$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: X+onacbG5OO3R/sBgw9AEv1XE8jCKsovoN4RsX95OI8= Subject key identifier: 78:1A:DF:8C:6F:3C:E9:19:49:36:32:53:00:B7:2D:0E:EC:67:73:E0 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 0235 Signing time: Sat 05 Jul 2025 02:29:30 +0000 Manifest this update: Sat 05 Jul 2025 02:29:29 +0000 Manifest next update: Sat 12 Jul 2025 02:29:29 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: 51yc+99aiw+ZurCS8kQ+zPbQbelFRF0/xX4vwbjqcjg=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: ktK9vCE7vIpwa3GinrPFia6DHxl96KzteCFThN1eca8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Jul 5 02:29:29 2025 GMT Not After : Jul 12 02:29:29 2025 GMT Subject: CN=68688e0a-495f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e1:db:2b:ee:f4:44:a1:cb:2a:71:ac:42:11: 02:f9:b5:00:53:69:dd:64:6d:06:ff:bf:15:74:dc: e9:18:3a:83:7d:5f:84:cd:c8:e0:15:a9:d6:65:0e: 94:f7:55:02:c0:28:6c:80:b4:22:53:53:99:db:05: 85:a7:25:6d:b7:c8:4a:07:5b:21:cd:91:3f:b3:a8: de:5d:00:eb:13:64:ad:76:c1:3c:3d:05:95:e7:aa: d4:0e:21:1a:25:73:56:88:34:dc:23:c5:3e:f4:96: 0d:b8:1f:2b:18:05:49:fa:90:21:dc:fb:f6:69:c7: 93:a7:40:c6:cc:42:bd:bc:e2:78:a8:bd:34:eb:7f: 60:c8:5d:4e:d9:2a:4c:8e:3a:fd:13:9a:b0:b2:52: 44:23:e8:09:c7:e8:c4:5f:fb:8f:96:66:b7:44:f2: a3:6d:4d:46:bc:ea:6b:55:e1:aa:43:ab:6d:4a:39: 3d:9c:d5:64:67:70:6a:28:0f:9e:0a:27:d0:28:86: 5c:eb:54:ed:d0:e8:4a:22:5c:12:1c:31:db:43:a7: 51:96:37:01:01:c8:59:c5:7f:9d:d4:48:56:fe:39: 09:30:b8:de:da:58:99:10:58:41:fb:da:e9:37:8d: 09:0a:6f:7f:0f:7f:d2:8f:7b:d6:ec:4a:6d:5e:2b: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1A:DF:8C:6F:3C:E9:19:49:36:32:53:00:B7:2D:0E:EC:67:73:E0 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:86:d4:55:99:7b:56:32:95:1b:b7:57:46:ae:06:f4:df:e6: c2:b0:e1:97:a2:9e:85:5b:d5:9e:6f:0d:03:85:9c:b4:ef:a3: 4b:45:d2:67:24:77:ee:e1:ba:e3:6a:d4:f0:14:6f:c7:4a:d7: 73:a2:88:ea:e3:1b:03:97:4d:76:2f:77:c0:88:5b:8b:28:a3: ca:02:64:26:d0:34:b0:63:b7:80:14:07:7a:5e:e7:26:8c:7b: 0c:d2:9a:d3:39:04:bd:ae:47:88:5a:52:64:0d:97:8d:98:94: 40:6d:e5:d5:a2:42:f1:d6:99:94:d6:71:3f:f2:b0:31:81:b7: 74:64:1a:ef:15:d2:09:b8:68:66:d1:19:44:32:68:72:38:75: 30:e3:34:b4:ab:05:d5:d8:fd:fb:a0:75:e5:fb:36:f3:6f:fd: f8:03:d0:23:47:7b:81:59:15:08:15:e5:80:2e:9e:1e:6e:2d: bd:89:2f:60:55:86:3c:cf:d8:fe:53:7a:38:04:16:48:e2:9b: fb:36:66:9e:32:09:fa:26:e6:41:aa:41:ca:c6:22:cf:d4:9d: b7:78:38:e7:95:96:fc:fc:b4:cf:f7:9d:c4:ca:be:08:4e:e4: 8a:f4:cf:4a:cd:71:e9:6b:91:2a:84:b8:5a:92:a2:92:05:fb: ac:33:59:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUwNzA1MDIyOTI5WhcNMjUwNzEyMDIyOTI5WjAYMRYwFAYD VQQDEw02ODY4OGUwYS00OTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+HbK+70RKHLKnGsQhEC+bUAU2ndZG0G/78VdNzpGDqDfV+EzcjgFanWZQ6U 91UCwChsgLQiU1OZ2wWFpyVtt8hKB1shzZE/s6jeXQDrE2StdsE8PQWV56rUDiEa JXNWiDTcI8U+9JYNuB8rGAVJ+pAh3Pv2aceTp0DGzEK9vOJ4qL00639gyF1O2SpM jjr9E5qwslJEI+gJx+jEX/uPlma3RPKjbU1GvOprVeGqQ6ttSjk9nNVkZ3BqKA+e CifQKIZc61Tt0OhKIlwSHDHbQ6dRljcBAchZxX+d1EhW/jkJMLje2liZEFhB+9rp N40JCm9/D3/Sj3vW7EptXis8KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHga34xv POkZSTYyUwC3LQ7sZ3PgMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZhtRVmXtWMpUbt1dGrgb03+bCsOGXop6FW9Webw0DhZy076NLRdJn JHfu4brjatTwFG/HStdzoojq4xsDl012L3fAiFuLKKPKAmQm0DSwY7eAFAd6Xucm jHsM0prTOQS9rkeIWlJkDZeNmJRAbeXVokLx1pmU1nE/8rAxgbd0ZBrvFdIJuGhm 0RlEMmhyOHUw4zS0qwXV2P37oHXl+zbzb/34A9AjR3uBWRUIFeWALp4ebi29iS9g VYY8z9j+U3o4BBZI4pv7NmaeMgn6JuZBqkHKxiLP1J23eDjnlZb8/LTP953Eyr4I TuSK9M9KzXHpa5EqhLhakqKSBfusM1kd -----END CERTIFICATE-----Generated at Sat Jul 5 22:08:20 2025 by rpki-client