$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: OLntny/SB2rx5bi/LHRL1UJVrCwx6P3YW17m4G1YrpU= Subject key identifier: 08:F0:E8:85:1D:F3:A3:E9:1C:84:12:F8:DA:E8:3B:54:B2:A1:8D:D2 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B12 Signing time: Wed 02 Jul 2025 19:31:07 +0000 Manifest this update: Wed 02 Jul 2025 19:31:06 +0000 Manifest next update: Wed 09 Jul 2025 19:31:06 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: PPfm8kUrvKjkapW96RQ5id3XFPreD5jwZl7cCPfm+zg=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: wBezilbHgFlLqA1qqUMQVDVzvkJDksyuC7XhtfdBEgk=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: kRXthgEAoGC/b23UrIEWTh9+gf3/yFfF1cVAtff2rTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Jul 2 19:31:06 2025 GMT Not After : Jul 9 19:31:06 2025 GMT Subject: CN=686588fa-888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:ab:b4:7a:a3:3b:7a:64:db:b6:b4:bd:6a: 42:63:46:5f:fd:28:9e:e5:cc:a2:70:4b:9a:63:2b: 34:61:06:78:b9:3b:75:67:b0:97:0d:1a:8e:37:a4: 17:09:64:ae:d6:d0:e9:80:4c:a5:4b:a1:9c:b3:47: e2:e9:23:1b:4c:42:bb:4a:80:67:a2:b2:6d:6e:c6: 3d:e6:9f:d6:43:bf:0c:9e:a1:a0:5f:3f:27:05:fb: 67:c6:77:10:f7:52:76:a2:bc:00:8e:64:32:0a:bf: 1d:8b:60:04:31:88:a4:2d:83:64:cb:00:2a:cb:cf: 0d:12:9d:11:11:4e:83:e5:ac:37:19:09:ed:1e:f5: 1a:75:56:29:09:c1:ff:6b:ad:50:03:16:b6:dd:a7: 26:b9:bc:a0:9a:b7:2b:ff:47:88:b1:ee:ae:e2:41: ff:84:0e:72:06:e3:fe:13:6f:f4:8f:d2:c6:6c:10: ff:0f:fc:25:bf:7e:ec:7f:2c:8c:33:a1:9e:f1:f6: 08:23:7b:42:cd:0e:90:47:91:7b:75:bc:80:5d:c2: 15:f2:3b:ed:03:b4:fb:26:93:b4:6f:91:ea:eb:a3: 07:d1:42:7f:29:fa:1a:5d:c3:a6:74:94:b3:e0:d3: 65:a0:b7:4d:d0:8c:e3:08:0b:b6:96:3e:41:75:a6: 4b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F0:E8:85:1D:F3:A3:E9:1C:84:12:F8:DA:E8:3B:54:B2:A1:8D:D2 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5d:3b:2c:da:50:f4:57:f9:1a:f1:77:91:46:1f:b3:b4:f9: f1:e9:d5:09:22:69:49:25:dc:1e:f7:c0:7a:03:5f:7d:6a:5c: 83:23:ff:a0:11:eb:4c:14:6c:2f:04:d3:6f:6d:63:7a:0b:46: 4e:a8:ed:dd:ff:55:e4:ab:bb:b5:3a:47:e9:96:bd:dd:cc:4e: 14:96:34:82:4a:26:1c:4b:2b:52:88:3d:e4:fd:b2:9a:03:83: 03:66:64:4d:47:ac:26:c6:62:1d:2e:24:0a:5a:f3:19:52:ef: 3f:87:b8:20:fa:6d:03:59:db:4a:0d:53:60:05:02:2e:2f:2c: 80:92:57:98:fa:30:31:cb:16:86:a4:f9:02:2f:4c:aa:d5:dc: 4a:3c:89:29:dd:ae:8f:25:b7:24:89:b8:d7:81:a2:c2:fb:56: 7a:47:d1:66:1e:47:55:06:e9:ea:a3:7f:c0:76:1f:25:00:dd: 29:de:c1:5f:18:c7:2f:f3:6f:bb:e2:5e:76:b6:0f:be:63:1f: c9:77:d3:60:46:77:ab:49:b0:e3:7c:ff:3f:27:46:41:04:ba: a5:b8:7b:f8:e2:ff:98:4b:2f:1c:de:19:ec:d3:4e:29:78:50: 64:39:cc:f8:a4:84:4f:83:c5:82:ae:de:c5:88:4d:2c:1a:e5: f5:d2:14:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUwNzAyMTkzMTA2WhcNMjUwNzA5MTkzMTA2WjAYMRYwFAYD VQQDEw02ODY1ODhmYS04ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3CrtHqjO3pk27a0vWpCY0Zf/Sie5cyicEuaYys0YQZ4uTt1Z7CXDRqON6QX CWSu1tDpgEylS6Gcs0fi6SMbTEK7SoBnorJtbsY95p/WQ78MnqGgXz8nBftnxncQ 91J2orwAjmQyCr8di2AEMYikLYNkywAqy88NEp0REU6D5aw3GQntHvUadVYpCcH/ a61QAxa23acmubygmrcr/0eIse6u4kH/hA5yBuP+E2/0j9LGbBD/D/wlv37sfyyM M6Ge8fYII3tCzQ6QR5F7dbyAXcIV8jvtA7T7JpO0b5Hq66MH0UJ/KfoaXcOmdJSz 4NNloLdN0IzjCAu2lj5BdaZL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjw6IUd 86PpHIQS+NroO1SyoY3SMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADXTss2lD0V/ka8XeRRh+ztPnx6dUJImlJJdwe98B6A199alyDI/+g EetMFGwvBNNvbWN6C0ZOqO3d/1Xkq7u1Okfplr3dzE4UljSCSiYcSytSiD3k/bKa A4MDZmRNR6wmxmIdLiQKWvMZUu8/h7gg+m0DWdtKDVNgBQIuLyyAkleY+jAxyxaG pPkCL0yq1dxKPIkp3a6PJbckibjXgaLC+1Z6R9FmHkdVBunqo3/Adh8lAN0p3sFf GMcv82+74l52tg++Yx/Jd9NgRnerSbDjfP8/J0ZBBLqluHv44v+YSy8c3hns004p eFBkOcz4pIRPg8WCrt7FiE0sGuX10hQx -----END CERTIFICATE-----Generated at Thu Jul 3 09:44:01 2025 by rpki-client