$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json) Hash identifier: A4lCAk8LCx6HCoOC0ZUdHAPm+baaXx52YDZoem8WWqo= Subject key identifier: F2:33:2E:FA:3A:53:7C:DF:ED:46:57:E9:9B:0D:C6:05:ED:B0:DC:7F Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Certificate serial: 0307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft Manifest number: 0303 Signing time: Tue 01 Jul 2025 01:53:30 +0000 Manifest this update: Tue 01 Jul 2025 01:53:30 +0000 Manifest next update: Tue 08 Jul 2025 01:53:30 +0000 Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: eBLslySSCeynS1v/plZzaLSaTWrQkzH/31tED52DBhg=) 2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 775 (0x307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Validity Not Before: Jul 1 01:53:30 2025 GMT Not After : Jul 8 01:53:30 2025 GMT Subject: CN=68633f9a-8919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:4b:43:d0:da:7c:c9:62:f2:85:2e:64:86: 21:56:79:1b:d7:05:5d:3c:f0:c6:63:c6:fa:88:af: a0:3b:a1:c8:10:03:a1:ef:0f:da:49:9e:66:28:36: fa:b8:db:04:e7:a6:e3:64:23:8f:60:24:d8:6c:33: 19:95:71:1b:e9:23:ae:bb:85:d1:bc:38:97:0d:a6: 69:93:ab:cd:c6:ff:e1:c9:0d:30:21:d8:ce:bc:8b: 53:32:a5:2c:91:49:3f:21:3a:e5:e9:be:de:6c:fa: 15:a7:3e:f2:b5:3e:19:64:be:44:a5:52:ac:43:4f: 62:7a:e1:1e:2b:dc:a7:22:d2:3f:e6:49:e2:85:1b: 12:fe:a1:27:52:05:a4:d7:8a:fc:10:e8:98:19:fc: f5:8d:87:9d:93:04:04:7f:37:44:d6:8f:31:f9:87: 3c:57:82:74:6a:b6:02:a7:db:50:40:b7:30:d1:cc: 1e:ae:42:d2:b1:ec:dc:c8:86:ee:50:c3:ce:f7:03: b3:a5:95:db:c6:a0:1e:be:36:f0:bf:1b:6d:1f:51: e9:c7:2c:b0:b6:3d:a5:a3:02:fe:6b:61:a2:1c:57: ba:8b:f2:a9:0f:db:a7:81:ac:9b:87:08:7f:c2:e1: 93:b1:36:55:cb:7d:6c:74:33:ea:3c:d6:e4:18:25: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:2E:FA:3A:53:7C:DF:ED:46:57:E9:9B:0D:C6:05:ED:B0:DC:7F X509v3 Authority Key Identifier: keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:80:47:18:34:37:06:32:72:c8:58:fe:9b:37:cb:75:b6:5b: aa:a1:47:3d:fa:6a:64:91:d6:89:98:23:ba:fc:e1:f4:de:3d: b8:57:0f:8b:4f:97:ea:d2:18:ab:99:f8:ed:ba:06:d0:33:e5: 33:17:a5:01:30:02:c6:0e:9c:70:4e:55:0e:1b:2b:3a:2d:0e: 2d:49:08:2e:46:be:24:de:21:9a:63:c6:f5:06:34:1f:bd:2f: de:03:ae:fa:66:42:65:d4:3f:3a:53:08:5f:d7:2d:fd:ef:72: bf:13:7f:22:45:0f:00:12:bd:d1:6b:a1:af:68:4b:b4:9d:f0: a3:00:f9:01:e9:2d:93:49:fd:c0:d8:a0:0e:56:7f:68:c2:80: fa:29:9d:26:5f:4d:9f:77:65:14:5d:dd:db:9a:bb:58:26:16: c2:7e:95:f4:9e:2a:39:c8:0b:a9:8a:ed:66:7f:3a:50:ca:9d: e5:81:da:1d:2a:48:d4:12:55:f8:07:d5:eb:75:bf:aa:f2:34: b9:2d:df:83:ab:bb:82:de:16:f7:aa:b3:99:c4:0b:ad:bf:45: cd:6e:b9:94:5f:7d:5e:f7:32:5b:20:6d:52:a5:b1:db:59:19: bf:24:d8:4d:6c:cf:04:e3:b5:92:a2:5a:cb:f2:01:8c:ec:41: 4e:fe:6a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy OENENDdEOTkwHhcNMjUwNzAxMDE1MzMwWhcNMjUwNzA4MDE1MzMwWjAYMRYwFAYD VQQDEw02ODYzM2Y5YS04OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5shLQ9DafMli8oUuZIYhVnkb1wVdPPDGY8b6iK+gO6HIEAOh7w/aSZ5mKDb6 uNsE56bjZCOPYCTYbDMZlXEb6SOuu4XRvDiXDaZpk6vNxv/hyQ0wIdjOvItTMqUs kUk/ITrl6b7ebPoVpz7ytT4ZZL5EpVKsQ09ieuEeK9ynItI/5knihRsS/qEnUgWk 14r8EOiYGfz1jYedkwQEfzdE1o8x+Yc8V4J0arYCp9tQQLcw0cwerkLSsezcyIbu UMPO9wOzpZXbxqAevjbwvxttH1Hpxyywtj2lowL+a2GiHFe6i/KpD9ungaybhwh/ wuGTsTZVy31sdDPqPNbkGCVl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIzLvo6 U3zf7UZX6ZsNxgXtsNx/MB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL WDhsU1FGUWtoQUFvelVmWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASgEcYNDcGMnLIWP6bN8t1tluqoUc9+mpkkdaJmCO6/OH03j24Vw+L T5fq0hirmfjtugbQM+UzF6UBMALGDpxwTlUOGys6LQ4tSQguRr4k3iGaY8b1BjQf vS/eA676ZkJl1D86Uwhf1y3973K/E38iRQ8AEr3Ra6GvaEu0nfCjAPkB6S2TSf3A 2KAOVn9owoD6KZ0mX02fd2UUXd3bmrtYJhbCfpX0nio5yAupiu1mfzpQyp3lgdod KkjUElX4B9Xrdb+q8jS5Ld+Dq7uC3hb3qrOZxAutv0XNbrmUX31e9zJbIG1SpbHb WRm/JNhNbM8E47WSolrL8gGM7EFO/mpK -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:57 2025 by rpki-client