$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: aaW/wYdwzpM4UFv9eHAoz7jWVEZI3umFRLcbjha5DLU= Subject key identifier: B8:78:15:B9:77:61:80:DC:EE:E8:AD:17:53:68:BA:22:1C:57:80:E4 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 15A3 Signing time: Tue 12 Aug 2025 18:39:13 +0000 Manifest this update: Tue 12 Aug 2025 18:39:12 +0000 Manifest next update: Tue 19 Aug 2025 18:39:12 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: qtaPZgUeOIsGih5P2B/yWe5+G5sYKxlrX7feqtDTwFY=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: 8CyJAkFajN8p4zLzfXqP/Q/JYG1H6Xgou/fh8TVOZU8=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: lknVK1a919SkTgA0PG7eZEzbdPbdM/q7NMLGN6N/gRs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: x1/GarElcr5O6iE+sqK2ug/fRIYXIcradGA+fv5pzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Aug 12 18:39:12 2025 GMT Not After : Aug 19 18:39:12 2025 GMT Subject: CN=689b8a50-a892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:97:6b:c7:6b:ba:fd:cd:cb:b2:53:89:ff: 52:73:6a:46:86:a4:49:40:02:d7:5a:11:81:17:14: 22:ff:da:60:d0:1a:30:18:c0:18:24:a5:70:f2:d4: cd:29:6e:4b:25:3d:84:78:7a:ac:6d:79:f7:bd:7f: e2:1b:45:81:83:63:81:17:70:e1:28:a8:fa:89:a3: 97:c6:46:e4:ed:78:7d:84:bf:82:cf:62:1a:56:4f: e9:b2:2c:3f:18:13:fb:c6:75:90:9b:1a:9a:b2:f8: d2:cf:c4:9a:e7:6b:2f:ff:91:c0:75:28:5c:d2:c9: 94:31:dc:8b:0b:56:fc:3d:31:f2:29:8e:79:f8:ed: 35:d9:f8:25:6a:7d:40:a4:c4:ab:e6:b7:a1:24:fc: a0:75:cd:2a:4a:82:20:4b:25:96:20:5c:30:8f:8a: f6:0f:ad:19:da:36:b3:d1:3e:1e:ab:e4:a9:ed:b6: f1:28:74:fa:75:1f:d1:85:c0:94:91:3d:22:4a:47: 24:46:f2:c8:51:dc:4c:b7:7e:15:da:3b:6d:9e:47: c4:aa:6d:c2:06:69:4b:00:25:f0:b3:4d:93:60:b4: 85:fb:8c:d9:3b:0e:ab:e7:0f:65:48:04:aa:00:d2: 8a:06:e5:13:65:85:4e:15:83:8b:94:c5:aa:39:12: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:78:15:B9:77:61:80:DC:EE:E8:AD:17:53:68:BA:22:1C:57:80:E4 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1e:51:f2:80:b5:a4:00:c5:24:c1:42:cd:fa:71:40:dd:44: 96:ce:a2:54:65:be:07:04:4c:e3:43:80:d0:c2:e8:e6:c2:9d: a0:da:fc:e8:8a:7d:b0:7f:93:eb:6d:dc:dd:5e:d9:ec:41:ee: e9:d2:99:82:a1:95:eb:d6:f4:52:c6:e9:5c:77:a9:fa:45:7e: 66:37:ca:97:de:e7:e9:de:47:95:47:c1:8f:f3:ed:f8:06:69: f5:c3:77:09:b1:c1:ed:70:da:f8:0e:ec:d3:ae:73:29:e2:d8: 11:71:6e:e6:02:80:01:6d:7d:05:07:91:c2:79:0e:72:f3:7a: 03:7e:5d:91:38:d5:09:4b:4a:54:a1:77:c9:fb:64:46:f1:51: 20:4f:e1:5c:1e:9f:2b:e1:58:30:69:4a:2e:df:0f:b7:cb:dc: 79:76:71:88:39:56:ec:ff:e8:7a:02:ff:46:81:df:0e:21:c9: 49:1c:dd:65:92:80:8c:88:48:9c:cb:4d:dd:4f:7d:8d:23:04: 5b:c3:30:e3:ea:30:29:1a:b5:41:0a:a9:9b:5e:27:76:57:eb: ee:92:e2:9a:f8:58:0f:8e:40:65:16:c8:fc:18:4c:5c:53:cb: 79:15:46:bf:31:23:3a:ac:74:f6:ba:65:59:7d:1f:69:93:d0: c4:65:4b:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjUwODEyMTgzOTEyWhcNMjUwODE5MTgzOTEyWjAYMRYwFAYD VQQDEw02ODliOGE1MC1hODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSuXa8druv3Ny7JTif9Sc2pGhqRJQALXWhGBFxQi/9pg0BowGMAYJKVw8tTN KW5LJT2EeHqsbXn3vX/iG0WBg2OBF3DhKKj6iaOXxkbk7Xh9hL+Cz2IaVk/psiw/ GBP7xnWQmxqasvjSz8Sa52sv/5HAdShc0smUMdyLC1b8PTHyKY55+O012fglan1A pMSr5rehJPygdc0qSoIgSyWWIFwwj4r2D60Z2jaz0T4eq+Sp7bbxKHT6dR/RhcCU kT0iSkckRvLIUdxMt34V2jttnkfEqm3CBmlLACXws02TYLSF+4zZOw6r5w9lSASq ANKKBuUTZYVOFYOLlMWqORKMzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh4Fbl3 YYDc7uitF1NouiIcV4DkMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDHlHygLWkAMUkwULN+nFA3USWzqJUZb4HBEzjQ4DQwujmwp2g2vzo in2wf5PrbdzdXtnsQe7p0pmCoZXr1vRSxulcd6n6RX5mN8qX3ufp3keVR8GP8+34 Bmn1w3cJscHtcNr4DuzTrnMp4tgRcW7mAoABbX0FB5HCeQ5y83oDfl2RONUJS0pU oXfJ+2RG8VEgT+FcHp8r4VgwaUou3w+3y9x5dnGIOVbs/+h6Av9Ggd8OIclJHN1l koCMiEicy03dT32NIwRbwzDj6jApGrVBCqmbXid2V+vukuKa+FgPjkBlFsj8GExc U8t5FUa/MSM6rHT2umVZfR9pk9DEZUsW -----END CERTIFICATE-----Generated at Wed Aug 13 02:46:32 2025 by rpki-client