$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: C3ZDYl9zgwvrx1eBSWQClIfOScpSb08wcgdQ0ZVSfnI= Subject key identifier: 9B:31:70:1B:B5:C4:6D:3C:65:3D:AB:8B:AB:06:4B:C1:53:5D:5A:1B Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 05C8 Signing time: Wed 02 Jul 2025 23:23:15 +0000 Manifest this update: Wed 02 Jul 2025 23:23:14 +0000 Manifest next update: Wed 09 Jul 2025 23:23:14 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: ij7COEvSMBf0m++mryQgByin8OlWhkFJPEeE3Utojac=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: g89YmoUlNGoW7vM9eZWI3Zges2WlbrLyhloBI6u/31Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Jul 2 23:23:14 2025 GMT Not After : Jul 9 23:23:14 2025 GMT Subject: CN=6865bf63-219a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:e7:7f:c7:81:50:28:91:2d:5f:19:ce:b2: 39:81:3f:45:e0:97:76:39:64:de:d1:81:35:d4:4a: af:7c:45:52:e6:a8:6e:d0:e6:b5:50:f6:66:31:f2: 00:b7:00:93:22:8b:05:88:62:44:a7:d8:a5:74:84: 8e:d4:cd:41:54:88:56:dd:f6:3a:35:b7:8c:3f:ea: ab:2d:84:8b:63:67:ec:8e:eb:1d:9a:79:d3:47:ca: 0f:92:95:17:9c:68:ff:01:26:88:aa:fa:54:76:ac: 8f:85:07:3b:70:48:87:88:94:a0:08:09:62:9e:20: ad:1a:2f:fd:d4:9e:98:f5:9f:78:97:7d:97:b5:9a: 9a:3a:00:8d:29:12:e6:11:c1:dd:70:92:c8:ae:97: 51:64:11:f8:68:c7:ad:51:b5:4d:70:28:1f:5c:52: e5:ae:72:82:e5:d9:7c:7a:1e:a2:3a:57:2e:e1:1d: 02:c5:c9:d7:55:07:c3:57:a3:34:38:84:6e:6e:f6: b3:5d:23:d2:02:27:6b:57:ac:50:d5:d8:d3:43:85: 8e:38:c4:ce:37:dd:b6:23:4a:a8:db:94:69:83:8e: 07:b6:1c:a1:57:11:03:ca:61:d3:22:f4:e3:c1:d8: fc:a9:80:75:ef:e0:b5:e2:0b:44:dd:ca:56:d6:5d: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:31:70:1B:B5:C4:6D:3C:65:3D:AB:8B:AB:06:4B:C1:53:5D:5A:1B X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:18:78:ee:4c:fc:76:22:7c:b7:84:49:4d:21:8d:80:eb:87: 39:da:e9:b7:d2:a6:e3:eb:a2:5b:54:73:ff:25:3f:eb:3c:a7: 97:d1:19:69:d1:40:1f:46:8c:c1:92:65:58:c2:7a:89:e3:e3: cb:87:ea:90:60:e1:0c:2c:3b:a9:1d:35:dc:01:85:f3:66:a7: e3:17:eb:ac:2b:cf:50:64:7f:49:ac:37:a5:d8:5c:b8:05:ee: c1:60:78:ac:c2:4d:cb:66:52:11:da:2b:83:5a:4f:df:2b:ab: 0f:2d:e0:5f:39:21:3d:a8:54:f9:46:d1:03:a3:67:f5:3a:8a: bb:ef:86:d2:67:96:57:f6:a8:78:52:5d:00:2e:44:c7:00:7b: 6c:20:31:d2:d3:0b:79:49:bc:5c:68:b9:c1:2b:f4:be:94:78: a3:95:8b:3d:60:14:a9:e5:94:34:51:ee:9f:c7:ea:eb:31:ee: e0:0d:91:d7:7e:e5:f1:61:74:f9:3c:c8:b9:95:9a:e1:05:cd: 98:2d:60:fb:95:7b:36:a1:d4:f7:3f:f9:c1:c0:b9:54:89:68: b2:94:1e:e7:cf:84:c1:ea:0b:1f:30:b5:d8:aa:6b:14:e7:ae: 64:a8:5c:78:e4:c0:6c:be:4e:b8:67:22:e2:d1:fc:54:c5:f3: ae:c4:ee:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUwNzAyMjMyMzE0WhcNMjUwNzA5MjMyMzE0WjAYMRYwFAYD VQQDEw02ODY1YmY2My0yMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWvnf8eBUCiRLV8ZzrI5gT9F4Jd2OWTe0YE11EqvfEVS5qhu0Oa1UPZmMfIA twCTIosFiGJEp9ildISO1M1BVIhW3fY6NbeMP+qrLYSLY2fsjusdmnnTR8oPkpUX nGj/ASaIqvpUdqyPhQc7cEiHiJSgCAliniCtGi/91J6Y9Z94l32XtZqaOgCNKRLm EcHdcJLIrpdRZBH4aMetUbVNcCgfXFLlrnKC5dl8eh6iOlcu4R0CxcnXVQfDV6M0 OIRubvazXSPSAidrV6xQ1djTQ4WOOMTON922I0qo25Rpg44HthyhVxEDymHTIvTj wdj8qYB17+C14gtE3cpW1l0WrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsxcBu1 xG08ZT2ri6sGS8FTXVobMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABGHjuTPx2Iny3hElNIY2A64c52um30qbj66JbVHP/JT/rPKeX0Rlp 0UAfRozBkmVYwnqJ4+PLh+qQYOEMLDupHTXcAYXzZqfjF+usK89QZH9JrDel2Fy4 Be7BYHiswk3LZlIR2iuDWk/fK6sPLeBfOSE9qFT5RtEDo2f1Ooq774bSZ5ZX9qh4 Ul0ALkTHAHtsIDHS0wt5SbxcaLnBK/S+lHijlYs9YBSp5ZQ0Ue6fx+rrMe7gDZHX fuXxYXT5PMi5lZrhBc2YLWD7lXs2odT3P/nBwLlUiWiylB7nz4TB6gsfMLXYqmsU 565kqFx45MBsvk64ZyLi0fxUxfOuxO5I -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:21 2025 by rpki-client