$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: bo4OxrQU8xh8bOhBbPhqx1LzJv9f/pJzO6+S9IyTrBo= Subject key identifier: C3:5B:EC:F1:16:75:71:42:8F:15:5A:21:60:D0:2A:09:FE:76:FC:11 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0C96 Signing time: Thu 12 Jun 2025 18:03:29 +0000 Manifest this update: Thu 12 Jun 2025 18:03:28 +0000 Manifest next update: Thu 19 Jun 2025 18:03:28 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: +gbZfWPXHF/qoas6noXCN8sHsPHNRlL4/SO19pbThds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Jun 12 18:03:28 2025 GMT Not After : Jun 19 18:03:28 2025 GMT Subject: CN=684b1671-22d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:18:90:81:77:7f:2c:cf:d8:bd:47:a9:46: 74:44:80:e5:56:50:88:39:a2:0f:d9:8f:6e:d1:7c: f3:68:bf:47:fc:5e:d0:c2:88:4f:16:89:5e:28:45: 81:86:58:6a:78:40:ed:1c:24:55:3c:2c:32:05:e2: 75:82:9c:2e:49:7b:91:56:cb:87:6c:76:82:5e:4a: 9a:f4:4a:6c:1b:0b:4f:b5:23:e9:50:20:cd:87:31: 6c:c8:a8:cc:8d:57:ba:0a:de:8c:81:8f:fd:7b:dd: a8:22:5a:82:67:34:11:7d:58:1b:8a:7f:35:34:26: 43:5f:de:6e:45:7d:f2:ec:af:0c:2f:91:34:72:6c: ad:38:aa:a0:f7:4e:31:d9:9b:49:d9:a5:8a:24:1a: 8d:f5:5a:aa:4c:47:7a:3b:22:5f:24:fe:c7:a8:47: fb:1b:83:76:52:47:82:c2:c3:38:31:2c:74:05:3b: b9:47:17:3e:ea:9d:93:aa:f5:13:2c:c3:d2:bb:9a: 76:85:b4:ec:c2:1f:44:aa:53:64:51:30:a9:b4:b9: 5c:b6:be:64:47:9f:6a:c3:1f:8b:47:dc:b0:06:d1: 1c:e6:18:e5:62:94:e4:1a:66:0b:dd:ee:70:03:0f: 81:5e:a6:63:60:da:28:f2:22:3a:39:7f:fe:49:53: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:EC:F1:16:75:71:42:8F:15:5A:21:60:D0:2A:09:FE:76:FC:11 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:57:46:ff:90:76:33:ae:c6:83:75:f7:4f:bc:ff:61:c8:6e: 50:07:61:2c:5d:8d:e2:bd:91:e4:5a:11:0e:f1:1b:bb:bf:0c: e2:35:fd:6b:99:b4:34:84:0e:9d:6c:0a:f7:2e:c7:a8:19:7a: 92:9e:0b:42:57:92:0c:49:f9:db:f6:68:ad:7c:de:00:af:38: a0:67:8f:3f:52:c8:3c:dd:bc:b3:9a:88:f3:33:97:eb:30:18: 81:3e:9f:6a:27:c0:e6:4e:1b:06:0e:4f:ff:25:f1:bc:01:12: e7:f4:d5:cb:ab:ee:6c:42:60:1d:b2:01:84:71:de:f9:3f:fc: 76:af:22:24:83:04:a3:a8:ed:62:e3:6e:e8:eb:60:ab:39:4e: bd:d5:53:aa:81:c1:ac:0f:52:61:23:8a:04:85:a4:dd:b9:68: d0:f9:80:2c:d0:c5:9c:ff:97:a0:ec:5e:5a:54:48:65:2b:ea: 53:eb:cd:55:54:d9:c8:63:37:cf:76:17:af:27:c1:04:37:65: c1:10:a1:55:5f:e1:fc:d1:6f:39:cf:f5:f1:d2:70:98:9e:de: 4d:a8:8b:51:27:45:8a:00:c2:b5:61:0b:b4:e0:7f:e9:a9:6e: 5b:e4:15:2c:2f:73:15:1a:e6:47:ca:82:eb:b0:7f:1c:ea:cc: 18:27:73:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwNjEyMTgwMzI4WhcNMjUwNjE5MTgwMzI4WjAYMRYwFAYD VQQDEw02ODRiMTY3MS0yMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzl0YkIF3fyzP2L1HqUZ0RIDlVlCIOaIP2Y9u0XzzaL9H/F7QwohPFoleKEWB hlhqeEDtHCRVPCwyBeJ1gpwuSXuRVsuHbHaCXkqa9EpsGwtPtSPpUCDNhzFsyKjM jVe6Ct6MgY/9e92oIlqCZzQRfVgbin81NCZDX95uRX3y7K8ML5E0cmytOKqg904x 2ZtJ2aWKJBqN9VqqTEd6OyJfJP7HqEf7G4N2UkeCwsM4MSx0BTu5Rxc+6p2TqvUT LMPSu5p2hbTswh9EqlNkUTCptLlctr5kR59qwx+LR9ywBtEc5hjlYpTkGmYL3e5w Aw+BXqZjYNoo8iI6OX/+SVOjBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNb7PEW dXFCjxVaIWDQKgn+dvwRMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkV0b/kHYzrsaDdfdPvP9hyG5QB2EsXY3ivZHkWhEO8Ru7vwziNf1r mbQ0hA6dbAr3LseoGXqSngtCV5IMSfnb9mitfN4ArzigZ48/Usg83byzmojzM5fr MBiBPp9qJ8DmThsGDk//JfG8ARLn9NXLq+5sQmAdsgGEcd75P/x2ryIkgwSjqO1i 427o62CrOU691VOqgcGsD1JhI4oEhaTduWjQ+YAs0MWc/5eg7F5aVEhlK+pT681V VNnIYzfPdhevJ8EEN2XBEKFVX+H80W85z/Xx0nCYnt5NqItRJ0WKAMK1YQu04H/p qW5b5BUsL3MVGuZHyoLrsH8c6swYJ3OI -----END CERTIFICATE-----Generated at Sat Jun 14 17:29:36 2025 by rpki-client