$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json) Hash identifier: q7jKtVp0C7qgJpzNanqmUA+rEKcIvD3tVj6jncADT0s= Subject key identifier: 4E:5A:6C:57:B8:7F:CA:5F:AF:E2:40:2C:48:61:34:1A:2B:80:8F:E9 Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Certificate serial: 0929 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft Manifest number: 0922 Signing time: Wed 02 Jul 2025 20:30:50 +0000 Manifest this update: Wed 02 Jul 2025 20:30:49 +0000 Manifest next update: Wed 09 Jul 2025 20:30:49 +0000 Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: KfnJiqo+xU9FYmt16vUcCK9Ip5r1ucfTmEYyrGTIsS4=) 2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE Validity Not Before: Jul 2 20:30:49 2025 GMT Not After : Jul 9 20:30:49 2025 GMT Subject: CN=686596f9-ed85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:ce:a3:f5:29:c1:97:e3:93:04:8b:19:9c: 74:d7:da:c3:30:9b:86:4b:02:34:c0:82:0c:3d:3a: 55:59:22:be:87:1d:4e:ea:d0:ea:d0:02:ec:fb:f6: 9b:ff:fe:79:7a:95:33:16:78:86:25:4c:92:46:f5: b1:51:de:65:74:a6:74:15:12:6c:ff:a8:1e:7c:69: c4:a4:c9:5b:4a:ef:c1:a0:68:b8:3f:54:d2:ca:c6: 25:43:71:3e:10:e6:f0:b6:de:6f:1d:ef:e8:08:9b: 45:b8:1c:bc:8a:90:5a:f5:9f:04:64:16:41:d9:f7: 4e:f9:29:b4:4a:a2:6c:c8:a6:d3:6a:21:fa:d0:2d: 65:94:61:ad:2e:04:e9:7c:e4:fb:8a:5e:ab:9e:6b: f7:11:fa:7c:6d:dc:b4:97:08:e1:81:45:33:1d:a6: 00:7f:3f:40:3a:58:c4:1b:b8:e8:ed:38:11:0f:a6: 0b:a5:d6:15:43:f1:69:98:2d:a1:ec:bc:5b:c0:17: 17:05:d4:6a:de:8b:2a:17:05:55:60:f3:61:23:79: 26:13:0d:0a:82:fd:94:d9:4f:1c:d7:8e:29:9d:56: 72:a0:ce:41:8e:91:0b:8b:bc:10:11:71:e9:50:3f: e9:5c:36:c7:e9:4d:ab:c8:c5:9c:a2:f9:78:60:09: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5A:6C:57:B8:7F:CA:5F:AF:E2:40:2C:48:61:34:1A:2B:80:8F:E9 X509v3 Authority Key Identifier: keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4b:8f:85:f8:2a:9b:a4:42:f7:04:a1:e6:09:6a:65:27:e7: 4b:46:58:e2:ab:e7:a5:a1:80:41:16:43:91:7a:5c:e8:82:5c: be:83:0d:93:32:86:46:71:f9:43:1d:1a:af:6a:2e:fb:f6:e5: 54:f5:de:51:be:bc:65:95:64:5d:09:e8:e1:0e:14:18:d8:0e: 92:01:b3:4a:e0:66:da:1e:74:83:27:90:b5:90:c0:c3:83:5b: bb:84:2f:72:7e:9b:2f:35:f8:df:d7:82:15:24:c5:8b:97:31: b0:c8:fd:a2:63:30:cc:74:1c:60:29:01:7f:bc:ee:a9:d3:26: 6b:ee:f1:78:cc:60:d2:33:cd:2c:3c:19:fc:1e:b7:a5:14:c1: 88:9a:52:42:34:16:86:71:16:2e:15:1f:40:a1:d1:02:9d:17: e4:45:58:bb:cc:f2:ff:d8:b9:79:45:d3:13:96:22:29:b1:2e: 52:8a:c7:b1:c0:1e:6d:5e:f6:f1:27:79:02:40:88:ac:81:21: d9:54:3c:6e:ec:09:44:12:3c:39:e0:e9:8d:cc:f3:30:cf:67: 3e:f3:14:5c:30:27:e9:c5:98:95:0f:76:b3:a8:d5:43:6c:76: 4e:12:b3:9a:ad:d3:f6:a2:cc:40:ef:a7:aa:a3:03:78:da:8d: 8e:bc:22:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD N0ZFNjg4Q0UwHhcNMjUwNzAyMjAzMDQ5WhcNMjUwNzA5MjAzMDQ5WjAYMRYwFAYD VQQDEw02ODY1OTZmOS1lZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFPOo/UpwZfjkwSLGZx019rDMJuGSwI0wIIMPTpVWSK+hx1O6tDq0ALs+/ab //55epUzFniGJUySRvWxUd5ldKZ0FRJs/6gefGnEpMlbSu/BoGi4P1TSysYlQ3E+ EObwtt5vHe/oCJtFuBy8ipBa9Z8EZBZB2fdO+Sm0SqJsyKbTaiH60C1llGGtLgTp fOT7il6rnmv3Efp8bdy0lwjhgUUzHaYAfz9AOljEG7jo7TgRD6YLpdYVQ/FpmC2h 7LxbwBcXBdRq3osqFwVVYPNhI3kmEw0Kgv2U2U8c144pnVZyoM5BjpELi7wQEXHp UD/pXDbH6U2ryMWcovl4YAlUDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5abFe4 f8pfr+JALEhhNBorgI/pMB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0 MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjS4+F+CqbpEL3BKHmCWplJ+dLRljiq+eloYBBFkORelzogly+gw2T MoZGcflDHRqvai779uVU9d5RvrxllWRdCejhDhQY2A6SAbNK4GbaHnSDJ5C1kMDD g1u7hC9yfpsvNfjf14IVJMWLlzGwyP2iYzDMdBxgKQF/vO6p0yZr7vF4zGDSM80s PBn8HrelFMGImlJCNBaGcRYuFR9AodECnRfkRVi7zPL/2Ll5RdMTliIpsS5Sisex wB5tXvbxJ3kCQIisgSHZVDxu7AlEEjw54OmNzPMwz2c+8xRcMCfpxZiVD3azqNVD bHZOErOardP2osxA76eqowN42o2OvCJY -----END CERTIFICATE-----Generated at Fri Jul 4 18:22:54 2025 by rpki-client