$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: 6Adh0NnWWSeoQfenAzZIvS8ErdUnQpSXX+fkwGFMqCU= Subject key identifier: 65:94:D6:06:18:9F:9D:E4:24:6C:EB:1A:37:1E:4D:96:EE:D1:49:98 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 012B Signing time: Tue 05 Aug 2025 05:02:27 +0000 Manifest this update: Tue 05 Aug 2025 05:02:27 +0000 Manifest next update: Tue 12 Aug 2025 05:02:27 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: R303bEeQSxArnZfVrl8XOmXVHxcVB4SU0lCKCRb/hh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Aug 5 05:02:27 2025 GMT Not After : Aug 12 05:02:27 2025 GMT Subject: CN=68919063-d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:56:14:74:3c:57:de:11:49:b5:be:06:13: 2c:ad:86:a7:ea:cd:4f:8f:44:84:a6:3e:82:9f:21: e4:a5:22:a4:f0:4a:28:42:9f:67:d3:36:f2:97:50: 98:f9:ea:30:f9:8f:5f:96:c7:fd:09:ae:fb:b2:db: 8f:40:ec:c8:ff:a2:77:74:e1:4e:11:53:ba:58:b2: aa:ee:4a:1c:23:36:48:9f:66:96:92:bf:5e:8a:83: e5:34:5a:92:85:9d:d5:4f:30:09:da:6b:46:a6:8d: 12:43:ba:ab:ec:ea:f4:f2:61:64:e5:fe:f8:52:e7: 44:65:53:f9:70:67:60:73:33:fb:e3:87:e4:81:ac: fc:5d:19:52:13:ae:f1:b5:d2:3f:b7:7e:d5:01:f9: 27:e6:af:30:48:31:a8:30:5f:69:b4:b7:0a:30:25: aa:f5:49:9e:ad:af:39:c4:d6:00:dc:ec:82:10:eb: 46:d1:c1:7d:b1:63:0b:0c:2e:e0:de:4d:a2:5d:c1: 74:3d:a5:d1:ee:2c:0d:50:d6:c9:34:42:87:06:cf: 51:bb:31:60:f5:b3:c6:fa:93:3b:b3:52:c4:af:48: a2:82:fd:3c:48:24:3b:3e:71:0b:1c:07:a9:6d:af: 4d:af:3d:98:37:bd:3f:8a:72:81:65:d0:a8:78:7b: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:D6:06:18:9F:9D:E4:24:6C:EB:1A:37:1E:4D:96:EE:D1:49:98 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a1:4e:96:89:85:03:38:7f:48:a6:e2:29:36:89:33:a6:7c: 64:f6:91:6b:0c:3d:f1:ff:c9:0b:d7:a1:9b:70:af:51:2d:46: d1:83:78:c0:9a:24:bc:54:a8:cf:dc:7a:83:c3:9e:bb:95:ce: 0a:b8:81:76:82:68:91:fa:a9:90:a2:80:35:86:97:89:50:8f: 60:b8:a2:f5:94:ee:2d:e8:db:6e:2d:a9:c4:37:f9:c2:fd:18: 12:b6:e4:9a:6d:56:d5:70:71:68:29:7a:e4:03:1d:cf:da:66: 18:98:44:15:2c:ed:dc:ce:69:8d:c0:73:da:b6:7a:5e:3b:4f: 6a:6d:ee:7a:04:b8:9e:b8:dd:88:46:86:b3:dd:86:72:d5:a7: d7:d8:91:28:40:55:35:1d:c7:3f:0c:7f:fb:ea:be:32:25:a1: c2:ce:d6:10:34:72:67:31:24:da:a4:d2:49:e9:c3:d2:51:e1: 04:7c:f7:70:78:9b:29:50:db:ab:a0:ee:a5:ba:b8:f8:66:3d: d2:16:11:a6:cf:bc:77:35:1c:5f:44:8a:0f:f0:4b:55:8d:40: 01:cc:af:ac:aa:68:41:31:ee:19:dc:5f:11:0a:10:4d:09:70: bb:ed:2b:01:97:03:59:65:85:10:21:37:ff:98:be:c6:e5:75: 2c:e0:8c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUwODA1MDUwMjI3WhcNMjUwODEyMDUwMjI3WjAYMRYwFAYD VQQDEw02ODkxOTA2My1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYpWFHQ8V94RSbW+BhMsrYan6s1Pj0SEpj6CnyHkpSKk8EooQp9n0zbyl1CY +eow+Y9flsf9Ca77stuPQOzI/6J3dOFOEVO6WLKq7kocIzZIn2aWkr9eioPlNFqS hZ3VTzAJ2mtGpo0SQ7qr7Or08mFk5f74UudEZVP5cGdgczP744fkgaz8XRlSE67x tdI/t37VAfkn5q8wSDGoMF9ptLcKMCWq9Umera85xNYA3OyCEOtG0cF9sWMLDC7g 3k2iXcF0PaXR7iwNUNbJNEKHBs9RuzFg9bPG+pM7s1LEr0iigv08SCQ7PnELHAep ba9Nrz2YN70/inKBZdCoeHsAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWU1gYY n53kJGzrGjceTZbu0UmYMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFoU6WiYUDOH9IpuIpNokzpnxk9pFrDD3x/8kL16GbcK9RLUbRg3jA miS8VKjP3HqDw567lc4KuIF2gmiR+qmQooA1hpeJUI9guKL1lO4t6NtuLanEN/nC /RgStuSabVbVcHFoKXrkAx3P2mYYmEQVLO3czmmNwHPatnpeO09qbe56BLieuN2I Roaz3YZy1afX2JEoQFU1Hcc/DH/76r4yJaHCztYQNHJnMSTapNJJ6cPSUeEEfPdw eJspUNuroO6lurj4Zj3SFhGmz7x3NRxfRIoP8EtVjUABzK+sqmhBMe4Z3F8RChBN CXC77SsBlwNZZYUQITf/mL7G5XUs4Iya -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:37 2025 by rpki-client