$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: EsxkasO3vXTBz3s8Z0fRBhZk2tdDgQU9NGoR5A31Ve0= Subject key identifier: A0:B9:FE:2A:12:17:B3:21:24:3C:FA:C7:3C:8D:50:08:0F:25:B9:17 Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 071A Signing time: Mon 30 Jun 2025 22:12:40 +0000 Manifest this update: Mon 30 Jun 2025 22:12:39 +0000 Manifest next update: Mon 07 Jul 2025 22:12:39 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: JDELoKVY/pRCxiw12OJTyS+5mHB0yI3VAezK+EAuOBU=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Jun 30 22:12:39 2025 GMT Not After : Jul 7 22:12:39 2025 GMT Subject: CN=68630bd7-ab9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:7b:e5:8a:2f:85:49:df:4a:e3:ba:9a:11: ce:f2:ba:ee:12:98:2c:0e:da:b9:49:b4:70:37:59: 20:9e:c1:f3:7d:a0:9e:9c:21:50:55:8f:e0:08:f6: ce:e4:e4:9d:e3:bf:40:60:c2:c5:db:17:5f:71:5e: 2c:4e:5f:16:ed:e2:93:0d:96:d5:c9:82:8d:c7:e8: 7b:38:62:91:8b:d0:df:b0:bc:03:d7:36:7c:01:22: 14:74:2b:82:05:c3:54:d3:05:83:db:e5:b3:d1:40: 29:d0:2a:c2:fd:72:9a:3f:96:4c:18:9c:82:0d:9e: c7:05:bd:b1:dd:07:57:76:d3:77:7b:6f:d2:2a:3e: 46:2e:17:b7:46:52:82:7c:da:ff:08:c3:49:c5:3b: 83:06:f6:f2:91:4f:bc:18:f0:b3:5d:58:be:a3:13: c2:0d:dc:c6:d1:c4:aa:4f:ac:e8:6d:c0:3a:93:ad: 61:90:32:3f:fd:e4:33:83:19:fc:79:12:17:71:7b: 2c:ff:d7:ba:76:eb:0d:84:35:a3:71:27:9f:ad:dc: 80:d9:fd:8a:ae:2d:7e:7d:38:e7:0b:19:41:42:ad: 34:05:1c:a2:cb:5e:da:4d:d8:2e:74:31:3a:bd:55: 6a:7a:dc:88:ea:f7:52:63:f4:c7:dc:18:bd:64:6c: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:FE:2A:12:17:B3:21:24:3C:FA:C7:3C:8D:50:08:0F:25:B9:17 X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:06:fe:f5:c0:1e:0e:30:95:a1:9c:01:34:46:11:42:64:de: b1:46:a1:a3:60:8b:bb:21:49:b2:05:c7:a0:e8:52:d9:5f:b6: 88:f5:f4:b4:db:14:4d:4d:7c:d3:b2:1c:ff:c5:90:05:6a:0a: 26:32:bc:19:b6:86:8e:6c:0b:2f:91:f3:1d:50:db:ef:85:ed: e1:81:2c:43:a5:78:5f:f3:c3:ad:29:37:e5:fd:f0:44:bc:c0: 3f:90:ca:02:1b:92:7f:0e:39:12:98:e9:59:91:3d:2f:9c:94: 14:3b:6b:46:81:e6:6a:aa:79:ad:97:b1:db:1d:5f:27:33:ab: 29:31:3b:5e:19:ab:61:ec:15:80:a1:19:56:c9:aa:3c:ee:61: a5:27:f2:02:4c:20:1d:40:f1:8f:4c:79:86:bc:6e:4c:c0:d5: 84:77:a5:a4:03:fb:28:6f:14:65:7e:8f:3e:75:2e:c8:98:5e: ca:21:6c:64:c3:0d:7e:0d:9b:66:37:47:32:c3:97:20:49:75: 3f:5a:9e:d0:6a:ce:7b:c3:99:26:dc:e4:ec:8d:47:7a:4c:3b: 53:5c:b0:68:e0:66:83:4d:d9:2b:78:ae:5b:50:ba:5e:bd:59: f2:d0:00:b3:5c:51:48:94:19:aa:aa:bc:09:43:8c:e5:00:aa: 92:2d:98:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUwNjMwMjIxMjM5WhcNMjUwNzA3MjIxMjM5WjAYMRYwFAYD VQQDEw02ODYzMGJkNy1hYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5El75YovhUnfSuO6mhHO8rruEpgsDtq5SbRwN1kgnsHzfaCenCFQVY/gCPbO 5OSd479AYMLF2xdfcV4sTl8W7eKTDZbVyYKNx+h7OGKRi9DfsLwD1zZ8ASIUdCuC BcNU0wWD2+Wz0UAp0CrC/XKaP5ZMGJyCDZ7HBb2x3QdXdtN3e2/SKj5GLhe3RlKC fNr/CMNJxTuDBvbykU+8GPCzXVi+oxPCDdzG0cSqT6zobcA6k61hkDI//eQzgxn8 eRIXcXss/9e6dusNhDWjcSefrdyA2f2Kri1+fTjnCxlBQq00BRyiy17aTdgudDE6 vVVqetyI6vdSY/TH3Bi9ZGx9nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC5/ioS F7MhJDz6xzyNUAgPJbkXMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcBv71wB4OMJWhnAE0RhFCZN6xRqGjYIu7IUmyBceg6FLZX7aI9fS0 2xRNTXzTshz/xZAFagomMrwZtoaObAsvkfMdUNvvhe3hgSxDpXhf88OtKTfl/fBE vMA/kMoCG5J/DjkSmOlZkT0vnJQUO2tGgeZqqnmtl7HbHV8nM6spMTteGath7BWA oRlWyao87mGlJ/ICTCAdQPGPTHmGvG5MwNWEd6WkA/sobxRlfo8+dS7ImF7KIWxk ww1+DZtmN0cyw5cgSXU/Wp7Qas57w5km3OTsjUd6TDtTXLBo4GaDTdkreK5bULpe vVny0ACzXFFIlBmqqrwJQ4zlAKqSLZhX -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:14 2025 by rpki-client