$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: v0nj0czY2hyfyFnCF1oWb7eO4w5yGZwa3ISUftGD1SE= Subject key identifier: F3:24:9A:6E:2B:98:14:BA:5D:9D:40:C4:CA:97:C0:B4:8C:35:B6:D1 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 01B3 Signing time: Tue 05 Aug 2025 03:36:48 +0000 Manifest this update: Tue 05 Aug 2025 03:36:47 +0000 Manifest next update: Tue 12 Aug 2025 03:36:47 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: 8V5CqbjKEfdR5rdc/IlovrP5L5LnDm3kW7CrzyPqtU8=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Aug 5 03:36:47 2025 GMT Not After : Aug 12 03:36:47 2025 GMT Subject: CN=68917c4f-d019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:dc:45:a5:6d:d7:ca:36:83:68:64:43:b5: 28:c5:ce:51:ea:30:45:27:91:1a:2a:81:bb:46:ea: 3f:f6:5e:a0:83:36:03:3a:26:db:94:eb:a2:24:26: 41:5c:a0:f4:6f:4e:2e:c3:ce:4c:3d:a9:75:5b:d9: 68:ac:71:78:cc:8d:a4:55:e0:1f:fe:39:95:ee:b4: 9e:bf:3a:48:73:f4:db:95:94:d2:f5:4e:1d:fc:14: f1:fe:18:be:b8:dc:2e:ae:c2:9f:26:dd:65:f3:3d: be:c2:82:9a:48:38:07:d7:e4:e7:58:51:67:0d:ef: 17:16:7d:ce:62:f8:f7:be:0e:60:8d:76:d1:39:17: 51:2a:d4:80:c5:25:77:3d:3e:d0:87:4a:e7:5d:01: f4:3d:4f:bc:cc:f8:2b:c6:3b:a3:98:84:6e:12:7c: 54:ee:7c:ed:5f:f6:1c:46:28:c5:cd:e2:a6:6d:a1: 9c:aa:51:90:86:1b:ad:fa:09:26:12:32:c3:80:4f: 97:00:4d:20:ec:fb:1c:a8:0c:cc:55:94:8a:68:7c: 02:0b:2c:3e:38:ea:94:3e:b0:ce:f6:06:71:46:63: 2e:77:ec:c2:b0:c1:ae:dd:4a:97:8f:a6:da:ae:f7: d7:34:55:fb:ab:a1:08:d7:0a:ff:db:40:a5:d4:78: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:24:9A:6E:2B:98:14:BA:5D:9D:40:C4:CA:97:C0:B4:8C:35:B6:D1 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8a:fd:b6:2d:0e:8f:b8:b6:fd:e5:5a:8c:97:3e:25:ee:0f: 1d:fc:14:28:53:87:3d:35:40:fa:9b:df:5b:22:fc:20:9e:ca: 6a:5c:f5:f4:5f:47:88:ef:3a:27:e8:90:86:ac:3b:74:ce:97: 35:bf:3d:d5:0c:ef:32:b8:73:e3:d2:75:64:f9:bb:8e:61:12: e0:26:4e:60:f6:9b:b0:08:46:30:8a:5b:e3:b4:cd:60:98:eb: b8:01:f8:3e:d1:87:9d:2c:83:ff:bd:ea:6c:28:08:44:39:61: 18:a6:f1:b7:89:e6:af:52:68:ed:82:34:fb:30:a4:82:35:03: 4c:24:ef:61:fe:c5:37:90:77:61:0f:86:c7:fd:b8:68:ae:e5: b3:c5:55:2b:28:b9:a5:77:c5:42:fb:e2:b1:cf:67:5f:a9:0b: 84:f4:f1:51:a4:30:48:5d:02:46:ee:4a:1a:c3:a8:32:15:77: 81:4a:49:94:59:21:81:82:cb:50:53:74:a9:15:99:3a:38:f2: 0f:2b:63:32:bf:34:c8:1f:f5:14:f6:b5:dc:d9:7e:ec:2a:57: e5:cc:52:e5:68:9e:11:e7:42:1c:aa:7b:be:e4:a7:80:d6:a9: 98:0f:40:d1:70:e2:2e:56:dc:22:ec:70:e6:56:4f:ef:1b:6b: 57:ce:42:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwODA1MDMzNjQ3WhcNMjUwODEyMDMzNjQ3WjAYMRYwFAYD VQQDEw02ODkxN2M0Zi1kMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18rcRaVt18o2g2hkQ7Uoxc5R6jBFJ5EaKoG7Ruo/9l6ggzYDOibblOuiJCZB XKD0b04uw85MPal1W9lorHF4zI2kVeAf/jmV7rSevzpIc/TblZTS9U4d/BTx/hi+ uNwursKfJt1l8z2+woKaSDgH1+TnWFFnDe8XFn3OYvj3vg5gjXbRORdRKtSAxSV3 PT7Qh0rnXQH0PU+8zPgrxjujmIRuEnxU7nztX/YcRijFzeKmbaGcqlGQhhut+gkm EjLDgE+XAE0g7PscqAzMVZSKaHwCCyw+OOqUPrDO9gZxRmMud+zCsMGu3UqXj6ba rvfXNFX7q6EI1wr/20Cl1HhkHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMkmm4r mBS6XZ1AxMqXwLSMNbbRMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3iv22LQ6PuLb95VqMlz4l7g8d/BQoU4c9NUD6m99bIvwgnspqXPX0 X0eI7zon6JCGrDt0zpc1vz3VDO8yuHPj0nVk+buOYRLgJk5g9puwCEYwilvjtM1g mOu4Afg+0YedLIP/vepsKAhEOWEYpvG3ieavUmjtgjT7MKSCNQNMJO9h/sU3kHdh D4bH/bhoruWzxVUrKLmld8VC++Kxz2dfqQuE9PFRpDBIXQJG7koaw6gyFXeBSkmU WSGBgstQU3SpFZk6OPIPK2MyvzTIH/UU9rXc2X7sKlflzFLlaJ4R50Icqnu+5KeA 1qmYD0DRcOIuVtwi7HDmVk/vG2tXzkKZ -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:12 2025 by rpki-client