$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft File: qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json) Hash identifier: siyxfk9LyOBDjEDCQjqHVkdoTgVkhSp0Qa9AhXfppFU= Subject key identifier: 63:43:EC:8B:24:1B:44:26:D8:41:5A:88:61:4C:50:86:4D:21:6B:44 Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 Certificate issuer: /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft Manifest number: 0797 Signing time: Wed 02 Jul 2025 21:37:37 +0000 Manifest this update: Wed 02 Jul 2025 21:37:37 +0000 Manifest next update: Wed 09 Jul 2025 21:37:37 +0000 Files and hashes: 1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: GmR4wTlZp94VfZGunckYnQ1UU7mPtBzrOeQ3O6w6LJI=) 2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: o8ES5sVXjZZWJ8HjjyGv8mKYMdzoHknglpOG5+B569s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7 Validity Not Before: Jul 2 21:37:37 2025 GMT Not After : Jul 9 21:37:37 2025 GMT Subject: CN=6865a6a1-5506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:de:76:a7:a2:78:1d:97:80:4c:96:34:9b: c8:54:83:00:2e:67:46:7e:d2:e9:1f:b8:34:81:3b: 3e:ba:c5:41:23:8f:ac:82:50:36:8c:07:b5:58:f2: 42:38:1c:7f:c1:37:2c:03:c3:70:5a:1d:51:6e:fb: c4:b6:8d:b9:eb:7a:60:61:4a:0e:c6:e8:f3:93:5e: e8:4e:ed:0f:96:c0:d9:bb:47:c0:1c:30:19:fb:3a: 98:18:80:83:06:ae:37:94:20:2c:71:6e:16:49:0a: be:bb:54:ec:be:26:2c:9f:5e:68:48:b2:9e:17:85: e5:28:b9:7c:a1:9e:b8:98:d5:2a:bc:1d:52:34:cc: 8b:df:1d:8f:0c:d5:d1:79:e6:43:35:84:62:94:e0: 2f:b9:24:b6:75:7f:f8:93:aa:bb:03:1d:6f:44:18: 34:ae:c3:3a:f0:60:3b:3f:32:1a:1b:ed:a2:34:13: 51:ce:df:db:fb:53:50:57:d8:cd:4f:02:c7:a9:e2: e8:56:1d:27:fd:13:7e:fa:6b:42:e3:26:c0:9b:d3: f0:18:d2:7e:8b:10:34:75:76:3c:c6:67:4f:f3:9b: 82:ce:2c:b1:c0:a3:fb:1e:09:75:15:8f:69:e0:02: 25:bf:47:a7:f5:20:82:74:63:46:56:a1:e5:db:a5: ad:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:43:EC:8B:24:1B:44:26:D8:41:5A:88:61:4C:50:86:4D:21:6B:44 X509v3 Authority Key Identifier: keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0c:31:51:89:5d:9f:7d:ea:89:b8:ed:7e:55:f6:cf:c1:66: d6:89:02:5b:82:e0:07:13:c0:32:4e:ec:cc:8f:91:4e:87:b4: a1:ee:a2:30:f0:67:05:eb:b8:ef:03:5c:64:f8:e3:8b:43:c3: 86:ce:5f:e7:8a:6f:50:2f:db:cc:a7:ef:53:09:81:ff:20:0b: 71:da:40:77:4b:43:d4:46:32:e1:25:50:c8:80:6b:47:47:e3: ea:2a:16:6d:ec:c7:83:75:04:a1:22:fa:cb:9c:47:4a:2d:45: e6:1a:c5:7c:a1:a5:9f:bb:eb:92:da:c2:2d:92:a3:99:b9:68: 89:ec:19:d7:3b:57:86:8a:47:bb:7f:4c:2d:c7:0d:1e:f8:2b: 66:76:28:2c:46:2a:4c:49:48:81:27:e5:f1:57:f5:37:fb:64: 11:f3:51:82:1f:e6:cf:6e:99:05:ff:f1:f3:85:f3:21:d5:57: 14:db:a1:e1:19:3c:2f:f3:58:c4:53:b9:cc:04:00:65:d1:6c: 1e:fc:b7:c7:7c:5e:b1:c4:46:c1:58:e0:21:cb:a5:c5:fe:eb: f5:75:ff:6d:1b:bb:61:00:f4:8c:8e:48:8d:b1:af:8a:a9:34: 8f:a7:fe:da:02:c8:1f:d5:d3:58:1a:e5:6f:5d:cf:16:11:c1: b4:03:ac:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2RTExMTAvBgNVBAUTKEE5NjZBMkIyN0ZFMTQ5MzdCRTM2RDI3REI1RjRENzY4 ODA4NDdERDcwHhcNMjUwNzAyMjEzNzM3WhcNMjUwNzA5MjEzNzM3WjAYMRYwFAYD VQQDEw02ODY1YTZhMS01NTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW/edqeieB2XgEyWNJvIVIMALmdGftLpH7g0gTs+usVBI4+sglA2jAe1WPJC OBx/wTcsA8NwWh1RbvvEto2563pgYUoOxujzk17oTu0PlsDZu0fAHDAZ+zqYGICD Bq43lCAscW4WSQq+u1TsviYsn15oSLKeF4XlKLl8oZ64mNUqvB1SNMyL3x2PDNXR eeZDNYRilOAvuSS2dX/4k6q7Ax1vRBg0rsM68GA7PzIaG+2iNBNRzt/b+1NQV9jN TwLHqeLoVh0n/RN++mtC4ybAm9PwGNJ+ixA0dXY8xmdP85uCziyxwKP7Hgl1FY9p 4AIlv0en9SCCdGNGVqHl26WtvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGND7Isk G0Qm2EFaiGFMUIZNIWtEMB8GA1UdIwQYMBaAFKlmorJ/4Uk3vjbSfbX012iAhH3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzZFMS85ODlGM0EwQTBF QTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNUZS1OdEo5dGZUWGFJQ0Vm ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FXYWlzbl9oU1RlLU50Sjl0ZlRYYUlDRWZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzZFMS85ODlGM0EwQTBFQTYxMUVCQjI2NzI3ODZDNEY5QUUwMi9xV2Fpc25faFNU ZS1OdEo5dGZUWGFJQ0VmZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJDDFRiV2ffeqJuO1+VfbPwWbWiQJbguAHE8AyTuzMj5FOh7Sh7qIw 8GcF67jvA1xk+OOLQ8OGzl/nim9QL9vMp+9TCYH/IAtx2kB3S0PURjLhJVDIgGtH R+PqKhZt7MeDdQShIvrLnEdKLUXmGsV8oaWfu+uS2sItkqOZuWiJ7BnXO1eGike7 f0wtxw0e+CtmdigsRipMSUiBJ+XxV/U3+2QR81GCH+bPbpkF//HzhfMh1VcU26Hh GTwv81jEU7nMBABl0Wwe/LfHfF6xxEbBWOAhy6XF/uv1df9tG7thAPSMjkiNsa+K qTSPp/7aAsgf1dNYGuVvXc8WEcG0A6ww -----END CERTIFICATE-----Generated at Wed Jul 2 22:50:43 2025 by rpki-client