$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: 7V/r7J3vUF6GXKyMcDwBjSCpjeJ8HprAJ2srTLhLQ0c= Subject key identifier: F2:31:78:EF:22:9E:39:4B:F1:6A:97:18:9C:72:48:BE:E3:3B:DD:40 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 0751 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0748 Signing time: Mon 30 Jun 2025 22:01:57 +0000 Manifest this update: Mon 30 Jun 2025 22:01:56 +0000 Manifest next update: Mon 07 Jul 2025 22:01:56 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: lynA/+wLNM0EYm3v4YvWNgYcfsSwyDm+CMeQiWupsr8=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1873 (0x751) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Jun 30 22:01:56 2025 GMT Not After : Jul 7 22:01:56 2025 GMT Subject: CN=68630954-ad0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:d7:c9:07:49:2f:2f:1d:e1:06:a6:46:d6: f5:6c:3f:89:c1:72:19:63:36:8f:1f:67:55:17:41: c8:16:17:af:d7:16:50:2c:78:46:0b:5a:43:af:1d: 6a:f0:e4:0c:6f:ef:2e:6a:76:24:8b:cd:e6:14:30: 9d:f9:44:f4:90:65:7a:94:71:d0:45:b4:59:7d:14: ff:de:61:da:0e:21:10:ea:03:e1:57:87:83:dc:3a: db:e0:83:3a:3a:c3:63:ee:ec:c4:7a:d1:7b:d7:a2: 2d:5b:37:1a:e3:fa:18:31:0d:fd:22:42:aa:35:74: e6:35:31:c2:0e:b5:ff:d1:3b:49:66:49:4b:97:5d: 79:54:4e:a5:31:49:d8:95:67:21:10:b6:35:74:73: cf:91:26:6e:3b:06:a8:81:03:03:45:96:eb:9f:54: 13:e4:c7:59:ca:70:25:13:c0:52:92:0c:58:4e:b0: 05:44:5d:90:5e:12:1d:c9:d8:bb:32:33:b3:58:f0: 3f:75:48:a0:94:ea:40:d1:7f:3c:56:17:38:cd:af: 6d:90:f6:19:14:f7:b6:8f:d5:ba:7e:7f:6d:dd:45: 8e:67:e3:9f:62:15:8b:c3:a1:bf:e4:6e:43:06:6d: 55:91:42:f0:73:c6:20:10:8a:cc:bb:df:8c:ce:3d: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:31:78:EF:22:9E:39:4B:F1:6A:97:18:9C:72:48:BE:E3:3B:DD:40 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:40:4a:10:64:eb:4b:29:f1:be:4b:fd:cd:55:6a:1f:e2:54: 24:4b:d8:ee:c1:eb:cb:b1:4b:64:32:fe:85:ab:a7:8f:99:28: 1e:3f:c4:9b:31:e9:a4:26:b3:6d:2c:76:09:19:98:06:d8:ea: 65:d3:67:80:22:4c:91:23:f4:a1:5f:d4:34:9a:80:07:74:d6: f1:4c:cb:50:2a:14:d4:65:ea:5b:f3:3f:d9:f2:35:7b:6d:39: cb:43:32:fa:f5:ea:57:5d:53:7d:fb:94:20:46:2a:c5:14:a0: 4e:c3:19:fb:cf:b1:01:18:64:72:80:cb:e5:3e:6a:d8:f8:4b: 8f:4d:be:a3:77:9b:12:12:cf:62:b0:5f:66:4d:ba:13:67:08: b5:bb:51:75:31:68:1d:8c:6e:ca:69:94:60:3c:6d:0c:42:9c: 37:7d:9c:02:8e:20:e7:24:28:c2:66:82:e7:ab:d1:ae:0c:f3: 8a:41:19:5b:25:50:99:19:7f:38:24:fb:42:bf:e2:7e:e8:89: 9b:ef:31:f2:56:82:37:61:e6:bc:f4:30:bf:19:0f:f1:0f:c4: c9:6e:91:75:9e:57:e6:fc:d5:5b:0f:ec:10:10:37:c0:d9:e2: ff:a7:7a:07:fe:ca:a9:f6:58:f0:61:22:c7:9a:d5:40:89:45: f2:20:47:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUwNjMwMjIwMTU2WhcNMjUwNzA3MjIwMTU2WjAYMRYwFAYD VQQDEw02ODYzMDk1NC1hZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySHXyQdJLy8d4QamRtb1bD+JwXIZYzaPH2dVF0HIFhev1xZQLHhGC1pDrx1q 8OQMb+8uanYki83mFDCd+UT0kGV6lHHQRbRZfRT/3mHaDiEQ6gPhV4eD3Drb4IM6 OsNj7uzEetF716ItWzca4/oYMQ39IkKqNXTmNTHCDrX/0TtJZklLl115VE6lMUnY lWchELY1dHPPkSZuOwaogQMDRZbrn1QT5MdZynAlE8BSkgxYTrAFRF2QXhIdydi7 MjOzWPA/dUiglOpA0X88Vhc4za9tkPYZFPe2j9W6fn9t3UWOZ+OfYhWLw6G/5G5D Bm1VkULwc8YgEIrMu9+Mzj3KcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIxeO8i njlL8WqXGJxySL7jO91AMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvQEoQZOtLKfG+S/3NVWof4lQkS9juwevLsUtkMv6Fq6ePmSgeP8Sb MemkJrNtLHYJGZgG2Opl02eAIkyRI/ShX9Q0moAHdNbxTMtQKhTUZepb8z/Z8jV7 bTnLQzL69epXXVN9+5QgRirFFKBOwxn7z7EBGGRygMvlPmrY+EuPTb6jd5sSEs9i sF9mTboTZwi1u1F1MWgdjG7KaZRgPG0MQpw3fZwCjiDnJCjCZoLnq9GuDPOKQRlb JVCZGX84JPtCv+J+6Imb7zHyVoI3Yea89DC/GQ/xD8TJbpF1nlfm/NVbD+wQEDfA 2eL/p3oH/sqp9ljwYSLHmtVAiUXyIEcS -----END CERTIFICATE-----Generated at Wed Jul 2 16:41:46 2025 by rpki-client