$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: wKXqFtNOy/abc7LcTSv30TkUkTF8wZsOl4+aUoukSiE= Subject key identifier: 67:0F:1B:65:31:A3:23:1A:D6:57:27:A7:1A:34:9C:D5:77:E3:2A:41 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 01FA Signing time: Sat 09 Aug 2025 02:49:13 +0000 Manifest this update: Sat 09 Aug 2025 02:49:13 +0000 Manifest next update: Sat 16 Aug 2025 02:49:12 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: VOVkEXg5qhkJ0l6fsbVL8EtG+ZSVEZCJpdhvXyA80QM=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Aug 9 02:49:13 2025 GMT Not After : Aug 16 02:49:12 2025 GMT Subject: CN=6896b729-7643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:ad:66:24:83:ae:7f:aa:6b:24:8f:df:68: cb:0b:86:5c:19:95:7a:69:53:f8:87:11:e3:7f:2c: f4:cd:58:dc:40:62:3e:22:52:cf:71:ab:0c:4a:8f: eb:68:a7:a8:a1:7d:fc:d9:39:14:9a:6e:33:44:ca: 37:61:40:34:2d:d6:55:c9:7f:cb:28:c5:24:d7:af: 0b:b2:c0:ca:2c:e3:66:04:2b:c1:ea:34:25:76:dc: 54:ba:28:43:22:e2:3a:f4:b8:ff:dc:22:09:db:0a: 11:db:af:b9:58:46:cf:2c:88:cf:5d:30:ff:ac:aa: 25:b5:b6:b5:30:77:e1:77:1b:3a:c1:46:96:74:ca: ec:d3:13:ec:94:41:90:c8:3d:37:78:c5:a8:c0:5a: 31:ed:f6:1e:28:61:ea:b4:4a:63:69:74:76:5a:03: 4b:3c:62:39:b2:9a:ff:7e:14:14:15:3c:37:6b:f1: 2b:62:04:ad:23:a1:d2:d4:3a:58:d9:e4:5f:5a:d4: 48:06:b4:19:23:db:a7:60:9f:10:b7:d6:96:6b:a9: 46:e7:2a:46:ef:bf:ba:d2:ce:47:89:de:62:d7:32: 8a:23:d8:aa:8e:9a:4c:0d:cf:34:76:d2:7a:d7:cb: d0:e3:e9:bb:88:e7:fd:fe:d7:44:19:f3:94:32:66: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:1B:65:31:A3:23:1A:D6:57:27:A7:1A:34:9C:D5:77:E3:2A:41 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:78:90:3d:3f:6b:19:99:0c:70:6d:3a:e0:7e:0d:71:4c:a1: 1f:24:e9:17:0f:05:95:22:38:37:7e:22:b6:9f:c7:a1:1c:39: f6:c6:a2:40:40:a0:2d:28:67:7c:b6:2d:d4:ce:ea:eb:03:d8: b2:4e:f4:76:19:99:85:8b:91:cc:a4:fe:71:35:00:44:7a:2e: 0f:17:48:31:1f:64:ea:b0:51:c0:89:78:e2:4b:5a:0b:d1:d5: bc:a6:0f:20:eb:5c:6b:af:68:56:a4:c9:47:5a:3b:36:20:07: b3:b1:f8:38:b4:01:9b:34:0b:20:0c:f1:e6:60:fb:d1:bf:4b: fd:8c:6e:b8:85:ef:df:8e:b4:dc:04:26:b3:e6:6b:74:d2:de: cf:48:91:63:84:b9:d1:e9:30:cd:71:7b:dd:81:58:33:f6:d8: b2:46:18:eb:97:11:24:a2:71:f8:90:6a:63:cb:20:02:b6:49: 50:57:b0:32:06:32:42:40:20:08:f9:fd:c8:d8:4d:85:50:02: 61:6d:13:7e:71:a3:02:fe:b4:41:18:4c:67:37:fb:0a:3c:e0: ec:27:e4:c5:81:08:80:96:d0:58:30:c6:c1:81:3a:ba:b4:0a: 68:20:39:a0:bc:ad:bc:db:a9:0f:7f:66:0e:77:1e:79:1a:e3: d2:50:26:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjUwODA5MDI0OTEzWhcNMjUwODE2MDI0OTEyWjAYMRYwFAYD VQQDEw02ODk2YjcyOS03NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFqtZiSDrn+qaySP32jLC4ZcGZV6aVP4hxHjfyz0zVjcQGI+IlLPcasMSo/r aKeooX382TkUmm4zRMo3YUA0LdZVyX/LKMUk168LssDKLONmBCvB6jQldtxUuihD IuI69Lj/3CIJ2woR26+5WEbPLIjPXTD/rKoltba1MHfhdxs6wUaWdMrs0xPslEGQ yD03eMWowFox7fYeKGHqtEpjaXR2WgNLPGI5spr/fhQUFTw3a/ErYgStI6HS1DpY 2eRfWtRIBrQZI9unYJ8Qt9aWa6lG5ypG77+60s5Hid5i1zKKI9iqjppMDc80dtJ6 18vQ4+m7iOf9/tdEGfOUMmYItQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcPG2Ux oyMa1lcnpxo0nNV34ypBMB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBeJA9P2sZmQxwbTrgfg1xTKEfJOkXDwWVIjg3fiK2n8ehHDn2xqJA QKAtKGd8ti3UzurrA9iyTvR2GZmFi5HMpP5xNQBEei4PF0gxH2TqsFHAiXjiS1oL 0dW8pg8g61xrr2hWpMlHWjs2IAezsfg4tAGbNAsgDPHmYPvRv0v9jG64he/fjrTc BCaz5mt00t7PSJFjhLnR6TDNcXvdgVgz9tiyRhjrlxEkonH4kGpjyyACtklQV7Ay BjJCQCAI+f3I2E2FUAJhbRN+caMC/rRBGExnN/sKPODsJ+TFgQiAltBYMMbBgTq6 tApoIDmgvK2826kPf2YOdx55GuPSUCay -----END CERTIFICATE-----Generated at Sun Aug 10 18:47:38 2025 by rpki-client