d6:a8:09:e2:29:a0:e1:37:a5:2e:a0:0c:aa:93:45:c2:d8:81: 64:34:dd:80:8f:d8:e1:48:04:28:76:1f:a6:18:b3:a1:eb:91: c4:bd:c0:d9:9a:5f:1f:df:d0:55:a2:8d:83:0c:78:8c:03:19: 69:f9:a0:da:1e:2d:c3:13:60:56:86:52:ba:b6:7d:c5:0b:04: 73:52:35:4d:28:3f:f0:75:11:08:2c:1b:60:1f:52:6f:d5:f3: 9d:48:60:e5:66:80:c8:d1:82:9b:e5:cf:35:b8:73:7c:b0:d2: 76:31:fe:2f:45:81:08:50:bf:82:bc:2d:a6:06:81:72:f6:af: f8:81:b4:2f:d6:c5:c9:ed:cf:20:52:e4:12:bc:4d:72:17:6b: 20:66:7e:bd:f8:a4:76:51:f6:e9:f7:ac:9e:0e:b2:78:54:ee: b8:ba:3a:e5:cd:bf:c3:9f:19:fa:37:e5:06:8c:78:e9:22:1c: 2b:78:8c:ce:87:be:0b:c3:95:8f:76:91:21:00:39:9d:60:bc: 8a:c8:c0:9d:fe:a1:2b:23:e1:0a:5f:6b:03:97:85:13:96:cf: fb:f6:74:16:6d:ce:d0:62:04:71:2a:db:33:ed:7d:ca:61:21: b7:68:bb:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUwNjMwMjI1NTUwWhcNMjUwNzA3MjI1NTUwWjAYMRYwFAYD VQQDEw02ODYzMTVmNi04OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoSBoPU+zanTiuH/xfRHnryl4HV2PIurRJbJSug7JsWSUNLGkNZleUiPJIuD rEcEZ5pd+xBzVVTikeP6QwOs5Zc02IRZgkMj3amS18+tkyb7Poyj8VtD05kfd01j 66ZtkZ15ppyzJYUYaRYyFHjh5GuGDGZh8MOf4PcZJZqXQkqnzV9ZuFYNI1nnftnd EVsZ0vuy4k0Ed/urIhkUJh1GdYR57r5I/NuvkNulPyb4inoMiT7g1KK1ojA4ia3u eufUE8EZgJYThoK8NRvlOvRf9CpDsCVk/we5KQeDbev0cAo8ZjRdzE8m/iyVAYyk qMUV2lq139bwrxDW2sZhTO8QywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzxadtD FgD5fv71CVe7ed1fNjnQMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAu0VXDazFpKzIa7GGUbnUz+PWqAniKaDhN6UuoAyqk0XC2IFkNN2A j9jhSAQodh+mGLOh65HEvcDZml8f39BVoo2DDHiMAxlp+aDaHi3DE2BWhlK6tn3F CwRzUjVNKD/wdREILBtgH1Jv1fOdSGDlZoDI0YKb5c81uHN8sNJ2Mf4vRYEIUL+C vC2mBoFy9q/4gbQv1sXJ7c8gUuQSvE1yF2sgZn69+KR2Ufbp96yeDrJ4VO64ujrl zb/Dnxn6N+UGjHjpIhwreIzOh74Lw5WPdpEhADmdYLyKyMCd/qErI+EKX2sDl4UT ls/79nQWbc7QYgRxKtsz7X3KYSG3aLvR -----END CERTIFICATE-----Generated at Tue Jul 1 03:24:56 2025 by rpki-client