$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json) Hash identifier: YBjsmm0B0Ja3LmSKKlkAzNN1uLgsug7XZT/srz7ZGR0= Subject key identifier: 2D:79:4A:25:22:1E:95:80:B3:7B:0D:69:87:4D:FB:4D:59:0F:35:79 Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft Manifest number: 07AE Signing time: Fri 08 Aug 2025 21:41:15 +0000 Manifest this update: Fri 08 Aug 2025 21:41:14 +0000 Manifest next update: Fri 15 Aug 2025 21:41:14 +0000 Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: KTMeGI3fqG1aLYReitbeFf3WpvL5fTXMMF5o+ypjfuI=) 2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: 5bBWhpUzFVVFApumie9XG8UpL1cOYbfpPDdsz7OV/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Aug 8 21:41:14 2025 GMT Not After : Aug 15 21:41:14 2025 GMT Subject: CN=68966efb-de29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:8c:e3:52:83:e3:db:42:64:f0:91:43:bc: f4:78:1c:01:a9:24:d4:14:3b:3b:8e:06:6a:87:80: fe:14:6b:ed:b4:73:51:c8:74:f8:af:c9:74:74:29: 9a:5a:42:7e:74:11:ef:f6:4e:47:90:6f:a3:a1:2d: 70:18:9b:eb:43:1c:83:c7:0d:cf:97:a4:9e:ac:f4: 8d:54:ec:95:aa:66:27:48:67:a8:ed:2e:a8:e9:6e: fd:25:50:10:f8:cc:1b:29:8a:60:75:04:c8:99:7b: 68:75:59:ad:85:d5:c4:59:74:4e:08:75:27:24:3c: 8c:7a:d2:f6:e1:d9:9b:28:91:ef:f5:6e:21:84:29: 79:94:03:c9:2b:6b:9f:24:a4:8f:e2:7c:ac:cd:9c: f6:58:d5:4a:99:85:a8:3f:e8:22:66:33:fa:ac:1b: d1:16:d4:6c:58:26:bb:01:62:62:7f:42:03:4a:d1: f0:cc:89:e5:6f:c5:81:9d:56:27:dc:08:2c:67:90: ac:f8:6b:d3:f4:4f:9f:8b:6a:98:e1:b4:bf:8f:3b: 76:83:99:ad:46:32:29:5f:92:eb:60:82:ad:ed:14: f4:0b:10:91:00:5b:84:af:87:71:49:f0:f8:f5:55: 9f:6c:6f:51:8c:7a:45:27:41:e3:ee:e0:f9:35:2e: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:4A:25:22:1E:95:80:B3:7B:0D:69:87:4D:FB:4D:59:0F:35:79 X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b9:0a:5a:36:b9:9a:fc:72:ae:06:49:8e:ab:8f:a8:e8:0f: 5b:e5:60:d0:bc:73:f7:a7:30:fc:38:38:7e:25:40:f3:dc:5f: fa:dd:d4:57:cb:5b:73:33:2e:5b:77:a2:c4:23:97:11:87:34: 62:3f:c7:a2:5d:fa:1c:96:a3:54:9d:a6:be:f6:80:6b:be:0c: 79:dd:af:02:54:11:05:45:20:07:d1:a7:4f:9c:6b:96:ff:36: c6:cb:5c:c8:9e:0a:2c:cd:e4:42:c9:70:cc:70:a1:e9:e0:12: af:56:24:2a:5d:a8:7b:9d:ce:8b:ef:58:5e:3d:89:b7:86:f9: b3:1d:2d:2a:ca:bd:ca:49:fd:e7:2b:19:07:71:88:aa:c6:62: f4:66:c7:ea:27:cf:b3:44:d8:6a:ae:d3:e5:35:36:df:dd:13: ca:52:3c:00:ed:22:cd:3b:bc:8f:9c:aa:23:26:b3:fe:5c:90: fc:cd:31:86:4f:f5:94:91:aa:34:f3:1d:f4:75:30:bc:f6:12: ae:e6:15:80:de:4d:21:6f:b0:6d:00:26:6b:71:e6:58:02:80: 64:38:6f:0b:9e:80:25:12:b8:a5:c8:46:71:5e:ca:bf:01:42: ee:db:54:c4:4c:e4:da:9a:44:62:c7:9c:11:59:8b:4e:6c:a6: d4:82:3b:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUwODA4MjE0MTE0WhcNMjUwODE1MjE0MTE0WjAYMRYwFAYD VQQDEw02ODk2NmVmYi1kZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwviM41KD49tCZPCRQ7z0eBwBqSTUFDs7jgZqh4D+FGvttHNRyHT4r8l0dCma WkJ+dBHv9k5HkG+joS1wGJvrQxyDxw3Pl6SerPSNVOyVqmYnSGeo7S6o6W79JVAQ +MwbKYpgdQTImXtodVmthdXEWXROCHUnJDyMetL24dmbKJHv9W4hhCl5lAPJK2uf JKSP4nyszZz2WNVKmYWoP+giZjP6rBvRFtRsWCa7AWJif0IDStHwzInlb8WBnVYn 3AgsZ5Cs+GvT9E+fi2qY4bS/jzt2g5mtRjIpX5LrYIKt7RT0CxCRAFuEr4dxSfD4 9VWfbG9RjHpFJ0Hj7uD5NS5d8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC15SiUi HpWAs3sNaYdN+01ZDzV5MB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEuQpaNrma/HKuBkmOq4+o6A9b5WDQvHP3pzD8ODh+JUDz3F/63dRX y1tzMy5bd6LEI5cRhzRiP8eiXfoclqNUnaa+9oBrvgx53a8CVBEFRSAH0adPnGuW /zbGy1zIngoszeRCyXDMcKHp4BKvViQqXah7nc6L71hePYm3hvmzHS0qyr3KSf3n KxkHcYiqxmL0ZsfqJ8+zRNhqrtPlNTbf3RPKUjwA7SLNO7yPnKojJrP+XJD8zTGG T/WUkao08x30dTC89hKu5hWA3k0hb7BtACZrceZYAoBkOG8LnoAlErilyEZxXsq/ AULu21TETOTamkRix5wRWYtObKbUgjt3 -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:57 2025 by rpki-client