$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json) Hash identifier: sQxbOm5GY58StFEpMzwZvkkx6arYfIu9DIp952yOV8s= Subject key identifier: DA:63:45:46:23:88:B2:68:6E:ED:54:1A:92:17:35:90:7F:3A:50:8A Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft Manifest number: 17 Signing time: Sat 09 Aug 2025 08:28:37 +0000 Manifest this update: Sat 09 Aug 2025 08:28:36 +0000 Manifest next update: Sat 16 Aug 2025 08:28:36 +0000 Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: Wuvnf7R5SijgQ0PmNe1VlC44bZxV8lNawPFNuEt7xdA=) 2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Validity Not Before: Aug 9 08:28:36 2025 GMT Not After : Aug 16 08:28:36 2025 GMT Subject: CN=689706b5-24ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:9b:2e:0b:3e:25:3c:77:29:ef:30:6a:cf: 25:0e:c5:dd:0d:93:75:d0:4e:14:36:8a:3f:b8:e9: 73:19:79:ca:95:8f:b6:fe:d5:47:c9:e3:9f:fd:17: a9:38:fe:ea:33:fd:cc:ad:f5:fd:b2:56:cd:73:b9: 74:a3:4e:57:42:2c:3d:4d:bc:1f:6d:f8:70:0e:e8: f0:ac:0c:3d:de:06:ca:6f:b0:6c:ed:60:b6:80:44: e7:22:65:0d:ee:d0:d1:3b:bc:dd:87:38:13:ce:18: cc:54:5e:88:22:b4:a2:c3:e9:ef:94:33:0d:4c:1d: 92:b5:52:ca:64:94:79:ba:83:b1:ab:ee:ec:ee:b0: 9a:d3:01:c7:55:ac:db:2a:d5:64:b4:99:fd:91:0d: c3:fb:44:27:21:8a:df:5c:fd:bb:e2:f7:69:03:65: ed:80:07:ce:bf:74:0b:4f:a8:0f:a1:5b:bb:13:87: 9d:61:9e:56:48:3d:9b:2d:bc:07:fe:e8:4e:1f:8c: 16:c2:3f:a2:e8:df:82:7c:60:50:5c:7e:da:87:61: ef:d7:9a:5e:9e:b8:d3:f4:18:1d:06:f9:ca:b5:1d: 57:4b:c8:15:8d:0b:d5:97:da:84:0e:5e:e1:56:50: 0e:77:d8:c7:fe:3f:16:3e:34:de:14:53:6c:59:29: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:63:45:46:23:88:B2:68:6E:ED:54:1A:92:17:35:90:7F:3A:50:8A X509v3 Authority Key Identifier: keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2e:3b:d3:f5:9f:80:0d:f1:d7:db:84:58:cd:8f:e4:40:e8: de:9f:56:df:5a:65:81:39:b0:bd:17:2c:b7:69:f6:f9:c9:87: 27:36:26:91:27:76:c2:66:f1:d8:e7:27:c6:c3:ff:12:9f:90: f1:ad:1e:19:4b:51:72:7b:24:0b:84:db:79:b4:c1:cc:a6:e3: b3:db:ba:64:34:5a:e8:9b:06:55:ce:e6:69:f5:6e:fc:9f:05: 96:45:62:89:ae:67:0e:70:3f:e7:ed:60:88:9c:33:95:19:9b: b1:44:61:5b:c6:c2:3e:1c:f7:b4:6c:9a:02:49:cf:41:d2:14: c4:bf:f6:7d:20:c8:53:f5:4a:1a:7c:8c:e5:31:aa:0a:2a:09: f8:6a:76:da:a0:7f:61:c6:91:7a:f0:9a:12:b1:b1:f2:24:f6: fc:cb:b4:45:e8:84:4b:73:df:37:a1:7d:49:45:8b:19:38:72: bf:55:77:6b:ec:7b:c6:c1:38:e0:6b:e4:14:c8:6a:35:88:fc: c8:99:93:44:5f:8e:4d:45:b5:90:58:99:1e:4e:14:11:07:26: 9b:16:0b:7f:58:d4:4b:23:3d:41:23:a3:df:b2:50:1e:d8:e7: 10:43:c1:9b:6a:9a:01:19:d3:16:51:86:33:c0:6c:26:da:32: b8:ca:c9:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoQUQwNzAyNDAyOTNBQ0RDNTI0Q0ExMzM2NTgyRDcwQzIx OUZDQzdFMDAeFw0yNTA4MDkwODI4MzZaFw0yNTA4MTYwODI4MzZaMBgxFjAUBgNV BAMTDTY4OTcwNmI1LTI0YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVq5suCz4lPHcp7zBqzyUOxd0Nk3XQThQ2ij+46XMZecqVj7b+1UfJ45/9F6k4 /uoz/cyt9f2yVs1zuXSjTldCLD1NvB9t+HAO6PCsDD3eBspvsGztYLaAROciZQ3u 0NE7vN2HOBPOGMxUXogitKLD6e+UMw1MHZK1UspklHm6g7Gr7uzusJrTAcdVrNsq 1WS0mf2RDcP7RCchit9c/bvi92kDZe2AB86/dAtPqA+hW7sTh51hnlZIPZstvAf+ 6E4fjBbCP6Lo34J8YFBcftqHYe/Xml6euNP0GB0G+cq1HVdLyBWNC9WX2oQOXuFW UA532Mf+PxY+NN4UU2xZKTmRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2mNFRiOI smhu7VQakhc1kH86UIowHwYDVR0jBBgwFoAUrQcCQCk6zcUkyhM2WC1wwhn8x+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzJEMzM1RTZBNTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFjQ1FDazZ6Y1VreWhNMldDMXd3aG44eC1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzJEMzM1RTZBNTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNV a3loTTJXQzF3d2huOHgtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwuO9P1n4AN8dfbhFjNj+RA6N6fVt9aZYE5sL0XLLdp9vnJhyc2JpEn dsJm8djnJ8bD/xKfkPGtHhlLUXJ7JAuE23m0wcym47PbumQ0WuibBlXO5mn1bvyf BZZFYomuZw5wP+ftYIicM5UZm7FEYVvGwj4c97RsmgJJz0HSFMS/9n0gyFP1Shp8 jOUxqgoqCfhqdtqgf2HGkXrwmhKxsfIk9vzLtEXohEtz3zehfUlFixk4cr9Vd2vs e8bBOOBr5BTIajWI/MiZk0Rfjk1FtZBYmR5OFBEHJpsWC39Y1EsjPUEjo9+yUB7Y 5xBDwZtqmgEZ0xZRhjPAbCbaMrjKyWs= -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:12 2025 by rpki-client