$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: 2ramvbVib0WQknAaV+I00lxU4msXltGhmdloZ/e2x5Y= Subject key identifier: 99:60:5A:4D:38:83:31:F9:6E:9A:7B:A2:76:73:B8:79:EC:84:DA:86 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0BCB Signing time: Wed 02 Jul 2025 19:08:27 +0000 Manifest this update: Wed 02 Jul 2025 19:08:26 +0000 Manifest next update: Wed 09 Jul 2025 19:08:26 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: lQ241gSQgFt+JW0+9zDLN21i7zla6N202b0cYiqrJBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: Jul 2 19:08:26 2025 GMT Not After : Jul 9 19:08:26 2025 GMT Subject: CN=686583ab-3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:01:d3:0a:2d:04:e9:f4:20:13:91:2f:ee: 03:15:60:31:81:33:b7:2d:13:4a:20:b1:9e:3e:f1: af:7d:9c:b5:ea:b4:d7:38:ef:98:c1:f5:7b:01:c3: db:00:21:27:f1:03:0a:e0:fe:5b:69:e0:70:00:e2: 49:4b:81:38:a9:05:75:c1:52:b5:82:a9:ac:cb:a5: de:69:64:84:7d:2b:06:f4:cf:dd:d4:7f:64:d7:7a: f7:e7:33:b6:b9:f1:77:06:bc:d3:5c:25:54:86:2d: 89:04:45:4e:9d:db:8a:b7:3c:f2:43:07:f1:80:9c: 7c:6f:fd:f0:f4:0f:17:4c:26:2d:fa:91:cc:1f:92: 53:bd:fa:4c:b6:b6:7e:06:8a:10:9f:9b:74:49:17: 3e:12:fc:77:64:cc:91:d7:d1:98:a0:53:f2:8c:e6: c8:8b:d6:a4:9d:e6:51:ca:1d:f7:a0:da:27:56:c2: 84:df:f9:d1:4c:0f:d9:8b:d5:5c:c4:94:54:d2:d9: b1:6c:90:7c:29:e9:fe:83:ec:e4:65:1b:ad:74:ca: 1b:ae:07:60:52:c1:2b:46:33:3b:af:20:3a:30:00: b4:30:59:b0:97:74:a2:70:d9:f5:8b:5c:f7:26:73: be:87:b8:6d:c8:19:92:26:e6:f5:f7:0f:ec:76:f0: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:60:5A:4D:38:83:31:F9:6E:9A:7B:A2:76:73:B8:79:EC:84:DA:86 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:30:72:e4:d5:c1:2b:bd:f7:36:d5:af:56:96:d9:e9:47:60: f9:49:45:da:9b:03:90:51:15:74:5a:53:21:65:5b:5e:f9:2a: bc:46:6c:80:d8:00:fc:df:e0:eb:43:44:58:4f:53:ba:43:0c: 51:f3:7d:5b:38:75:4a:6c:3e:96:b4:97:84:39:8e:0e:32:1d: 8d:af:00:ab:5b:72:fd:16:1b:e3:a3:08:6d:42:16:c5:f9:72: e7:c6:e3:74:e5:97:57:9d:26:b1:33:ab:97:7b:18:65:dd:78: e5:ec:ee:18:ee:10:aa:fa:44:ae:59:c2:bf:57:0c:a0:5b:90: 52:24:b8:ed:b8:5f:b8:1d:f4:11:6c:d4:14:7f:f1:4d:14:1b: ef:58:a8:08:cf:bf:e4:f7:55:c0:b6:f2:0e:d1:ae:77:b8:1c: fb:32:c6:7f:a4:b8:53:2c:15:39:e1:96:52:d0:62:6e:03:73: 27:37:d4:e1:ea:fa:00:9f:6f:cc:85:86:b1:95:4a:f0:9b:f2: d7:0f:c7:b8:5b:d5:90:67:99:95:d1:26:dd:24:29:54:19:c9: 14:4f:1b:f2:eb:a6:34:67:2f:a1:ea:b2:57:be:d9:b0:99:02: 2e:56:c9:51:26:8d:97:4b:44:63:14:4a:c9:43:32:bd:46:b3: bd:b8:7b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUwNzAyMTkwODI2WhcNMjUwNzA5MTkwODI2WjAYMRYwFAYD VQQDEw02ODY1ODNhYi0zODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSkB0wotBOn0IBORL+4DFWAxgTO3LRNKILGePvGvfZy16rTXOO+YwfV7AcPb ACEn8QMK4P5baeBwAOJJS4E4qQV1wVK1gqmsy6XeaWSEfSsG9M/d1H9k13r35zO2 ufF3BrzTXCVUhi2JBEVOnduKtzzyQwfxgJx8b/3w9A8XTCYt+pHMH5JTvfpMtrZ+ BooQn5t0SRc+Evx3ZMyR19GYoFPyjObIi9akneZRyh33oNonVsKE3/nRTA/Zi9Vc xJRU0tmxbJB8Ken+g+zkZRutdMobrgdgUsErRjM7ryA6MAC0MFmwl3SicNn1i1z3 JnO+h7htyBmSJub19w/sdvB+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlgWk04 gzH5bpp7onZzuHnshNqGMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABMHLk1cErvfc21a9WltnpR2D5SUXamwOQURV0WlMhZVte+Sq8RmyA 2AD83+DrQ0RYT1O6QwxR831bOHVKbD6WtJeEOY4OMh2NrwCrW3L9FhvjowhtQhbF +XLnxuN05ZdXnSaxM6uXexhl3Xjl7O4Y7hCq+kSuWcK/VwygW5BSJLjtuF+4HfQR bNQUf/FNFBvvWKgIz7/k91XAtvIO0a53uBz7MsZ/pLhTLBU54ZZS0GJuA3MnN9Th 6voAn2/MhYaxlUrwm/LXD8e4W9WQZ5mV0SbdJClUGckUTxvy66Y0Zy+h6rJXvtmw mQIuVslRJo2XS0RjFErJQzK9RrO9uHuJ -----END CERTIFICATE-----Generated at Wed Jul 2 22:35:52 2025 by rpki-client