$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: dZUnKGloInDBxtsnji9F4AD6tkfFhbCmtiMZZKcAXpY= Subject key identifier: 64:F2:E6:90:9A:59:A5:75:8F:1A:F3:3E:0B:21:04:DF:2B:23:88:60 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11A6 Signing time: Mon 30 Jun 2025 17:23:20 +0000 Manifest this update: Mon 30 Jun 2025 17:23:19 +0000 Manifest next update: Mon 07 Jul 2025 17:23:19 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: xzFyECEbclOEbDfQsI8QYMzmkzpaQiHXwVrHrk53PX8=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: iW6YjMpstfMKbZY59Tg1WeEsakFUmD2BPmWINCFK44U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4525 (0x11ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Jun 30 17:23:19 2025 GMT Not After : Jul 7 17:23:19 2025 GMT Subject: CN=6862c808-f9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f5:c9:a8:5a:07:34:2c:57:d5:46:69:dd:c9: ab:6c:fc:64:56:8f:78:83:ab:5d:ab:61:61:c8:7a: 56:3f:7d:18:7a:e1:7d:b4:71:6d:39:64:85:98:9d: 89:48:48:2e:d7:aa:1a:ee:29:74:32:75:ba:7a:cb: 80:7c:d9:39:7a:91:8e:42:12:eb:57:2f:cf:a6:83: cd:1b:58:e0:4e:1c:8c:a8:65:7f:f4:64:6c:44:4a: d9:25:9d:ab:c1:c5:0d:cd:24:38:ce:11:cd:13:93: e0:5c:4d:99:e4:62:e1:89:f2:06:6e:58:4e:73:75: 26:cd:31:8e:9b:2c:ca:f1:6b:fe:97:62:29:b1:6f: bb:ed:07:04:64:b1:10:7b:8b:40:98:4e:9a:87:a2: 92:a9:90:4b:6e:a2:59:4b:0f:c1:da:b0:bd:b8:00: 46:34:09:74:13:d3:36:0a:c3:f4:fd:81:0f:53:6a: 42:44:17:29:14:f9:b5:a6:27:a4:5b:48:f7:00:42: e6:cd:1a:a5:28:f1:bb:ef:7d:83:a6:02:e8:16:3b: 56:08:a9:92:fa:6a:54:e8:f5:3d:81:aa:1c:2b:2a: 6c:c5:13:d2:f7:1a:84:fd:26:b0:15:c8:4c:79:10: da:eb:b6:59:eb:b3:58:f4:c1:87:29:81:47:c8:f8: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F2:E6:90:9A:59:A5:75:8F:1A:F3:3E:0B:21:04:DF:2B:23:88:60 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f6:66:34:28:de:0a:42:da:39:ad:d0:55:f6:d1:70:95:c8: 0a:a0:1f:5f:d1:fc:a8:36:3f:39:d1:95:2a:81:95:2e:0f:1b: 65:86:a3:3c:15:19:bb:1c:90:72:0e:84:05:5b:ab:52:b1:10: 8d:66:3c:66:29:37:6b:76:3e:95:54:c3:9e:4b:77:4b:e3:7c: 46:2d:e7:95:18:e6:b2:6b:2f:c6:9b:a9:78:80:c2:93:51:e0: 74:71:5a:43:6a:24:4d:78:c5:af:e5:31:0d:4f:4d:bc:66:4f: 3e:a9:97:10:99:6a:80:91:c8:19:13:2d:11:f1:29:85:4f:1c: 40:a9:61:ee:bf:37:8e:3c:be:fd:cd:79:57:45:d2:f0:50:d5: c6:5c:88:a8:9c:0c:ed:30:98:75:e7:30:5e:f9:9f:78:29:09: c9:ed:77:b3:19:2f:0d:b2:98:ec:4c:3a:1b:98:e1:2f:90:4c: f7:de:4a:82:79:dc:19:66:aa:15:cf:49:9d:43:43:e6:4e:e8: c5:12:04:75:44:0a:83:d3:72:70:42:47:e4:80:7a:c4:bf:ca: 4e:cf:b7:e7:14:b8:e9:3a:50:ca:17:75:bd:6d:45:c4:92:78: e4:fb:ea:8b:aa:4b:fb:bb:6a:86:3e:f8:f0:da:39:64:9c:b4: 65:bf:bd:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwNjMwMTcyMzE5WhcNMjUwNzA3MTcyMzE5WjAYMRYwFAYD VQQDEw02ODYyYzgwOC1mOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/XJqFoHNCxX1UZp3cmrbPxkVo94g6tdq2FhyHpWP30YeuF9tHFtOWSFmJ2J SEgu16oa7il0MnW6esuAfNk5epGOQhLrVy/PpoPNG1jgThyMqGV/9GRsRErZJZ2r wcUNzSQ4zhHNE5PgXE2Z5GLhifIGblhOc3UmzTGOmyzK8Wv+l2IpsW+77QcEZLEQ e4tAmE6ah6KSqZBLbqJZSw/B2rC9uABGNAl0E9M2CsP0/YEPU2pCRBcpFPm1piek W0j3AELmzRqlKPG7732DpgLoFjtWCKmS+mpU6PU9gaocKypsxRPS9xqE/SawFchM eRDa67ZZ67NY9MGHKYFHyPhACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTy5pCa WaV1jxrzPgshBN8rI4hgMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm9mY0KN4KQto5rdBV9tFwlcgKoB9f0fyoNj850ZUqgZUuDxtlhqM8 FRm7HJByDoQFW6tSsRCNZjxmKTdrdj6VVMOeS3dL43xGLeeVGOayay/Gm6l4gMKT UeB0cVpDaiRNeMWv5TENT028Zk8+qZcQmWqAkcgZEy0R8SmFTxxAqWHuvzeOPL79 zXlXRdLwUNXGXIionAztMJh15zBe+Z94KQnJ7XezGS8NspjsTDobmOEvkEz33kqC edwZZqoVz0mdQ0PmTujFEgR1RAqD03JwQkfkgHrEv8pOz7fnFLjpOlDKF3W9bUXE knjk++qLqkv7u2qGPvjw2jlknLRlv70o -----END CERTIFICATE-----Generated at Tue Jul 1 13:53:55 2025 by rpki-client