$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: Er0R7LVLF/LaWpgmhicTVpyyaRGd4N+JrJRMrujhjOo= Subject key identifier: AF:AC:96:4F:11:EE:EF:E7:4D:FE:9F:8A:4F:92:93:81:5B:B5:F8:62 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0A31 Signing time: Wed 02 Jul 2025 20:29:53 +0000 Manifest this update: Wed 02 Jul 2025 20:29:52 +0000 Manifest next update: Wed 09 Jul 2025 20:29:52 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: aMy+Zs9sAPeB+NYXce3WdzAAqglUw08qZwLsDSIHHZI=) 2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: dOCznw/J4c94cUvosSW/kOC2oIL6jbmFAL2+O7rkhag=) 3: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: UfxAxapspNfCULgapde2dhkYeQjgb9Bzqtz/tQtQdPw=) 4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: 5nE372F+0IwqYdLJZogWsDWbHc80At5gKYtw/eBlXZE=) 5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: 9X7I+brkK/zM7IstcmQqkt3f3WU83UlUm6djQdlHWFo=) 6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: ejIz9Yuuvy/Lj5GU8AUntC0tFJ+QHqAuBe5ozlZ4Gxw=) 7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: L+W6w2B2/2JqZHEEy+XRZ0tQqm2y+76IdcVbyBsuS1w=) 8: 553170245AC511EBA052F663C4F9AE02.roa (hash: 1WjAWoIgFya9zcz3aaAfAZPj3TaOx48UOEMbOt7aBvY=) 9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: HSmuGZlq2yjbC7oby/mLDwMQgWOMUuKo8bggRUwHe8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Jul 2 20:29:52 2025 GMT Not After : Jul 9 20:29:52 2025 GMT Subject: CN=686596c0-675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:59:d1:e0:78:b0:33:37:cd:78:79:48:b2: c9:45:b1:75:be:8a:51:23:d1:51:77:61:4c:3a:41: 94:e8:ab:d7:40:9c:0a:ab:fe:a3:bf:77:25:4c:86: 1d:fc:3d:22:5e:e9:5f:23:aa:14:76:dd:6f:46:bb: 7b:65:87:f0:8a:4a:4e:4a:f2:5e:46:2e:ef:c4:94: 4d:8e:f3:c0:de:58:35:bb:60:2d:70:dc:24:c3:97: f3:64:d6:2b:2d:cb:d0:20:d6:02:36:b3:f5:1c:95: 16:95:1d:1a:d8:bf:a5:30:ca:f7:85:e7:3d:62:6e: 51:eb:31:f1:ca:57:0f:bf:1e:79:3c:08:4f:bd:63: 57:41:7b:5b:8a:d4:88:b8:ab:f8:4a:14:6f:a7:ce: eb:75:2f:45:93:ee:fe:97:3f:09:a3:19:42:3b:e7: 43:df:6c:fc:7a:f9:a8:85:8d:f3:cd:1b:3b:ce:b7: 12:b4:be:76:2c:7a:4f:d5:38:f6:ad:9f:48:4a:ff: cd:88:4a:36:8f:36:ec:da:e6:c1:ce:db:51:36:8b: 79:3c:8d:99:f1:6c:e1:9b:81:5d:71:58:28:bd:67: 02:ac:df:d6:23:6b:6a:8f:a6:59:e2:15:cf:fd:bc: 76:8e:d2:64:ef:e5:62:9b:9d:be:bc:d9:5e:f2:64: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:96:4F:11:EE:EF:E7:4D:FE:9F:8A:4F:92:93:81:5B:B5:F8:62 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:68:21:f9:af:00:37:36:6e:73:82:21:cd:e9:14:da:e6:9f: 4c:a0:44:3a:61:9b:3b:22:77:a1:d0:36:65:ff:6f:0e:4a:a1: 89:e7:09:80:c5:ff:2f:7e:9d:9e:ac:13:64:84:d9:71:dd:33: 30:93:9a:3c:85:d2:94:a9:bd:32:e6:74:ca:4f:dd:ba:be:c0: 52:25:e8:0f:4f:af:1b:7a:ba:e4:06:4c:c0:69:c8:af:df:f4: 52:92:1e:b2:61:65:b6:16:a7:b2:d4:de:4c:ad:85:d6:32:28: e9:e8:b4:f1:2f:d8:28:e6:ac:bc:0c:f8:eb:0f:b2:18:6d:b7: c1:78:73:bf:ba:a9:36:1b:e5:09:05:b6:ec:94:05:f9:4e:6c: 5a:0d:a8:22:ab:da:2e:c0:47:44:ac:2d:58:ba:3e:5d:8c:71: 7c:5b:1f:21:4e:8d:b9:9f:36:57:cd:b0:06:66:0b:04:fe:7a: 27:25:cc:6f:6a:d2:13:03:97:60:ed:60:0b:3f:5b:40:b1:27: 39:7a:4b:d1:7b:ef:4f:b5:c0:b7:d4:b6:6f:65:6a:b1:82:cb: 5e:e0:ed:e0:a0:a8:df:b6:d0:af:b2:d7:ec:cf:fb:22:ec:63: a3:22:52:a2:84:a5:2f:b2:ab:82:37:71:5a:d0:2b:44:84:b5: e3:3d:d9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjUwNzAyMjAyOTUyWhcNMjUwNzA5MjAyOTUyWjAYMRYwFAYD VQQDEw02ODY1OTZjMC02NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVVZ0eB4sDM3zXh5SLLJRbF1vopRI9FRd2FMOkGU6KvXQJwKq/6jv3clTIYd /D0iXulfI6oUdt1vRrt7ZYfwikpOSvJeRi7vxJRNjvPA3lg1u2AtcNwkw5fzZNYr LcvQINYCNrP1HJUWlR0a2L+lMMr3hec9Ym5R6zHxylcPvx55PAhPvWNXQXtbitSI uKv4ShRvp87rdS9Fk+7+lz8JoxlCO+dD32z8evmohY3zzRs7zrcStL52LHpP1Tj2 rZ9ISv/NiEo2jzbs2ubBzttRNot5PI2Z8Wzhm4FdcVgovWcCrN/WI2tqj6ZZ4hXP /bx2jtJk7+Vim52+vNle8mTFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+slk8R 7u/nTf6fik+Sk4FbtfhiMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmaCH5rwA3Nm5zgiHN6RTa5p9MoEQ6YZs7Ineh0DZl/28OSqGJ5wmA xf8vfp2erBNkhNlx3TMwk5o8hdKUqb0y5nTKT926vsBSJegPT68berrkBkzAaciv 3/RSkh6yYWW2Fqey1N5MrYXWMijp6LTxL9go5qy8DPjrD7IYbbfBeHO/uqk2G+UJ BbbslAX5TmxaDagiq9ouwEdErC1Yuj5djHF8Wx8hTo25nzZXzbAGZgsE/nonJcxv atITA5dg7WALP1tAsSc5ekvRe+9PtcC31LZvZWqxgste4O3goKjfttCvstfsz/si 7GOjIlKihKUvsquCN3Fa0CtEhLXjPdl2 -----END CERTIFICATE-----Generated at Thu Jul 3 21:21:47 2025 by rpki-client