$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: HXDSZ8X8ve33lQGXmNwm15BSu7OI3V8ELf7H/AiCWQQ= Subject key identifier: 2A:CD:FA:E8:9D:D4:E9:89:FA:D6:21:2D:3D:87:A5:38:2C:CA:31:E9 Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2D70 Signing time: Fri 20 Jun 2025 15:31:57 +0000 Manifest this update: Fri 20 Jun 2025 15:31:56 +0000 Manifest next update: Fri 27 Jun 2025 15:31:56 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: jxT6WgnfhYLOh8RSKe8sSmi83+PhSPb6jT63UADGLJY=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11660 (0x2d8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: Jun 20 15:31:56 2025 GMT Not After : Jun 27 15:31:56 2025 GMT Subject: CN=68557eed-4f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:99:a5:27:ed:33:bf:d5:82:d0:fd:0e:de: 1a:46:b0:c6:44:0e:df:83:1e:bb:5c:bb:ae:42:be: 07:3e:01:a4:35:bd:0e:73:0a:b6:7d:3d:cc:9e:f2: 1a:a5:16:2f:48:ac:a5:e6:44:03:a5:d6:53:8b:78: e3:2f:09:e3:e3:d5:2c:fc:fa:28:82:5e:00:c3:23: ed:a8:39:a6:91:d6:3b:08:98:64:2c:03:02:fe:a9: f3:6f:45:76:6e:32:05:8c:ca:01:e2:b2:03:1c:2e: 4a:c6:e6:d8:0d:32:ac:66:c3:98:96:26:97:4a:52: 1d:27:14:12:51:e4:29:3e:03:7b:0a:79:41:8b:88: 9d:a3:94:7c:f6:7e:4e:70:a6:6c:66:e1:a4:1a:66: a2:78:a3:44:b7:cb:81:78:19:15:03:21:7a:d2:7c: 8a:23:06:5f:da:13:e4:1f:00:62:f7:f5:87:89:40: 12:28:70:4e:00:19:ca:fe:50:67:66:4b:81:b3:d2: b2:37:df:71:b0:77:75:6e:8a:62:f5:da:e6:0d:7c: 52:4d:dc:09:c9:f7:27:2f:86:5b:62:d3:2a:b4:95: fe:5e:56:98:19:c0:c6:09:bc:3b:e9:91:f0:54:c3: b9:20:be:99:0b:59:48:53:20:a6:15:9e:83:65:50: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:FA:E8:9D:D4:E9:89:FA:D6:21:2D:3D:87:A5:38:2C:CA:31:E9 X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:75:66:da:5c:bb:c2:1a:1b:c4:45:09:91:e9:ac:48:ab:2e: b5:dd:9b:40:e8:dd:21:98:6a:a2:d6:bb:59:36:49:d8:38:32: 01:29:9b:ea:90:08:04:b5:3d:c6:9d:c2:e6:4b:93:b4:ee:98: 3d:d8:f8:7d:a1:b0:5d:c9:40:0c:b3:5e:9f:29:fd:56:4e:9e: 6e:32:45:27:d0:46:ff:2e:2b:3e:a5:af:f5:7f:5c:5b:e5:6a: 49:0e:83:c0:14:b4:6e:5f:1d:ea:c6:e1:0e:6b:17:17:69:c3: 3d:42:f7:7a:34:00:24:aa:bb:45:9a:77:8a:1b:7b:b6:c4:94: fc:82:77:51:ec:d1:3b:4c:7d:ce:cc:29:06:3a:84:6c:ea:69: b5:98:69:2c:9c:9c:81:3a:b9:e5:a2:85:be:f2:88:53:63:8d: b1:73:9c:98:63:d9:43:b3:07:03:be:09:63:a1:63:f5:70:d0: b6:86:fa:5e:e3:ed:90:60:46:2c:a5:d3:8c:24:1e:68:d5:38: 23:67:30:4b:30:74:eb:99:44:38:a1:1d:af:bf:f1:a5:75:af: 1c:8a:f0:45:44:89:84:ff:54:3d:24:1a:dc:f0:83:bf:bb:e3: 5d:55:f9:22:1a:11:bb:10:86:6b:8c:d5:3c:ab:c6:b6:c7:54: d9:54:7e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUwNjIwMTUzMTU2WhcNMjUwNjI3MTUzMTU2WjAYMRYwFAYD VQQDEw02ODU1N2VlZC00ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUaZpSftM7/VgtD9Dt4aRrDGRA7fgx67XLuuQr4HPgGkNb0Ocwq2fT3MnvIa pRYvSKyl5kQDpdZTi3jjLwnj49Us/Poogl4AwyPtqDmmkdY7CJhkLAMC/qnzb0V2 bjIFjMoB4rIDHC5KxubYDTKsZsOYliaXSlIdJxQSUeQpPgN7CnlBi4ido5R89n5O cKZsZuGkGmaieKNEt8uBeBkVAyF60nyKIwZf2hPkHwBi9/WHiUASKHBOABnK/lBn ZkuBs9KyN99xsHd1bopi9drmDXxSTdwJyfcnL4ZbYtMqtJX+XlaYGcDGCbw76ZHw VMO5IL6ZC1lIUyCmFZ6DZVDB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrN+uid 1OmJ+tYhLT2HpTgsyjHpMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1dWbaXLvCGhvERQmR6axIqy613ZtA6N0hmGqi1rtZNknYODIBKZvq kAgEtT3GncLmS5O07pg92Ph9obBdyUAMs16fKf1WTp5uMkUn0Eb/Lis+pa/1f1xb 5WpJDoPAFLRuXx3qxuEOaxcXacM9Qvd6NAAkqrtFmneKG3u2xJT8gndR7NE7TH3O zCkGOoRs6mm1mGksnJyBOrnlooW+8ohTY42xc5yYY9lDswcDvgljoWP1cNC2hvpe 4+2QYEYspdOMJB5o1TgjZzBLMHTrmUQ4oR2vv/Glda8civBFRImE/1Q9JBrc8IO/ u+NdVfkiGhG7EIZrjNU8q8a2x1TZVH7Z -----END CERTIFICATE-----Generated at Sun Jun 22 07:42:17 2025 by rpki-client