$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: YxjpQJHANs9B4gEYm1aes9g3+6/qSnZ92dJEWY0tBhI= Subject key identifier: 4C:C5:22:21:3E:CE:93:21:23:80:2A:20:91:CA:7C:F9:6E:00:B4:75 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: 87 Signing time: Thu 03 Jul 2025 06:45:51 +0000 Manifest this update: Thu 03 Jul 2025 06:45:51 +0000 Manifest next update: Thu 10 Jul 2025 06:45:51 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: aRkPxf4cKJXHhmM5CXeUGjAuSpN5+R7Kvkym5ppK1bU=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Jul 3 06:45:51 2025 GMT Not After : Jul 10 06:45:51 2025 GMT Subject: CN=6866271f-6151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:dc:61:53:81:8c:ca:7c:f9:b1:81:22:b3: 91:39:22:fd:b4:99:9e:f2:a8:c6:96:9b:31:17:ba: 38:9e:31:24:80:ef:25:6b:d2:6e:8b:6e:75:ba:ac: f7:ed:01:1f:06:3a:8b:d3:08:15:01:b7:7a:e8:d8: 43:e1:cf:91:43:fc:d3:20:24:4a:27:11:b2:a9:5a: 90:ad:9a:30:8c:4a:47:a4:d5:57:76:09:70:19:47: 4c:ee:69:e3:13:1d:43:a7:8d:53:1a:71:04:88:94: 4c:35:fb:1b:af:aa:d9:8d:07:71:ba:09:29:16:af: b1:18:a6:f3:98:b7:23:a6:fb:c3:82:ac:e1:7a:fa: 0d:26:4e:59:7d:7a:09:06:de:a9:88:70:06:b5:30: 6b:05:4d:93:4d:2f:32:df:df:7e:58:04:73:42:17: 1d:71:5b:a8:9d:41:74:47:03:1c:3a:dc:da:af:04: 00:6f:8c:69:c8:e9:9b:02:8e:cd:c6:05:7b:0d:09: f2:ed:3f:78:37:3d:90:15:30:dc:2a:10:8c:3a:4d: d6:30:21:35:a7:e1:91:1d:a0:35:cd:fb:fa:80:40: 3e:15:06:64:98:99:16:10:25:57:05:1e:f4:8e:52: 82:e5:77:c8:b0:4e:e8:33:da:61:43:0b:82:4c:7d: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C5:22:21:3E:CE:93:21:23:80:2A:20:91:CA:7C:F9:6E:00:B4:75 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:75:1d:db:9d:aa:00:ff:03:a4:88:ab:d7:49:b9:b4:25:48: c7:17:96:e5:83:60:8e:ab:e5:fc:06:b2:5d:85:ad:43:39:9d: 82:b0:a3:57:b8:45:2e:d7:d2:c9:42:b8:3e:35:6e:7a:3f:c4: c7:b9:77:56:3b:04:8c:ad:44:fc:19:3f:66:1e:d7:83:1e:00: 87:44:aa:87:1f:1b:fc:f9:3f:af:b2:16:64:8f:92:a5:c0:1d: ed:8e:48:1c:dd:b3:90:2e:81:68:22:34:4b:7d:e4:63:8d:00: 1f:4a:a2:9f:8b:26:85:de:b3:84:d3:cb:c2:af:b3:57:49:7f: 1f:40:10:d3:3f:2f:c5:43:e1:d5:46:e7:7c:61:c3:cb:a4:67: 4b:61:83:5d:18:dc:70:54:08:80:56:34:19:c1:d8:30:c0:79: 2c:c0:2e:44:1a:59:aa:55:cd:f5:41:94:63:e2:24:ab:5d:8c: 84:79:29:a2:e7:ac:08:cc:f3:dc:c3:2d:a7:b5:46:0d:5f:86: 5c:5e:e7:75:95:99:59:49:0f:f5:83:cf:7a:d5:27:96:2f:16: 22:3e:59:18:5f:9c:e4:23:bd:36:26:e4:05:96:37:5f:d5:dc: 4f:30:ee:93:ed:3a:13:3a:ab:aa:b7:50:3a:81:ba:4e:33:d1: dc:45:ee:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDQwRERFRUYwMThFQURDREU0RDFCRjc4RDE1NDg1MUY4 RDhCQzI2QTUwHhcNMjUwNzAzMDY0NTUxWhcNMjUwNzEwMDY0NTUxWjAYMRYwFAYD VQQDEw02ODY2MjcxZi02MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLrcYVOBjMp8+bGBIrOROSL9tJme8qjGlpsxF7o4njEkgO8la9Jui251uqz3 7QEfBjqL0wgVAbd66NhD4c+RQ/zTICRKJxGyqVqQrZowjEpHpNVXdglwGUdM7mnj Ex1Dp41TGnEEiJRMNfsbr6rZjQdxugkpFq+xGKbzmLcjpvvDgqzhevoNJk5ZfXoJ Bt6piHAGtTBrBU2TTS8y399+WARzQhcdcVuonUF0RwMcOtzarwQAb4xpyOmbAo7N xgV7DQny7T94Nz2QFTDcKhCMOk3WMCE1p+GRHaA1zfv6gEA+FQZkmJkWECVXBR70 jlKC5XfIsE7oM9phQwuCTH0JbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzFIiE+ zpMhI4AqIJHKfPluALR1MB8GA1UdIwQYMBaAFEDd7vAY6tzeTRv3jRVIUfjYvCal MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GMEI2NkNGODhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNONU5HX2VORlVoUi1OaThK cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GMEI2NkNGODhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNO NU5HX2VORlVoUi1OaThKcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdR3bnaoA/wOkiKvXSbm0JUjHF5blg2COq+X8BrJdha1DOZ2CsKNX uEUu19LJQrg+NW56P8THuXdWOwSMrUT8GT9mHteDHgCHRKqHHxv8+T+vshZkj5Kl wB3tjkgc3bOQLoFoIjRLfeRjjQAfSqKfiyaF3rOE08vCr7NXSX8fQBDTPy/FQ+HV Rud8YcPLpGdLYYNdGNxwVAiAVjQZwdgwwHkswC5EGlmqVc31QZRj4iSrXYyEeSmi 56wIzPPcwy2ntUYNX4ZcXud1lZlZSQ/1g8961SeWLxYiPlkYX5zkI702JuQFljdf 1dxPMO6T7ToTOquqt1A6gbpOM9HcRe7I -----END CERTIFICATE-----Generated at Thu Jul 3 20:37:24 2025 by rpki-client