$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: JrkyRdPRTKo7LVMfoaNwT6Fg5CR5Vdj+sqhlJE4OlOg= Subject key identifier: 1F:F7:E5:C4:D5:1D:DE:53:2E:D4:65:2B:84:9F:9F:F4:9B:B2:56:1F Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: 97 Signing time: Thu 03 Jul 2025 06:36:07 +0000 Manifest this update: Thu 03 Jul 2025 06:36:06 +0000 Manifest next update: Thu 10 Jul 2025 06:36:06 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: eEuE0S4Ic1GMK0lIwSMdMJHUKa2k/1b1qdoi7vqFOGY=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Jul 3 06:36:06 2025 GMT Not After : Jul 10 06:36:06 2025 GMT Subject: CN=686624d6-e152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:ce:d8:98:c6:be:1c:27:d1:99:8b:61:37: 3d:71:7f:57:d1:cf:f0:64:65:0d:dd:c5:0d:e8:4c: 89:6e:35:e3:78:ad:e6:b6:34:6b:a4:df:d3:9d:22: 7d:7f:2f:1e:ea:0f:a5:72:18:1f:34:13:a4:2d:f7: c6:40:af:5a:e6:bd:da:7d:c6:92:e0:6e:c2:26:9c: 26:f8:99:25:21:e9:a1:5f:55:de:ff:61:8e:fa:24: fb:98:7c:c6:cd:ce:9d:7c:2c:6e:d0:30:47:df:bf: 65:fd:2c:cd:51:dc:81:6e:37:1b:ca:41:a3:a8:66: 2c:05:c1:3b:02:c8:61:e2:20:bc:c5:25:2a:2b:0c: 14:6f:3c:58:8a:3e:74:c5:45:bb:ec:f6:dc:b2:3b: 1c:a0:52:20:46:44:30:5a:96:02:b7:2b:23:9f:25: bc:50:8b:61:bc:33:60:f2:90:76:b6:8f:9c:41:9e: af:16:e7:d9:bc:e4:ad:04:17:6c:ff:50:cd:8b:72: 89:21:08:0a:41:40:79:75:67:9d:c8:1e:ac:88:c6: 12:99:2a:ad:14:90:02:51:e2:60:7b:13:3e:d9:6b: 34:ec:78:82:ef:4d:38:ea:92:6e:49:57:53:51:07: 7c:60:78:42:65:39:c2:db:9f:b3:7d:99:43:ea:fe: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F7:E5:C4:D5:1D:DE:53:2E:D4:65:2B:84:9F:9F:F4:9B:B2:56:1F X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6e:cc:f1:a1:3c:81:74:f7:ea:b3:98:88:77:a3:a8:22:c2: ad:49:17:8a:5a:03:18:74:a8:b5:15:76:20:24:1d:c2:e9:08: f0:cf:a8:94:b0:c5:f1:86:0c:ee:5e:6d:8c:75:74:8b:1f:84: 8b:96:ef:ca:0e:25:42:d3:6a:05:76:96:84:17:31:51:66:ae: b1:06:4a:2e:03:07:c8:16:3d:93:80:06:5f:64:01:70:08:7f: f3:e1:83:9b:5c:71:1c:16:1c:fd:57:f2:22:75:d6:5b:7e:12: 0a:f5:52:ec:7d:7d:ab:13:ae:fc:08:7a:5a:fc:a9:69:e7:50: 7c:01:f8:5e:16:74:91:3f:c8:c5:ca:9a:e1:e0:93:c4:a6:4d: 8b:53:4d:d5:a1:1b:56:b1:37:56:e1:aa:9a:cb:ff:a1:47:48: 04:e6:ae:72:24:cc:2e:34:0b:f1:18:63:ff:ec:9f:ed:ba:cd: c7:43:6d:43:72:81:76:3e:ee:02:c4:b4:2a:7e:d7:9c:6e:f5: 8a:56:46:09:34:63:10:85:83:34:38:f9:c9:e1:f6:e2:45:dc: f0:ac:c3:b0:56:3e:54:f6:c2:bb:3c:ed:a8:da:a6:d9:b9:05: 61:ec:92:5d:ad:64:cf:09:70:dc:bc:9d:c5:3a:64:d5:ec:ac: d4:ea:56:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUwNzAzMDYzNjA2WhcNMjUwNzEwMDYzNjA2WjAYMRYwFAYD VQQDEw02ODY2MjRkNi1lMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKPO2JjGvhwn0ZmLYTc9cX9X0c/wZGUN3cUN6EyJbjXjeK3mtjRrpN/TnSJ9 fy8e6g+lchgfNBOkLffGQK9a5r3afcaS4G7CJpwm+JklIemhX1Xe/2GO+iT7mHzG zc6dfCxu0DBH379l/SzNUdyBbjcbykGjqGYsBcE7Ashh4iC8xSUqKwwUbzxYij50 xUW77PbcsjscoFIgRkQwWpYCtysjnyW8UIthvDNg8pB2to+cQZ6vFufZvOStBBds /1DNi3KJIQgKQUB5dWedyB6siMYSmSqtFJACUeJgexM+2Ws07HiC70046pJuSVdT UQd8YHhCZTnC25+zfZlD6v4JSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/35cTV Hd5TLtRlK4Sfn/SbslYfMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5bszxoTyBdPfqs5iId6OoIsKtSReKWgMYdKi1FXYgJB3C6Qjwz6iU sMXxhgzuXm2MdXSLH4SLlu/KDiVC02oFdpaEFzFRZq6xBkouAwfIFj2TgAZfZAFw CH/z4YObXHEcFhz9V/IiddZbfhIK9VLsfX2rE678CHpa/Klp51B8AfheFnSRP8jF yprh4JPEpk2LU03VoRtWsTdW4aqay/+hR0gE5q5yJMwuNAvxGGP/7J/tus3HQ21D coF2Pu4CxLQqftecbvWKVkYJNGMQhYM0OPnJ4fbiRdzwrMOwVj5U9sK7PO2o2qbZ uQVh7JJdrWTPCXDcvJ3FOmTV7KzU6lab -----END CERTIFICATE-----Generated at Fri Jul 4 18:52:07 2025 by rpki-client