$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json) Hash identifier: RVqxBQQ/93lCwh6jjYLTX8SLSmLWCErqlketX6eQtWc= Subject key identifier: 3F:20:86:34:BE:DD:32:7A:C2:DC:40:83:7A:21:52:00:C3:DA:AD:0C Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft Manifest number: 5E Signing time: Tue 01 Jul 2025 07:50:08 +0000 Manifest this update: Tue 01 Jul 2025 07:50:07 +0000 Manifest next update: Tue 08 Jul 2025 07:50:07 +0000 Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: kyEMcaguwTW0zG364sgWzfKHOuVRQOfaw3yKptfBCgQ=) 2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Validity Not Before: Jul 1 07:50:07 2025 GMT Not After : Jul 8 07:50:07 2025 GMT Subject: CN=6863932f-6429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:61:ab:da:01:05:d4:bf:c0:fa:12:47:eb: 53:28:1c:37:ea:3f:4d:8c:76:89:43:80:85:37:ab: d6:05:34:fa:95:49:16:e5:d7:5d:d8:59:59:53:27: 95:39:d3:3c:0a:4f:3f:ef:5e:43:02:a8:26:57:5f: 27:f1:30:59:19:f7:65:67:22:5f:74:cf:c9:13:61: 95:66:ed:d3:4a:93:8c:ab:a5:7b:30:1f:d8:8e:7b: d9:9a:da:79:3d:72:0e:6a:ca:7e:8b:ca:8b:2a:84: 38:4e:16:f6:34:46:e0:82:bf:9e:c1:6b:9e:bd:5b: f5:24:ae:18:b2:3b:ce:2a:a1:c7:6d:41:92:fd:12: c7:40:f1:d0:e6:7c:24:2a:eb:03:64:99:77:07:3c: ec:10:22:e2:1d:ee:92:0a:ae:4f:70:09:04:b2:a4: 88:a2:57:ab:41:66:e1:99:5f:f1:61:bf:78:f9:2a: 9e:1e:9e:ed:95:5d:39:62:0d:69:a2:90:e4:ae:58: a9:4d:93:2d:56:fd:9f:95:29:07:30:99:32:98:d7: d0:6d:a0:14:82:0d:23:80:26:e6:24:19:2d:34:4d: 3c:bf:d5:fc:79:41:6f:79:af:ed:44:ee:4e:c4:f5: f4:6a:94:8e:02:fc:97:d3:40:2e:6e:f2:52:3d:c0: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:86:34:BE:DD:32:7A:C2:DC:40:83:7A:21:52:00:C3:DA:AD:0C X509v3 Authority Key Identifier: keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:42:d1:eb:2f:3c:95:b1:4f:9f:e4:fa:27:7f:ec:ba:a2:4b: 89:98:02:db:1b:f4:34:ac:5f:95:7c:30:b8:fd:1a:3d:71:39: 19:56:68:e0:47:80:af:8d:9a:2f:e9:8f:47:1d:77:7a:54:34: 3a:06:b5:42:15:20:7e:4f:e8:13:f8:fa:c9:e2:1e:b2:68:24: 16:5f:06:6c:70:f5:8f:ba:e6:ba:19:c1:91:aa:f4:9a:61:e8: 28:05:70:59:9b:91:3c:0c:ff:d5:c6:6e:30:dd:af:41:35:0a: 6e:c4:a6:c1:4a:3c:aa:2f:53:5a:73:8b:77:03:10:8f:3c:87: 0e:3e:e1:6a:96:0c:6a:01:f4:99:f6:22:2d:d0:04:ed:83:55: 16:90:a6:92:e3:28:2d:00:19:d5:68:23:13:3e:81:f2:95:a4: 45:b9:ea:2d:7a:6d:f1:e3:64:32:9e:1b:7f:68:04:82:8b:05: d8:2f:61:48:fd:43:c3:9c:4e:94:98:84:db:33:8d:22:e7:4c: 04:05:92:86:c3:1a:7e:3a:48:a6:57:9e:6d:30:dc:b5:01:36: e8:fb:e4:2d:74:22:36:99:72:29:c4:e2:00:c6:00:e9:4e:f5: eb:72:5e:b9:1a:6f:63:a8:ef:c5:b7:c9:f8:8b:97:99:ba:fa: d7:05:94:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDFBNzVFMDU3RTI1MDU1RjE0QTg5RjUzMEM3OEUyMjNC MUYwRjU5MDAeFw0yNTA3MDEwNzUwMDdaFw0yNTA3MDgwNzUwMDdaMBgxFjAUBgNV BAMTDTY4NjM5MzJmLTY0MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuAGGr2gEF1L/A+hJH61MoHDfqP02MdolDgIU3q9YFNPqVSRbl113YWVlTJ5U5 0zwKTz/vXkMCqCZXXyfxMFkZ92VnIl90z8kTYZVm7dNKk4yrpXswH9iOe9ma2nk9 cg5qyn6LyosqhDhOFvY0RuCCv57Ba569W/UkrhiyO84qocdtQZL9EsdA8dDmfCQq 6wNkmXcHPOwQIuId7pIKrk9wCQSypIiiV6tBZuGZX/Fhv3j5Kp4enu2VXTliDWmi kOSuWKlNky1W/Z+VKQcwmTKY19BtoBSCDSOAJuYkGS00TTy/1fx5QW95r+1E7k7E 9fRqlI4C/JfTQC5u8lI9wOrdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPyCGNL7d MnrC3ECDeiFSAMParQwwHwYDVR0jBBgwFoAUQadeBX4lBV8UqJ9TDHjiI7Hw9ZAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzJFOEE3NTRBQzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4VXFKOVRESGppSTdIdzla QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWFkZUJYNGxCVjhVcUo5VERIamlJN0h3OVpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzJFOEE3NTRBQzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1FhZGVCWDRsQlY4 VXFKOVRESGppSTdIdzlaQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIFC0esvPJWxT5/k+id/7LqiS4mYAtsb9DSsX5V8MLj9Gj1xORlWaOBH gK+Nmi/pj0cdd3pUNDoGtUIVIH5P6BP4+sniHrJoJBZfBmxw9Y+65roZwZGq9Jph 6CgFcFmbkTwM/9XGbjDdr0E1Cm7EpsFKPKovU1pzi3cDEI88hw4+4WqWDGoB9Jn2 Ii3QBO2DVRaQppLjKC0AGdVoIxM+gfKVpEW56i16bfHjZDKeG39oBIKLBdgvYUj9 Q8OcTpSYhNszjSLnTAQFkobDGn46SKZXnm0w3LUBNuj75C10IjaZcinE4gDGAOlO 9etyXrkab2Oo78W3yfiLl5m6+tcFlGo= -----END CERTIFICATE-----Generated at Thu Jul 3 02:41:25 2025 by rpki-client