$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: RiccFAC09Yw2G+ZbFTQ1GdQ63oNxRLTA5IEGcYMkazA= Subject key identifier: 50:E5:0F:ED:E2:45:00:4E:B2:C5:DF:2A:92:CA:19:90:0D:D7:26:2F Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 0208 Signing time: Wed 02 Jul 2025 22:41:29 +0000 Manifest this update: Wed 02 Jul 2025 22:41:28 +0000 Manifest next update: Wed 09 Jul 2025 22:41:28 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: pyqKijmiek6pLkOwkCrvLqMgLuYX4rvqJ5eKHkWEHFY=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Jul 2 22:41:28 2025 GMT Not After : Jul 9 22:41:28 2025 GMT Subject: CN=6865b599-e960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:63:3a:10:3e:81:1f:e1:09:2b:63:92:c1: 2e:b5:c8:c1:d4:f1:15:ee:0d:23:70:87:28:3d:75: 8a:c1:03:2b:1d:74:08:20:67:c3:20:f9:b9:26:34: 22:5a:e5:ae:00:5f:a4:c1:3b:e7:4d:b7:55:55:a5: 66:8b:1c:85:bd:43:ee:44:c1:0c:03:55:4f:45:09: ae:1d:d2:fd:bc:93:4d:d2:16:9a:77:3e:a6:27:c1: 3a:f0:d1:b4:ea:18:48:48:8b:e0:8e:28:33:1e:75: 97:65:e4:99:21:2a:94:aa:4f:a8:ae:ee:1d:d2:71: 2f:15:1a:3f:32:20:ab:8d:36:64:d1:a9:50:e5:2b: 1f:10:cc:9f:3d:af:ec:5d:59:56:2b:9a:f0:e6:9b: 12:6c:39:dd:e7:bd:9e:5a:e4:6a:3f:9b:fe:c7:0e: 86:81:da:1e:1a:d7:af:db:79:bb:0c:94:c5:b3:43: ce:0e:47:fa:6a:60:57:15:58:81:d3:9c:d3:9c:22: 68:39:f7:ac:d9:0c:16:25:61:56:e4:b6:3a:45:7a: 2b:f7:58:91:78:b0:f9:b7:e5:e7:27:c1:bd:2d:bf: 21:04:bd:60:2f:88:44:c6:36:36:2e:55:b3:31:7a: 2b:f7:6d:92:5f:bb:7d:76:35:78:f8:27:76:46:5c: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E5:0F:ED:E2:45:00:4E:B2:C5:DF:2A:92:CA:19:90:0D:D7:26:2F X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:c8:7e:21:3a:09:fc:92:e2:4a:a3:00:b4:67:b6:f7:2d:1f: d9:00:49:ca:72:f7:c6:3a:9a:4b:d7:33:a7:2a:d0:9c:82:48: 04:37:8b:69:7b:e8:5d:76:ef:ff:83:67:09:63:b9:67:6e:02: 11:1f:af:fc:7f:96:f1:e1:af:79:d5:d2:7c:73:94:88:8f:af: dc:e3:99:4f:91:0e:aa:08:30:10:f6:a7:4e:1a:ab:a2:b0:79: d1:3d:93:70:12:88:dc:0e:fe:4c:92:d6:6c:fe:ec:d1:5d:e4: 1f:54:fd:5a:bb:1c:3f:66:15:36:e8:0b:09:52:2b:be:17:a1: 5f:ec:90:48:00:86:a1:f6:8d:83:29:6e:6d:af:26:b1:e3:d6: a3:46:6a:42:3f:b7:9e:63:1f:6b:9c:75:3c:1a:b1:49:df:cf: 25:06:35:b1:e7:58:66:9b:e2:c5:72:96:51:a8:eb:6f:c0:11: ed:c7:43:b8:1e:08:07:0b:d3:69:db:8a:da:9b:95:16:21:87: 7d:ba:68:a2:d6:df:57:77:a1:0e:9f:ee:79:50:ee:3c:74:8a: d7:56:40:1f:f3:45:7d:64:67:37:bc:f6:d1:73:75:85:17:40: 58:62:3d:95:2f:ca:77:2b:e9:d4:c1:c8:81:a1:f5:7e:53:0b: f6:b4:04:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjUwNzAyMjI0MTI4WhcNMjUwNzA5MjI0MTI4WjAYMRYwFAYD VQQDEw02ODY1YjU5OS1lOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RVjOhA+gR/hCStjksEutcjB1PEV7g0jcIcoPXWKwQMrHXQIIGfDIPm5JjQi WuWuAF+kwTvnTbdVVaVmixyFvUPuRMEMA1VPRQmuHdL9vJNN0haadz6mJ8E68NG0 6hhISIvgjigzHnWXZeSZISqUqk+oru4d0nEvFRo/MiCrjTZk0alQ5SsfEMyfPa/s XVlWK5rw5psSbDnd572eWuRqP5v+xw6GgdoeGtev23m7DJTFs0PODkf6amBXFViB 05zTnCJoOfes2QwWJWFW5LY6RXor91iReLD5t+XnJ8G9Lb8hBL1gL4hExjY2LlWz MXor922SX7t9djV4+Cd2Rlz4RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDlD+3i RQBOssXfKpLKGZAN1yYvMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDyH4hOgn8kuJKowC0Z7b3LR/ZAEnKcvfGOppL1zOnKtCcgkgEN4tp e+hddu//g2cJY7lnbgIRH6/8f5bx4a951dJ8c5SIj6/c45lPkQ6qCDAQ9qdOGqui sHnRPZNwEojcDv5MktZs/uzRXeQfVP1auxw/ZhU26AsJUiu+F6Ff7JBIAIah9o2D KW5tryax49ajRmpCP7eeYx9rnHU8GrFJ388lBjWx51hmm+LFcpZRqOtvwBHtx0O4 HggHC9Np24ram5UWIYd9umii1t9Xd6EOn+55UO48dIrXVkAf80V9ZGc3vPbRc3WF F0BYYj2VL8p3K+nUwciBofV+Uwv2tAQg -----END CERTIFICATE-----Generated at Thu Jul 3 22:53:33 2025 by rpki-client