$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: Mrmk6qV/3QzObzK2ipaBfUzfk0OBkBX0F0jfUF/5xu0= Subject key identifier: A9:08:83:FF:CB:0A:B2:5D:24:39:25:B2:02:09:76:D4:34:2F:F2:DB Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 3B Signing time: Mon 11 Aug 2025 07:49:43 +0000 Manifest this update: Mon 11 Aug 2025 07:49:43 +0000 Manifest next update: Mon 18 Aug 2025 07:49:43 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: RvX4E9nmZcCyL7Wxth5oByS3kXcIcUZEwutkpTv0nBI=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Aug 11 07:49:43 2025 GMT Not After : Aug 18 07:49:43 2025 GMT Subject: CN=6899a097-5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:1c:a3:43:f7:3d:05:70:cc:91:c7:61:43: d1:56:83:bd:08:48:37:44:f4:ad:04:34:44:50:82: 6a:27:d3:77:85:df:79:0a:59:7d:48:04:86:5f:04: 34:7a:db:d9:4f:86:8d:1e:db:cc:68:b1:01:ba:b4: 93:de:a3:d8:fb:3d:03:81:31:3c:7b:74:54:2f:2f: 06:7e:39:71:e4:f5:71:e0:61:6f:32:1a:cb:90:d6: 76:14:87:63:71:9e:06:ef:f8:20:bf:a5:41:04:b0: 7f:32:2f:13:10:5b:a0:b2:9e:37:e0:da:b6:f4:51: d1:4a:0c:ba:f2:94:a7:5b:98:51:55:d4:4f:f1:77: 21:91:85:a0:59:f7:1f:f0:4b:5b:0e:33:7e:63:19: 2a:6d:9e:57:a4:8b:7e:2c:b5:5d:89:2d:0f:fe:59: 8e:5a:bb:ab:2a:79:3f:09:24:fe:02:bf:df:99:06: 9f:92:5c:7b:07:c9:4c:6b:ff:f4:8a:b5:d3:4c:b8: b7:02:a8:e8:bf:ae:33:80:15:7f:74:96:f6:e5:71: c1:42:b6:37:16:fe:15:d1:0d:96:ef:ad:de:5f:cf: 6d:03:ef:8c:7d:58:39:1e:39:a8:f9:af:d0:2b:90: 43:e0:c4:d8:31:13:42:f2:03:84:46:f9:58:32:cb: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:08:83:FF:CB:0A:B2:5D:24:39:25:B2:02:09:76:D4:34:2F:F2:DB X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b8:58:c5:97:e2:38:36:0a:fc:df:5c:eb:ef:39:56:cc:06: b4:3a:e3:25:57:68:3d:c3:70:0c:20:bf:2e:20:b9:01:93:a8: 57:3d:a3:3f:c6:ce:ba:ab:80:b9:63:9a:b6:21:ec:f8:67:db: 55:c3:af:49:2a:50:80:5d:cd:5a:30:f3:1c:c1:ab:b0:d4:47: d4:14:63:b3:30:58:ef:d6:f6:0f:c4:c8:4f:b8:38:3e:e2:55: 66:15:5d:81:c5:39:9b:b5:63:f9:d8:a8:3b:ae:cc:f2:49:21: da:60:f0:b7:07:f3:68:a1:eb:74:a2:fa:74:c1:0f:88:8c:e3: 8b:38:95:61:1b:80:a0:c3:42:9c:ef:cd:10:a4:24:f5:f5:48: 00:53:ba:18:7c:c0:18:da:14:69:64:45:d8:f7:a2:b3:25:06: 2f:22:01:4f:1c:f4:fe:d1:2d:99:1b:5d:ac:ac:bc:a9:9e:85: 01:3a:78:48:79:59:db:db:87:65:33:2a:b1:a0:a8:43:31:f0: 5d:a8:c3:5c:92:a4:dc:f2:7e:5e:dc:ca:7a:6b:8b:ce:4e:03: 20:5f:53:2e:22:00:ce:b0:6b:30:17:b7:dd:ab:c2:a0:27:b5: 63:99:cb:10:62:87:87:a9:9a:2c:4c:54:ad:9f:ee:55:7b:da: 0a:f0:bb:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTA4MTEwNzQ5NDNaFw0yNTA4MTgwNzQ5NDNaMBgxFjAUBgNV BAMTDTY4OTlhMDk3LTVhZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqexyjQ/c9BXDMkcdhQ9FWg70ISDdE9K0ENERQgmon03eF33kKWX1IBIZfBDR6 29lPho0e28xosQG6tJPeo9j7PQOBMTx7dFQvLwZ+OXHk9XHgYW8yGsuQ1nYUh2Nx ngbv+CC/pUEEsH8yLxMQW6Cynjfg2rb0UdFKDLrylKdbmFFV1E/xdyGRhaBZ9x/w S1sOM35jGSptnleki34stV2JLQ/+WY5au6sqeT8JJP4Cv9+ZBp+SXHsHyUxr//SK tdNMuLcCqOi/rjOAFX90lvblccFCtjcW/hXRDZbvrd5fz20D74x9WDkeOaj5r9Ar kEPgxNgxE0LyA4RG+VgyyzYhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqQiD/8sK sl0kOSWyAgl21DQv8tswHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACO4WMWX4jg2CvzfXOvvOVbMBrQ64yVXaD3DcAwgvy4guQGTqFc9oz/G zrqrgLljmrYh7Phn21XDr0kqUIBdzVow8xzBq7DUR9QUY7MwWO/W9g/EyE+4OD7i VWYVXYHFOZu1Y/nYqDuuzPJJIdpg8LcH82ih63Si+nTBD4iM44s4lWEbgKDDQpzv zRCkJPX1SABTuhh8wBjaFGlkRdj3orMlBi8iAU8c9P7RLZkbXaysvKmehQE6eEh5 Wdvbh2UzKrGgqEMx8F2ow1ySpNzyfl7cynpri85OAyBfUy4iAM6wazAXt92rwqAn tWOZyxBih4epmixMVK2f7lV72grwuzw= -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:17 2025 by rpki-client