$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json) Hash identifier: gzQkwIuIrfSO3VV+biAuBJxYLON6HGidP7JPSzIpFKE= Subject key identifier: FF:57:A2:4E:DF:58:C7:9D:AA:B0:EA:2C:36:68:83:92:75:4A:41:78 Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft Manifest number: EF Signing time: Thu 03 Jul 2025 05:33:40 +0000 Manifest this update: Thu 03 Jul 2025 05:33:40 +0000 Manifest next update: Thu 10 Jul 2025 05:33:40 +0000 Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: Le2hXa4xUxfMO1JDM5hW+masBVEQ9d6ov9ItSnkLYJA=) 2: 47142068221311EFB680F113C4F9AE02.roa (hash: Wz7+GyEz4KEH5axb8P5kr/PKoJv9dBdTnqoEdl36Fic=) 3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: u90GvXDC2nj38gPxwI7H6zVq1FrynP/V/Ah+aJjG8F8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69 Validity Not Before: Jul 3 05:33:40 2025 GMT Not After : Jul 10 05:33:40 2025 GMT Subject: CN=68661634-f676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:1a:87:26:ee:f7:bf:dc:e2:99:44:d9:3e: 87:32:ee:2c:b8:b3:48:51:57:73:e0:92:61:b2:9e: f5:de:f2:7c:59:09:01:d2:ce:fa:01:bf:fd:96:88: 28:7e:5c:f3:d6:84:98:ac:14:10:da:60:6c:9b:54: a7:c2:1a:bd:9d:5f:6b:e2:18:4d:a8:8e:9b:52:5d: 27:dc:50:ed:28:13:41:1e:3a:87:06:e6:95:cc:59: db:81:29:0c:5d:0d:9f:26:1a:ca:4c:4f:66:29:c4: 51:84:eb:8d:ca:5c:01:c4:50:b5:9c:e8:fc:d9:df: 73:fa:ba:b3:97:5c:75:b6:6e:35:fc:72:4b:93:3f: 25:72:db:29:c2:2e:e3:97:50:d4:36:67:ee:56:60: 08:ea:3a:3f:61:d5:0d:31:15:c0:51:d4:46:1e:e9: c1:b9:ed:64:36:8b:fc:f8:59:8b:40:ad:c2:f6:6e: f2:71:25:57:61:62:ef:c2:ff:37:78:bb:14:83:61: 93:60:4c:41:a9:ed:9d:0f:6c:3e:8c:20:fd:73:4a: 0f:c0:b2:bb:13:81:fc:81:62:04:f6:61:54:01:d7: 6f:c6:e3:7e:39:86:fe:17:16:8b:13:69:68:08:1e: f8:9c:23:c4:82:78:60:45:a0:54:54:4a:a8:74:07: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:57:A2:4E:DF:58:C7:9D:AA:B0:EA:2C:36:68:83:92:75:4A:41:78 X509v3 Authority Key Identifier: keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:86:f3:eb:f7:5c:bb:a5:14:a1:84:e4:f0:d4:1c:d8:29:3c: 74:d9:58:b1:81:98:36:9f:ba:75:1a:94:08:f5:6e:33:dc:33: c3:1b:10:c5:25:95:46:bd:35:96:52:29:de:93:d8:25:a3:5f: 01:8e:cb:1b:00:ac:66:77:f8:c3:87:b0:e2:8a:02:2b:38:54: f5:08:03:af:9d:80:d4:80:cf:67:3e:4d:a6:87:69:4d:9c:d8: 18:a8:70:35:bf:43:b3:d2:57:43:09:50:7c:b6:35:73:31:1d: eb:8b:8a:2a:b7:2e:75:52:2f:b8:b5:4f:d0:5f:72:73:21:26: 2f:2c:c8:5f:48:3b:05:05:d3:09:0a:78:a8:56:45:da:47:30: c3:de:b0:94:3f:50:7a:be:e1:45:85:30:e7:aa:06:cc:6d:5e: f8:11:8d:e4:f5:ed:9c:ba:c7:6c:08:1a:5e:6d:f9:da:60:07: 3a:31:29:e5:a3:64:8e:81:7d:41:a3:8a:20:67:ae:85:75:b4: 8c:b2:6a:33:fc:c4:65:51:4d:57:64:22:05:0f:ee:4e:5e:be: 87:3b:d5:8e:35:06:ab:0a:7b:12:aa:7b:6d:4d:44:13:36:73: 2c:4f:f6:63:8d:49:40:33:d6:3e:25:fe:d9:20:4c:8f:a1:a7: 18:14:af:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2 NDAyRkVCNjkwHhcNMjUwNzAzMDUzMzQwWhcNMjUwNzEwMDUzMzQwWjAYMRYwFAYD VQQDEw02ODY2MTYzNC1mNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx0ahybu97/c4plE2T6HMu4suLNIUVdz4JJhsp713vJ8WQkB0s76Ab/9logo flzz1oSYrBQQ2mBsm1Snwhq9nV9r4hhNqI6bUl0n3FDtKBNBHjqHBuaVzFnbgSkM XQ2fJhrKTE9mKcRRhOuNylwBxFC1nOj82d9z+rqzl1x1tm41/HJLkz8lctspwi7j l1DUNmfuVmAI6jo/YdUNMRXAUdRGHunBue1kNov8+FmLQK3C9m7ycSVXYWLvwv83 eLsUg2GTYExBqe2dD2w+jCD9c0oPwLK7E4H8gWIE9mFUAddvxuN+OYb+FxaLE2lo CB74nCPEgnhgRaBUVEqodAeWiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9Xok7f WMedqrDqLDZog5J1SkF4MB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2 MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm d3lqc1AwNlYxWWhrQXY2MmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwhvPr91y7pRShhOTw1BzYKTx02VixgZg2n7p1GpQI9W4z3DPDGxDF JZVGvTWWUinek9glo18BjssbAKxmd/jDh7DiigIrOFT1CAOvnYDUgM9nPk2mh2lN nNgYqHA1v0Oz0ldDCVB8tjVzMR3ri4oqty51Ui+4tU/QX3JzISYvLMhfSDsFBdMJ CnioVkXaRzDD3rCUP1B6vuFFhTDnqgbMbV74EY3k9e2cusdsCBpebfnaYAc6MSnl o2SOgX1Bo4ogZ66FdbSMsmoz/MRlUU1XZCIFD+5OXr6HO9WONQarCnsSqnttTUQT NnMsT/ZjjUlAM9Y+Jf7ZIEyPoacYFK8o -----END CERTIFICATE-----Generated at Fri Jul 4 04:01:57 2025 by rpki-client