$ rpki-client -vvf rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft File: q6uaWObZNbfys4ayc-NP3Dhg0pk.mft (raw, json) Hash identifier: iwdFGcL8xhVygrMfmdCiAzRWhPfwhHT5+4JArd/z0nk= Subject key identifier: 20:36:4C:52:4D:B3:81:D2:8E:53:49:B7:9F:E3:59:8A:15:9B:14:54 Authority key identifier: AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99 Certificate issuer: /CN=A915802F/serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft Manifest number: 01FC Signing time: Fri 15 Aug 2025 02:53:59 +0000 Manifest this update: Fri 15 Aug 2025 02:53:59 +0000 Manifest next update: Fri 22 Aug 2025 02:53:59 +0000 Files and hashes: 1: q6uaWObZNbfys4ayc-NP3Dhg0pk.crl (hash: 4rxKPiz5I39ZLgMl9Zwe+VQ2TwS44KljI2E/Q9sxXfQ=) 2: 0CDB293E6E3F11ED9DF20483C4F9AE02.roa (hash: HhHwFRrPmQKTZVgKvpvG7bpVWezUYsnBZKOPfKCB+PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 02:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915802F, serialNumber=ABAB9A58E6D935B7F2B386B273E34FDC3860D299 Validity Not Before: Aug 15 02:53:59 2025 GMT Not After : Aug 22 02:53:59 2025 GMT Subject: CN=689ea147-c4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:6c:67:48:6f:68:fc:a6:2f:8e:6a:90:09: 87:5a:8d:c9:51:f5:35:e2:87:da:43:5b:b0:47:50: 5f:30:b9:87:5e:4c:e6:f7:b8:32:06:ff:83:2f:55: 60:a0:96:99:6f:f0:cb:9e:f4:9b:f8:7b:bb:c9:d0: b4:16:48:f3:25:3e:f3:0b:58:50:91:20:d3:6c:af: 09:d7:b2:dd:6e:1b:45:75:fc:de:a1:50:ef:9b:75: a0:47:d3:f8:24:2c:97:f5:4c:68:91:82:bd:f0:37: 49:3a:73:53:87:27:57:cd:59:47:c3:07:58:eb:9f: cc:63:19:22:d2:8e:f0:3d:47:61:b6:c0:44:25:33: d5:68:f0:9f:de:62:04:dc:fd:eb:97:b8:6d:d2:89: 8b:c0:6b:7e:55:2a:79:fc:98:41:27:c4:df:76:7f: 0c:de:3d:0d:1f:a6:68:c9:a7:4f:29:82:34:cf:d2: 3f:cd:ef:22:84:83:82:fd:14:8d:c3:fc:9f:2f:1a: f7:65:4c:95:91:4d:f8:e7:67:dd:02:3d:dc:fc:88: 87:d7:ad:e4:e2:cf:56:7e:7d:3e:a9:34:ee:c1:7f: 84:f5:03:ec:95:13:d1:84:1f:ce:ef:63:43:2e:f6: e2:ec:6d:6e:c4:90:63:cd:3a:66:42:11:52:fd:42: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:4C:52:4D:B3:81:D2:8E:53:49:B7:9F:E3:59:8A:15:9B:14:54 X509v3 Authority Key Identifier: keyid:AB:AB:9A:58:E6:D9:35:B7:F2:B3:86:B2:73:E3:4F:DC:38:60:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6uaWObZNbfys4ayc-NP3Dhg0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802F/E74BEE226E3B11EDAB886E55C4F9AE02/q6uaWObZNbfys4ayc-NP3Dhg0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:cc:cb:b7:f8:37:95:7f:9a:e9:cf:19:60:d3:70:62:85:7a: 