$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: ixXf89sTcxS64Wxs8yuK6ITceyUm38TTbSwmUTg+mH8= Subject key identifier: 00:D5:68:A9:9C:42:C1:A0:34:AA:EE:A7:3A:4E:9E:64:7C:8A:A7:64 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: 73 Signing time: Thu 03 Jul 2025 03:58:47 +0000 Manifest this update: Thu 03 Jul 2025 03:58:46 +0000 Manifest next update: Thu 10 Jul 2025 03:58:46 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: 8Is0luRWwB3CY28caxOM6JqTWJaJ28GxCFkpnkx0Tqw=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mN3+2+qtTy+oq/2mSPD3LwNlHAef4eKWai8tbwHg/2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Jul 3 03:58:46 2025 GMT Not After : Jul 10 03:58:46 2025 GMT Subject: CN=6865fff7-48e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:32:4f:6c:34:3a:79:36:b0:ba:52:cc:0e: ba:73:98:01:e0:fc:53:3f:0c:90:ca:e1:58:d3:9f: 33:66:86:ec:db:24:f8:c3:13:28:14:33:01:0f:28: 0b:aa:bf:76:19:28:c1:16:ff:be:e0:1b:65:87:d1: 3b:a5:8c:e8:db:4b:0c:ee:85:85:b3:4f:43:56:7e: d5:8d:5f:93:7b:c8:fe:2c:bd:a3:d0:de:a1:74:35: 73:01:dd:5d:cf:8b:92:5e:4d:c7:6f:48:7b:e3:51: 19:6c:01:9d:91:6f:de:cc:9f:3f:9a:93:c7:c7:c5: 45:e4:34:18:8a:8f:b4:b9:50:db:af:d1:c0:74:e3: d5:36:f6:2f:a4:ad:70:d3:cb:3c:a3:da:bd:bd:7e: f6:c3:e4:03:5b:72:32:30:05:8a:1d:aa:d2:89:dd: 8a:26:b6:03:6f:56:73:fe:35:1a:8d:b2:a7:80:92: 6a:f1:95:10:f4:b7:8e:bb:a3:64:ff:26:10:c1:62: 3c:c3:a8:2d:5c:59:38:52:86:89:75:cb:c0:f2:93: d1:27:6b:76:95:3e:b6:57:fc:ac:1b:3b:ad:c4:84: 1c:71:18:b7:83:33:88:7d:38:e1:a8:1a:9d:56:2a: 0b:4c:96:8c:d3:ef:40:11:71:3b:a0:2c:d3:c4:f7: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D5:68:A9:9C:42:C1:A0:34:AA:EE:A7:3A:4E:9E:64:7C:8A:A7:64 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:78:99:39:01:30:64:95:56:5d:61:5b:3e:6b:0f:b8:c2:ae: 03:dd:a7:5f:ff:67:f7:13:a6:ff:37:7d:c0:b2:84:12:0a:02: 54:de:f1:e8:3b:ef:bb:70:27:74:6a:ec:f7:87:3f:2d:35:c9: 84:bb:52:43:4a:ac:00:3b:80:ef:d3:f8:1c:3d:1a:0b:ae:a2: c1:25:97:ec:6c:ce:c5:2b:d5:c4:e3:cd:81:93:02:67:cd:f1: f5:3e:f5:6a:96:6f:88:2a:bd:99:87:08:d5:bc:5f:cc:b1:97: 21:42:1c:42:c8:3d:c0:0f:82:43:c7:f9:c7:b2:bb:d6:a8:3d: 26:59:bd:7b:7a:3e:b4:2e:e5:89:58:95:71:d4:3c:a1:cf:f1: fc:01:ac:57:f4:c3:39:1a:61:6f:d7:e3:4b:eb:6d:f3:04:6d: fd:01:57:93:13:7b:ab:3a:0c:1f:4a:9b:f6:5f:09:df:0e:9a: 8e:3b:3e:d8:87:28:20:c4:f4:78:e2:4d:3f:65:d2:b6:48:10: 10:62:b8:4f:09:99:d2:d2:10:ac:19:ef:81:9a:54:0f:ce:c5: 08:05:96:2c:2e:b0:d7:b1:53:07:8e:f8:45:be:c9:5f:c8:00: 9c:9a:33:cb:43:c8:f9:a4:4b:e6:a8:19:6f:07:2a:2a:29:6d: b4:51:af:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjQ1RjExMC8GA1UEBRMoNDExNTIyMzQ2MEEzRERGQUM4M0E4MkZDNjFCMkJFOUVD NjI2QzIwQzAeFw0yNTA3MDMwMzU4NDZaFw0yNTA3MTAwMzU4NDZaMBgxFjAUBgNV BAMTDTY4NjVmZmY3LTQ4ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDduzJPbDQ6eTawulLMDrpzmAHg/FM/DJDK4VjTnzNmhuzbJPjDEygUMwEPKAuq v3YZKMEW/77gG2WH0TuljOjbSwzuhYWzT0NWftWNX5N7yP4svaPQ3qF0NXMB3V3P i5JeTcdvSHvjURlsAZ2Rb97Mnz+ak8fHxUXkNBiKj7S5UNuv0cB049U29i+krXDT yzyj2r29fvbD5ANbcjIwBYodqtKJ3YomtgNvVnP+NRqNsqeAkmrxlRD0t467o2T/ JhDBYjzDqC1cWThShol1y8Dyk9Ena3aVPrZX/KwbO63EhBxxGLeDM4h9OOGoGp1W KgtMlozT70ARcTugLNPE9y7BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUANVoqZxC waA0qu6nOk6eZHyKp2QwHwYDVR0jBBgwFoAUQRUiNGCj3frIOoL8YbK+nsYmwgww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDVGLzhDQTIwQTFDQUFE MjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdn dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVJVaU5HQ2ozZnJJT29MOFliSy1uc1ltd2d3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC NDVGLzhDQTIwQTFDQUFEMjExRUY5QUEwRUY4MEM0RjlBRTAyL1FSVWlOR0NqM2Zy SU9vTDhZYkstbnNZbXdndy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKR4mTkBMGSVVl1hWz5rD7jCrgPdp1//Z/cTpv83fcCyhBIKAlTe8eg7 77twJ3Rq7PeHPy01yYS7UkNKrAA7gO/T+Bw9GguuosEll+xszsUr1cTjzYGTAmfN 8fU+9WqWb4gqvZmHCNW8X8yxlyFCHELIPcAPgkPH+ceyu9aoPSZZvXt6PrQu5YlY lXHUPKHP8fwBrFf0wzkaYW/X40vrbfMEbf0BV5MTe6s6DB9Km/ZfCd8Omo47PtiH KCDE9HjiTT9l0rZIEBBiuE8JmdLSEKwZ74GaVA/OxQgFliwusNexUweO+EW+yV/I AJyaM8tDyPmkS+aoGW8HKiopbbRRr7g= -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:16 2025 by rpki-client