$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: KgwyCdVVDNBNqyYArwmAxl7Bk6WQlaUkSNBHgDmzaEU= Subject key identifier: 89:6F:71:B1:D9:66:4B:DE:D1:79:04:A9:92:8A:53:5F:81:A1:2F:98 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 0691 Signing time: Fri 08 Aug 2025 22:41:42 +0000 Manifest this update: Fri 08 Aug 2025 22:41:41 +0000 Manifest next update: Fri 15 Aug 2025 22:41:41 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: 4YESCrtXQXgYqFiiTpFNSycpbQ/EHOt0ksfwX2QwYjU=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: jy45pLpGUEHdAvcc7aV1J1N0BlCts0GUmsU/8qKGZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Aug 8 22:41:41 2025 GMT Not After : Aug 15 22:41:41 2025 GMT Subject: CN=68967d26-4fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:c6:2b:55:65:08:c1:61:c7:9c:fc:05:69: ec:b6:b8:a7:61:1c:f5:7a:33:d1:61:73:87:8b:56: 96:75:d4:d0:43:13:a3:e5:46:95:28:f3:c8:71:6f: 74:09:ec:ad:23:b3:0d:14:55:c7:88:1d:d3:37:83: 90:e1:82:55:60:a7:1c:e8:2c:16:a5:17:b0:02:02: b7:0e:90:f4:8a:16:87:c0:c5:78:de:3e:78:d9:e4: ff:f9:21:1a:bd:1a:e1:aa:4a:b9:7a:57:08:58:3b: 7c:0e:b8:6f:19:90:8a:af:6e:c5:82:a2:84:77:81: a1:52:d7:e9:4f:15:f2:6f:03:d5:16:8c:69:55:22: 1a:db:26:14:b6:b5:d5:a2:a6:9c:81:d3:56:8b:6b: b9:6a:e5:db:af:c6:d6:27:e7:bc:23:39:e5:72:cf: 05:3e:8f:fc:d7:90:d6:31:dc:31:94:61:b8:e5:1a: b3:63:5b:e0:36:23:69:87:21:6a:e0:b9:9d:25:c7: 35:ab:1e:93:77:24:94:26:d0:64:5a:5a:dd:f3:de: b6:9d:27:a3:7f:82:a3:f7:dc:96:13:eb:33:79:c0: b4:7b:d3:10:f0:2f:8c:f5:1b:e3:d1:cb:ff:7b:4b: cc:91:5b:c5:70:79:9d:f4:05:65:2c:df:a5:f8:b7: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:71:B1:D9:66:4B:DE:D1:79:04:A9:92:8A:53:5F:81:A1:2F:98 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ae:57:43:d0:9f:bd:cf:f3:e9:73:3b:d5:d7:75:a3:66:7a: 89:bc:bb:91:83:7d:d8:6d:70:7e:52:04:f2:97:25:fb:ce:73: de:da:4b:56:f4:4d:55:41:29:4c:c2:69:b7:6b:de:1b:7d:00: 81:4e:5b:a8:2c:b0:bd:81:31:68:d9:ff:6a:e9:e9:3f:f5:63: b0:2b:d5:13:e8:ba:c5:70:a4:87:5b:67:73:a0:f6:e2:f1:b3: 6b:07:e5:5d:06:94:fb:19:ef:0e:d3:37:7b:a1:92:00:a7:3f: 9d:b9:d2:99:61:63:d5:f4:0a:c0:17:3f:86:42:fc:bb:0a:e8: fe:92:3e:0b:77:82:85:5d:d7:40:aa:ed:61:02:fb:38:fa:b3: 2a:54:69:55:8b:39:1e:8c:e5:c9:2c:ec:6c:4f:49:f3:29:d3: f4:83:e7:e5:ba:89:0d:b0:ca:e4:d1:1b:66:64:ee:46:d4:80: 2a:56:4e:ce:f0:b8:ea:af:96:ac:3c:b8:e2:7f:00:55:8b:93: fe:8a:b8:96:aa:b9:3f:b0:11:0e:0b:10:c2:35:66:a3:d3:84: 9c:4c:48:44:01:13:ae:fc:f8:66:e2:b2:01:51:7f:37:31:64: 07:31:70:bb:82:40:ef:12:da:3f:0f:86:2f:91:67:22:85:85: 65:bc:39:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUwODA4MjI0MTQxWhcNMjUwODE1MjI0MTQxWjAYMRYwFAYD VQQDEw02ODk2N2QyNi00ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25nGK1VlCMFhx5z8BWnstrinYRz1ejPRYXOHi1aWddTQQxOj5UaVKPPIcW90 CeytI7MNFFXHiB3TN4OQ4YJVYKcc6CwWpRewAgK3DpD0ihaHwMV43j542eT/+SEa vRrhqkq5elcIWDt8DrhvGZCKr27FgqKEd4GhUtfpTxXybwPVFoxpVSIa2yYUtrXV oqacgdNWi2u5auXbr8bWJ+e8Iznlcs8FPo/815DWMdwxlGG45RqzY1vgNiNphyFq 4LmdJcc1qx6TdySUJtBkWlrd8962nSejf4Kj99yWE+szecC0e9MQ8C+M9Rvj0cv/ e0vMkVvFcHmd9AVlLN+l+Lez0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlvcbHZ Zkve0XkEqZKKU1+BoS+YMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClrldD0J+9z/PpczvV13WjZnqJvLuRg33YbXB+UgTylyX7znPe2ktW 9E1VQSlMwmm3a94bfQCBTluoLLC9gTFo2f9q6ek/9WOwK9UT6LrFcKSHW2dzoPbi 8bNrB+VdBpT7Ge8O0zd7oZIApz+dudKZYWPV9ArAFz+GQvy7Cuj+kj4Ld4KFXddA qu1hAvs4+rMqVGlVizkejOXJLOxsT0nzKdP0g+fluokNsMrk0RtmZO5G1IAqVk7O 8Ljqr5asPLjifwBVi5P+iriWqrk/sBEOCxDCNWaj04ScTEhEAROu/Phm4rIBUX83 MWQHMXC7gkDvEto/D4YvkWcihYVlvDmA -----END CERTIFICATE-----Generated at Sun Aug 10 04:16:40 2025 by rpki-client