$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: +df+fuAfy94ohsZb7V6zaLrT9FFhkbMJuv9gXCBGahQ= Subject key identifier: 0E:33:6C:B9:3C:1E:EE:CF:5A:2D:22:00:A6:85:7E:3D:78:3D:19:1D Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0CB1 Signing time: Mon 04 Aug 2025 18:23:23 +0000 Manifest this update: Mon 04 Aug 2025 18:23:23 +0000 Manifest next update: Mon 11 Aug 2025 18:23:23 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: sHb2jJuHgKGaQz0vWny+QSVb9hOMfCDUx8pN7YYH//g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Aug 4 18:23:23 2025 GMT Not After : Aug 11 18:23:23 2025 GMT Subject: CN=6890fa9b-da35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:99:4b:31:a3:3e:f1:81:aa:32:81:2b:8d: bf:d6:56:4e:cd:2a:df:ee:ae:a1:01:06:85:70:af: e8:a6:4d:79:9d:d1:93:0f:c1:b8:35:63:ef:e1:ab: 36:ae:eb:ff:bb:63:75:e0:63:32:c6:01:8a:21:4b: 9a:da:96:3b:30:b3:2c:23:e7:7b:ac:60:48:49:dc: 5f:bf:cd:b3:e2:0f:0a:a5:55:06:7a:56:e7:60:4e: ab:83:75:f8:d9:b0:7f:6b:86:f8:e4:fc:60:6a:71: a1:1b:5c:60:9e:f3:d5:3e:2d:06:36:f9:25:e2:f7: ae:01:bd:83:e6:5d:b3:42:6a:44:64:39:e2:e8:fd: c6:96:53:27:6e:e1:92:ae:15:b8:a6:92:04:70:f9: 63:4d:a8:9b:26:f5:c5:f5:af:ca:b0:fc:39:f4:7f: 2a:b7:2d:aa:87:a2:28:44:ba:ac:3e:81:b4:04:69: 25:9d:4e:c1:9d:f7:74:f3:76:4e:5d:7e:d3:da:aa: 04:a4:de:56:eb:5f:c3:d8:ab:ac:64:7d:e8:83:45: 40:f1:a3:39:92:e8:75:0d:be:93:0a:05:8f:7c:e2: dc:f7:cd:87:73:ac:cd:49:1a:8f:e8:df:57:c2:19: 19:ef:0e:b4:e8:e3:2c:0b:df:ba:a8:37:2e:1b:36: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:6C:B9:3C:1E:EE:CF:5A:2D:22:00:A6:85:7E:3D:78:3D:19:1D X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c3:59:af:84:87:5c:df:ee:2a:fd:42:b1:78:0a:27:cc:77: 5a:95:96:8b:54:8e:8b:bb:35:c2:12:94:ad:9e:1d:53:68:34: f8:1e:77:a1:20:09:48:8c:48:f5:3c:fc:9d:4f:8e:7b:ce:fc: d6:e4:30:9e:14:83:2c:52:5c:0e:aa:4e:42:e6:88:d6:1d:83: cf:71:54:19:c7:0f:ae:19:62:b5:89:a7:7a:42:0a:c2:2b:7b: 11:5e:b8:91:40:af:b7:44:1f:51:e6:d9:79:b4:51:42:cd:98: 6d:02:e8:04:f3:44:1c:40:38:16:46:4a:47:c6:25:2a:ac:62: 60:e3:45:88:67:3d:c7:23:b9:40:ee:40:ab:2c:20:b1:64:ae: b3:16:2c:dd:ab:d9:2c:95:49:7b:b5:d1:a0:41:d6:d1:0d:09: c8:84:50:d3:a6:7b:6a:5b:f0:3f:1c:79:6a:e7:ea:93:24:4b: f0:f6:41:3a:20:ac:76:79:6d:cd:3b:7c:ed:ea:d6:be:8c:e0: 7a:6d:24:0a:0e:4d:6b:6c:1b:7c:e2:50:3e:7b:a0:be:e8:03: 62:34:bf:8e:0e:18:01:f7:e6:0d:11:5e:1c:ec:3b:7d:b6:61: 9c:3f:ca:97:3a:f7:ee:3c:88:0a:64:3b:83:30:67:fb:52:21: 0a:58:c0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUwODA0MTgyMzIzWhcNMjUwODExMTgyMzIzWjAYMRYwFAYD VQQDEw02ODkwZmE5Yi1kYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeqZSzGjPvGBqjKBK42/1lZOzSrf7q6hAQaFcK/opk15ndGTD8G4NWPv4as2 ruv/u2N14GMyxgGKIUua2pY7MLMsI+d7rGBISdxfv82z4g8KpVUGelbnYE6rg3X4 2bB/a4b45PxganGhG1xgnvPVPi0GNvkl4veuAb2D5l2zQmpEZDni6P3GllMnbuGS rhW4ppIEcPljTaibJvXF9a/KsPw59H8qty2qh6IoRLqsPoG0BGklnU7Bnfd083ZO XX7T2qoEpN5W61/D2KusZH3og0VA8aM5kuh1Db6TCgWPfOLc982Hc6zNSRqP6N9X whkZ7w606OMsC9+6qDcuGza+YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4zbLk8 Hu7PWi0iAKaFfj14PRkdMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIw1mvhIdc3+4q/UKxeAonzHdalZaLVI6LuzXCEpStnh1TaDT4Hneh IAlIjEj1PPydT457zvzW5DCeFIMsUlwOqk5C5ojWHYPPcVQZxw+uGWK1iad6QgrC K3sRXriRQK+3RB9R5tl5tFFCzZhtAugE80QcQDgWRkpHxiUqrGJg40WIZz3HI7lA 7kCrLCCxZK6zFizdq9kslUl7tdGgQdbRDQnIhFDTpntqW/A/HHlq5+qTJEvw9kE6 IKx2eW3NO3zt6ta+jOB6bSQKDk1rbBt84lA+e6C+6ANiNL+ODhgB9+YNEV4c7Dt9 tmGcP8qXOvfuPIgKZDuDMGf7UiEKWMDc -----END CERTIFICATE-----Generated at Wed Aug 6 06:06:40 2025 by rpki-client