$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json) Hash identifier: ih0sjHe4i6sg91XVqJCCQG9hFqppOnOqE6p34VBrMDc= Subject key identifier: 77:AF:73:C6:FD:D6:ED:0A:DD:64:E4:E3:27:5E:DB:73:F3:A3:6F:B8 Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft Manifest number: 0F Signing time: Sat 09 Aug 2025 08:37:30 +0000 Manifest this update: Sat 09 Aug 2025 08:37:29 +0000 Manifest next update: Sat 16 Aug 2025 08:37:29 +0000 Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: aT7JsZBkHSxIVFofQ+WUjCgMw+uAk8fYRb8f1KkozoA=) 2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7 Validity Not Before: Aug 9 08:37:29 2025 GMT Not After : Aug 16 08:37:29 2025 GMT Subject: CN=689708c9-eb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:a3:50:25:0b:7f:8d:9b:55:2b:e6:e2:03: 0b:26:e0:3b:50:59:a7:ae:b8:97:93:9e:ec:5b:f7: b1:c7:22:11:87:f4:76:77:d0:5b:ed:05:ce:70:ba: ff:c2:66:f3:d3:50:54:e0:6c:3b:67:d6:de:ae:3e: cd:97:0f:e0:da:63:27:6e:f7:77:9e:4f:46:22:e1: 17:d6:29:48:c2:2b:36:57:90:f4:25:ca:85:84:37: a8:12:ab:d3:0c:dd:b7:89:42:62:73:aa:e7:93:a0: 7f:ba:67:e4:3b:3d:f0:ef:1b:9b:34:29:af:f7:c6: 41:8e:20:ff:ec:d5:36:ac:3d:d7:bc:2a:44:8d:f2: 29:ba:8a:a6:86:a5:33:4c:ca:6f:b8:70:21:4d:6d: 1f:3a:d1:c1:8d:5a:ba:48:21:8e:93:57:f0:87:56: a4:7a:f5:54:74:45:17:17:86:e9:b0:07:c0:2b:86: 20:9b:41:94:0a:02:f0:a8:f0:1b:65:b3:76:b6:dc: 0f:80:a6:a6:09:4c:d5:34:ad:59:68:9d:e7:28:bd: f3:a2:a4:f1:46:75:e1:2b:9e:bc:a7:5c:6c:9f:6a: 5c:87:4d:af:ec:6a:37:09:04:0a:b6:f3:ee:18:fc: 38:7f:49:b9:2b:e4:fe:9e:d5:01:7d:13:fe:00:df: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:73:C6:FD:D6:ED:0A:DD:64:E4:E3:27:5E:DB:73:F3:A3:6F:B8 X509v3 Authority Key Identifier: keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:55:e4:45:00:1b:0b:9e:6c:4f:49:1b:dd:ba:be:b5:6b:f5: cd:b2:10:e1:e6:b5:63:ab:3a:4f:c0:b6:9b:c0:d5:0b:d2:6c: 58:26:4a:58:36:a9:94:f5:cd:31:d1:58:e5:60:5a:0b:24:40: d1:1b:95:8e:47:fc:f0:4f:99:fc:5a:91:51:c8:0a:f9:02:6c: 04:0c:78:a7:d3:f8:c6:83:d9:91:22:dc:8c:7d:6c:75:8c:54: 1d:1a:4c:11:2a:27:2c:4e:5c:73:97:e5:5f:08:44:c3:b9:6f: 1a:ad:28:65:b3:fa:25:f2:13:a6:f8:71:53:b3:ef:97:ad:74: 68:5a:a3:70:c7:5d:cb:45:84:2f:85:ca:62:be:26:9f:23:2f: b6:55:57:a1:b5:fc:2e:a7:c9:df:ef:a0:e9:6b:5a:8c:0c:6e: fd:60:d5:b8:98:90:3e:f5:96:16:6f:23:d8:17:f4:c0:52:58: 21:20:ab:e4:fd:19:f4:aa:57:05:4d:a3:ea:c6:11:08:58:02: aa:88:7e:48:90:08:e3:68:62:18:0c:7f:0a:00:03:51:06:a6: 8e:f1:4c:10:ad:51:29:df:92:20:8a:8c:14:54:80:b9:ba:2e: a6:51:b1:6e:6c:d1:3f:9d:0f:78:48:10:5e:04:4d:ed:25:36: 92:bc:99:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoQUJGREE5RUU0QjRGNEUxQkQ5RUE0N0JCRkY4NUFFOTM1 NDkxMDNFNzAeFw0yNTA4MDkwODM3MjlaFw0yNTA4MTYwODM3MjlaMBgxFjAUBgNV BAMTDTY4OTcwOGM5LWViNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1CKNQJQt/jZtVK+biAwsm4DtQWaeuuJeTnuxb97HHIhGH9HZ30FvtBc5wuv/C ZvPTUFTgbDtn1t6uPs2XD+DaYydu93eeT0Yi4RfWKUjCKzZXkPQlyoWEN6gSq9MM 3beJQmJzqueToH+6Z+Q7PfDvG5s0Ka/3xkGOIP/s1TasPde8KkSN8im6iqaGpTNM ym+4cCFNbR860cGNWrpIIY6TV/CHVqR69VR0RRcXhumwB8ArhiCbQZQKAvCo8Btl s3a23A+ApqYJTNU0rVlonecovfOipPFGdeErnrynXGyfalyHTa/sajcJBAq28+4Y /Dh/Sbkr5P6e1QF9E/4A32mdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd69zxv3W 7QrdZOTjJ17bc/Ojb7gwHwYDVR0jBBgwFoAUq/2p7ktPThvZ6ke7/4Wuk1SRA+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzY3QjA5NDA2NjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2WjZrZTdfNFd1azFTUkEt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcV8ycDdrdFBUaHZaNmtlN180V3VrMVNSQS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzY3QjA5NDA2NjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL3FfMnA3a3RQVGh2 WjZrZTdfNFd1azFTUkEtYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERV5EUAGwuebE9JG926vrVr9c2yEOHmtWOrOk/AtpvA1QvSbFgmSlg2 qZT1zTHRWOVgWgskQNEblY5H/PBPmfxakVHICvkCbAQMeKfT+MaD2ZEi3Ix9bHWM VB0aTBEqJyxOXHOX5V8IRMO5bxqtKGWz+iXyE6b4cVOz75etdGhao3DHXctFhC+F ymK+Jp8jL7ZVV6G1/C6nyd/voOlrWowMbv1g1biYkD71lhZvI9gX9MBSWCEgq+T9 GfSqVwVNo+rGEQhYAqqIfkiQCONoYhgMfwoAA1EGpo7xTBCtUSnfkiCKjBRUgLm6 LqZRsW5s0T+dD3hIEF4ETe0lNpK8mWo= -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:50 2025 by rpki-client