$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: TCmsch+s4+nJj2q0XsalcSQ0c83LLflcLGAG7SWezcY= Subject key identifier: C3:F5:70:F5:94:B5:11:63:46:96:C8:B7:9F:FF:15:8D:24:A0:63:D5 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 035D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 0359 Signing time: Thu 03 Jul 2025 01:19:53 +0000 Manifest this update: Thu 03 Jul 2025 01:19:53 +0000 Manifest next update: Thu 10 Jul 2025 01:19:53 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: 6NJYjmfRG3datoS2cr0dig4/QxnC7eBWQ9Si3v9zGnU=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: BTLl2ZQykfG+tipQAUgtzvqp3DpDHeGIHhFJsSIVOWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Jul 3 01:19:53 2025 GMT Not After : Jul 10 01:19:53 2025 GMT Subject: CN=6865dab9-2b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:a3:26:d3:b2:19:5d:e8:fa:1c:92:00:2e: 8e:7c:e2:d7:ef:ff:f2:8c:6f:26:5f:43:2c:77:1d: 98:7c:54:d8:74:28:46:dd:b0:b6:c6:f0:39:a6:2e: bb:6d:f7:cc:3c:2a:10:8f:0a:0b:1c:db:46:ea:9e: f6:2a:96:52:b3:85:cb:5e:1a:83:9b:91:ea:a2:72: b0:fe:c2:59:92:0e:49:0f:55:c4:c6:55:8d:4b:01: aa:77:96:8d:dd:8b:52:33:3c:a8:c3:74:46:af:58: 02:29:d2:78:31:1c:e8:b8:ca:7b:1a:df:e6:e0:92: f4:04:30:c6:cd:2a:e3:f5:6a:35:78:9d:17:80:d7: e6:2b:8a:98:da:10:8e:fb:95:c8:f5:11:95:96:94: a0:7a:be:30:db:60:ac:fd:e3:90:b1:43:e9:42:3b: 10:35:31:33:29:17:5f:c4:09:2b:3b:d0:99:e0:04: 41:8b:f2:db:e7:28:cc:be:66:d8:d5:ba:36:8a:65: f0:3e:59:9d:a3:97:48:cc:d3:d9:b0:ae:37:78:88: b7:f7:7a:ab:eb:ca:6b:8d:31:c5:f2:5f:9d:b2:94: 9a:ec:b2:fc:5d:e2:67:cf:ad:12:85:37:19:02:23: ab:fe:8f:ed:42:95:f6:45:be:48:15:c1:46:e2:86: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F5:70:F5:94:B5:11:63:46:96:C8:B7:9F:FF:15:8D:24:A0:63:D5 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8d:de:c5:ee:23:d6:8f:a6:7c:76:b5:05:85:2a:b5:3c:0d: 9b:2e:e1:09:77:11:f6:c1:52:08:9e:cf:13:c3:45:ec:78:84: 4b:17:52:e0:2d:56:ac:06:ae:d5:3f:98:ac:02:02:41:62:62: 59:dd:4e:da:f7:5f:a8:a3:95:e4:8b:21:4f:ec:d7:1d:ba:a9: 92:e5:fe:fc:fb:9c:0d:64:c0:26:e5:ba:f6:08:bd:49:6f:3f: 4f:b4:9f:d1:de:ea:a6:e6:c4:24:51:ad:80:84:ab:24:a0:72: b4:a2:c7:43:ed:ae:d7:e7:dd:db:4c:64:24:79:47:7e:6a:05: 93:38:a8:02:cf:97:e6:2b:b7:09:8b:b4:12:d4:b8:73:7f:70: f6:5f:7d:9a:00:b9:d9:12:cf:01:18:cd:d9:de:f4:b2:b0:f4: f7:ab:80:07:d9:4e:1f:3e:bb:1a:fa:a1:ac:f0:43:c8:e2:27: e4:01:63:a2:5f:28:d8:80:63:b8:21:6c:90:04:b1:ce:59:16: f5:3d:b6:e8:93:5d:da:e7:e4:4a:5e:6c:23:ad:91:9f:ca:97: bb:1e:26:01:61:dd:26:41:a6:c8:53:21:4e:9e:fc:ec:3e:89: a7:af:c0:6f:fd:38:42:48:45:db:f6:06:1f:e2:a6:a3:4c:d6: 71:14:c9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjUwNzAzMDExOTUzWhcNMjUwNzEwMDExOTUzWjAYMRYwFAYD VQQDEw02ODY1ZGFiOS0yYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzr6jJtOyGV3o+hySAC6OfOLX7//yjG8mX0Msdx2YfFTYdChG3bC2xvA5pi67 bffMPCoQjwoLHNtG6p72KpZSs4XLXhqDm5HqonKw/sJZkg5JD1XExlWNSwGqd5aN 3YtSMzyow3RGr1gCKdJ4MRzouMp7Gt/m4JL0BDDGzSrj9Wo1eJ0XgNfmK4qY2hCO +5XI9RGVlpSger4w22Cs/eOQsUPpQjsQNTEzKRdfxAkrO9CZ4ARBi/Lb5yjMvmbY 1bo2imXwPlmdo5dIzNPZsK43eIi393qr68prjTHF8l+dspSa7LL8XeJnz60ShTcZ AiOr/o/tQpX2Rb5IFcFG4oasqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP1cPWU tRFjRpbIt5//FY0koGPVMB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOjd7F7iPWj6Z8drUFhSq1PA2bLuEJdxH2wVIIns8Tw0XseIRLF1Lg LVasBq7VP5isAgJBYmJZ3U7a91+oo5XkiyFP7NcduqmS5f78+5wNZMAm5br2CL1J bz9PtJ/R3uqm5sQkUa2AhKskoHK0osdD7a7X593bTGQkeUd+agWTOKgCz5fmK7cJ i7QS1Lhzf3D2X32aALnZEs8BGM3Z3vSysPT3q4AH2U4fPrsa+qGs8EPI4ifkAWOi XyjYgGO4IWyQBLHOWRb1Pbbok13a5+RKXmwjrZGfype7HiYBYd0mQabIUyFOnvzs Pomnr8Bv/ThCSEXb9gYf4qajTNZxFMlj -----END CERTIFICATE-----Generated at Sat Jul 5 01:29:48 2025 by rpki-client