20:e8:01:a0:70:fa:47:e3:27:df:9a:f7:6c:51:f1:4c:c4:d9: 6b:b6:78:6c:4a:3e:12:4b:e4:4e:a9:58:ec:30:db:cc:00:97: 84:ae:13:f3:de:6b:b1:aa:c6:8e:b3:2a:bc:5d:02:a1:e1:63: e6:dc:48:63:a6:df:32:a4:80:c9:c5:73:9b:9c:66:72:86:98: da:11:b0:94:a3:25:26:9f:56:ff:53:17:d4:ab:d1:dc:82:a4: ca:33:63:df:ce:57:96:70:7b:39:66:98:38:d7:9c:f4:33:2e: 9f:a1:df:e0:7b:c4:6c:ca:9f:32:79:fb:fc:a1:a1:c2:79:ad: 40:88:59:9e:ea:19:8c:7f:3c:89:97:f6:0d:c4:54:81:3b:b0: 35:f8:3d:16:e9:d7:ea:66:90:82:3c:14:63:64:aa:49:c0:f8: 64:71:2b:26:24:53:dc:d0:ee:a6:17:c3:ba:7f:08:98:2b:9d: 85:1e:0f:83:9d:73:f4:64:e6:db:8e:77:cb:e2:64:cf:50:61: b5:62:53:9f:17:c1:63:99:36:1d:87:a5:da:e9:36:7c:dd:7e: fd:11:6e:fc:ed:0c:9d:ef:e3:c8:b5:3d:0b:72:b9:f2:9a:0e: a0:68:6c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMkYxMTAvBgNVBAUTKEFCQUI5QTU4RTZEOTM1QjdGMkIzODZCMjczRTM0RkRD Mzg2MEQyOTkwHhcNMjUwODE1MDI1MzU5WhcNMjUwODIyMDI1MzU5WjAYMRYwFAYD VQQDEw02ODllYTE0Ny1jNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CBsZ0hvaPymL45qkAmHWo3JUfU14ofaQ1uwR1BfMLmHXkzm97gyBv+DL1Vg oJaZb/DLnvSb+Hu7ydC0FkjzJT7zC1hQkSDTbK8J17LdbhtFdfzeoVDvm3WgR9P4 JCyX9UxokYK98DdJOnNThydXzVlHwwdY65/MYxki0o7wPUdhtsBEJTPVaPCf3mIE 3P3rl7ht0omLwGt+VSp5/JhBJ8Tfdn8M3j0NH6ZoyadPKYI0z9I/ze8ihIOC/RSN w/yfLxr3ZUyVkU3452fdAj3c/IiH163k4s9Wfn0+qTTuwX+E9QPslRPRhB/O72ND Lvbi7G1uxJBjzTpmQhFS/UIyXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA2TFJN s4HSjlNJt5/jWYoVmxRUMB8GA1UdIwQYMBaAFKurmljm2TW38rOGsnPjT9w4YNKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyRi9FNzRCRUUyMjZF M0IxMUVEQUI4ODZFNTVDNEY5QUUwMi9xNnVhV09iWk5iZnlzNGF5Yy1OUDNEaGcw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2dWFXT2JaTmJmeXM0YXljLU5QM0RoZzBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyRi9FNzRCRUUyMjZFM0IxMUVEQUI4ODZFNTVDNEY5QUUwMi9xNnVhV09iWk5i ZnlzNGF5Yy1OUDNEaGcwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8zMu3+DeVf5rpzxlg03BihXog6AGgcPpH4yffmvdsUfFMxNlrtnhs Sj4SS+ROqVjsMNvMAJeErhPz3muxqsaOsyq8XQKh4WPm3Ehjpt8ypIDJxXObnGZy hpjaEbCUoyUmn1b/UxfUq9HcgqTKM2PfzleWcHs5Zpg415z0My6fod/ge8Rsyp8y efv8oaHCea1AiFme6hmMfzyJl/YNxFSBO7A1+D0W6dfqZpCCPBRjZKpJwPhkcSsm JFPc0O6mF8O6fwiYK52FHg+DnXP0ZObbjnfL4mTPUGG1YlOfF8FjmTYdh6Xa6TZ8 3X79EW787Qyd7+PItT0Lcrnymg6gaGxB -----END CERTIFICATE-----Generated at Fri Aug 15 13:48:33 2025 by rpki-client