$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: 8+jHXNLg0h4qZzVbbPt8Ozuo3EctGaCP3dqEcTX052U= Subject key identifier: E2:DC:10:16:B7:CA:C0:3D:45:B3:5F:DB:44:6B:72:22:D9:AB:9A:4E Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 1567 Signing time: Sat 14 Jun 2025 18:23:22 +0000 Manifest this update: Sat 14 Jun 2025 18:23:22 +0000 Manifest next update: Sat 21 Jun 2025 18:23:22 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: 3cfujod31Gb6CjC3GgYmChk9WzdclblWYOO3WCWxMdA=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Jun 14 18:23:22 2025 GMT Not After : Jun 21 18:23:22 2025 GMT Subject: CN=684dbe1a-1100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:34:76:93:0a:49:57:4f:7e:b2:87:e7:ea:ba: 08:ee:66:b7:a3:c0:8b:ac:9c:63:6c:80:28:bf:1e: 54:45:48:50:e7:20:aa:5b:61:c2:c9:81:fa:3d:0a: 78:02:b6:c5:fb:65:00:d6:6d:e2:f8:90:0c:97:fd: 25:7a:d9:0a:24:a4:6d:12:47:e4:33:30:af:58:22: 85:77:dd:e0:c0:1b:96:de:fe:d4:96:7e:be:57:50: d7:5e:fa:cc:49:97:b3:15:94:1c:bd:08:eb:bf:61: 5e:75:a8:55:84:82:32:e1:27:e8:b0:9d:37:32:85: 8f:9b:68:96:a7:e0:52:13:fc:6b:98:03:c4:a4:71: 72:30:29:b9:17:27:ef:af:6e:9c:79:59:79:05:1a: 05:da:5e:cf:f9:34:9d:25:b2:a4:26:f8:3d:63:d5: 4e:9b:59:0d:93:ca:56:0a:c8:4a:65:6c:89:cf:ce: 26:58:af:01:2b:4b:6d:5f:8e:6f:17:61:25:b7:35: 47:9c:fe:be:41:c4:e4:e7:08:4c:aa:7b:56:26:56: 82:69:ab:40:24:a0:dc:65:3b:0a:df:ca:d6:54:d8: 14:c4:29:13:1f:8b:35:95:4b:df:47:ef:af:97:1f: a5:70:dc:e0:2d:2b:56:07:1d:b4:26:d7:ce:e6:11: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DC:10:16:B7:CA:C0:3D:45:B3:5F:DB:44:6B:72:22:D9:AB:9A:4E X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:b5:bd:40:fd:29:a5:a3:cf:30:00:4b:d0:b2:77:d3:f6: ba:22:42:af:48:c3:e7:76:98:87:eb:c7:56:b0:f5:0d:c5:58: 32:1f:f0:91:ba:4d:de:f2:cc:ac:8f:0c:c3:ee:e6:17:95:6c: f7:76:c8:47:ac:84:d4:62:ea:55:a1:9f:01:9a:ec:26:bb:d2: b2:38:1e:62:18:af:d6:18:91:30:64:71:ef:a5:f1:b3:4a:2e: f9:7d:f9:b4:7c:f3:f3:5c:0f:81:ee:cb:6e:3c:9e:27:57:1c: 58:fb:f5:b6:21:d6:91:43:91:13:c0:55:03:47:eb:f2:27:25: f4:81:51:f1:5c:c3:b5:5c:2f:1f:19:9c:9c:fb:0e:65:7a:13: 96:ad:bb:4d:ef:c4:d9:f8:d7:71:31:64:0e:8f:10:d1:57:e0: 08:11:5c:60:35:75:ab:01:23:72:d8:74:29:19:c8:04:65:0f: fd:24:17:27:76:c7:92:6e:4c:2a:e2:0f:0d:71:e4:3c:4e:04: 4b:3f:fc:36:21:2a:f7:03:f6:a7:34:fb:6c:53:1c:7a:f1:1d: 35:69:4a:5a:71:a5:18:85:55:8a:d9:d6:61:f6:93:75:0b:db: 2c:22:85:7e:bc:d8:74:d5:c9:d4:fd:f7:a3:29:16:8a:5c:7f: a4:d3:1e:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwNjE0MTgyMzIyWhcNMjUwNjIxMTgyMzIyWjAYMRYwFAYD VQQDEw02ODRkYmUxYS0xMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTR2kwpJV09+sofn6roI7ma3o8CLrJxjbIAovx5URUhQ5yCqW2HCyYH6PQp4 ArbF+2UA1m3i+JAMl/0letkKJKRtEkfkMzCvWCKFd93gwBuW3v7Uln6+V1DXXvrM SZezFZQcvQjrv2FedahVhIIy4SfosJ03MoWPm2iWp+BSE/xrmAPEpHFyMCm5Fyfv r26ceVl5BRoF2l7P+TSdJbKkJvg9Y9VOm1kNk8pWCshKZWyJz84mWK8BK0ttX45v F2EltzVHnP6+QcTk5whMqntWJlaCaatAJKDcZTsK38rWVNgUxCkTH4s1lUvfR++v lx+lcNzgLStWBx20JtfO5hGdIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLcEBa3 ysA9RbNf20RrciLZq5pOMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQDbW9QP0ppaPPMABL0LJ30/a6IkKvSMPndpiH68dWsPUNxVgyH/CR uk3e8sysjwzD7uYXlWz3dshHrITUYupVoZ8Bmuwmu9KyOB5iGK/WGJEwZHHvpfGz Si75ffm0fPPzXA+B7stuPJ4nVxxY+/W2IdaRQ5ETwFUDR+vyJyX0gVHxXMO1XC8f GZyc+w5lehOWrbtN78TZ+NdxMWQOjxDRV+AIEVxgNXWrASNy2HQpGcgEZQ/9JBcn dseSbkwq4g8NceQ8TgRLP/w2ISr3A/anNPtsUxx68R01aUpacaUYhVWK2dZh9pN1 C9ssIoV+vNh01cnU/fejKRaKXH+k0x5y -----END CERTIFICATE-----Generated at Sat Jun 14 21:00:51 2025 by rpki-client