$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json) Hash identifier: +aAtNUTUuIPOAs3LgpgYs6U+GbaporwNCJda00mzwEE= Subject key identifier: E8:98:76:57:41:23:B3:99:98:0D:97:88:6E:5D:B5:B3:D5:AE:18:57 Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft Manifest number: 67 Signing time: Tue 01 Jul 2025 07:48:19 +0000 Manifest this update: Tue 01 Jul 2025 07:48:19 +0000 Manifest next update: Tue 08 Jul 2025 07:48:19 +0000 Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: fGYJ+LVgZ08wj5q63jR2HI3U+R3F7PXFV8Qp0Ga2wZg=) 2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: pAj7NdDmToipkIAovmtOfynK/RP/8C5/+xzCsvCxUC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Validity Not Before: Jul 1 07:48:19 2025 GMT Not After : Jul 8 07:48:19 2025 GMT Subject: CN=686392c3-e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:7e:e9:3d:48:37:b7:2b:16:23:72:6d:b8: 6d:d9:b6:a9:f1:ec:ce:42:81:bb:c8:5f:33:3c:18: 0e:4d:c1:cb:24:af:43:d9:01:aa:50:d1:b0:1b:bb: 34:e7:2e:e4:ed:e0:3a:94:7e:94:36:23:64:b7:d9: 46:54:0d:4b:a5:3e:2d:07:9c:c6:a9:ae:ca:6f:67: a7:12:0c:e7:a7:30:34:a6:64:38:08:7a:2f:38:70: ef:72:3c:87:10:95:cf:f2:eb:d4:cb:80:81:3f:03: 32:9c:4f:36:ea:64:02:fa:7b:2e:d0:b9:fe:a0:20: 1c:7a:d6:53:f0:72:12:e6:88:fa:e9:ee:47:f6:3b: 43:0b:b1:83:53:ba:f4:6e:6e:ef:82:27:0a:39:31: f7:ec:8b:77:a1:df:18:ec:82:0d:5f:14:35:64:fd: a3:71:fe:7c:79:02:75:c8:2d:56:64:c1:0a:b0:90: 1e:c4:67:7c:0b:04:cd:bb:cb:ba:35:4d:d4:19:c0: c1:a2:70:e5:21:f8:02:4f:25:47:87:a3:3e:8c:53: 6e:59:c5:13:6d:1f:79:5a:ad:f4:14:c0:4d:91:3d: dd:bc:85:1e:b1:29:6c:f8:98:06:0b:7e:82:de:de: 6a:98:b6:e2:c3:0d:71:5f:2a:1b:0d:2e:b4:cf:79: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:76:57:41:23:B3:99:98:0D:97:88:6E:5D:B5:B3:D5:AE:18:57 X509v3 Authority Key Identifier: keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:5a:3f:b4:ab:ce:22:d8:f7:44:54:06:a0:b8:5b:64:43:ef: c0:72:63:ef:f4:2f:9d:a9:13:d9:4c:f2:ba:01:cf:aa:93:91: d5:e8:54:28:7e:b9:60:d9:46:30:23:83:c2:4c:cb:22:32:da: 11:68:17:da:7f:b8:64:e6:5c:ed:c3:45:5b:0d:dd:c0:64:ab: 9e:d6:db:f1:05:bf:51:1c:32:1d:c1:cc:30:5d:c5:43:59:41: b6:50:84:72:a1:6c:79:dd:7d:7e:83:2f:7f:2e:29:5b:2f:0b: c4:2b:a0:13:a1:11:a0:eb:77:8e:74:97:e3:38:30:fb:4d:bd: d8:c1:83:74:12:36:a4:df:80:1d:44:46:a6:e0:52:68:2c:58: de:c3:4e:52:78:76:a5:c6:7d:7e:d8:66:31:e3:4f:fe:0e:3d: c0:2d:63:27:e6:71:13:67:c4:eb:8c:f9:3a:cd:dd:9d:6b:fc: 73:3c:9a:61:c4:4e:b8:84:0f:4b:4e:ce:46:1b:2a:7e:fe:fe: 00:9f:7a:77:4c:19:67:3d:6f:29:63:89:74:78:1d:b1:0f:05: 18:9f:d1:81:2b:d8:4a:59:fb:00:66:a3:bd:78:8c:0e:6b:5e: 6d:0a:36:12:12:d6:e0:d1:36:9e:c5:d6:d4:c9:48:be:c8:50: 7f:f8:e0:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoQUEwQjc4MkRCOTkzMkUyMkZEREVGMEMzRjc1NTk2RUUw OTQ1RTEyRDAeFw0yNTA3MDEwNzQ4MTlaFw0yNTA3MDgwNzQ4MTlaMBgxFjAUBgNV BAMTDTY4NjM5MmMzLWU0NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtdH7pPUg3tysWI3JtuG3Ztqnx7M5CgbvIXzM8GA5Nwcskr0PZAapQ0bAbuzTn LuTt4DqUfpQ2I2S32UZUDUulPi0HnMaprspvZ6cSDOenMDSmZDgIei84cO9yPIcQ lc/y69TLgIE/AzKcTzbqZAL6ey7Quf6gIBx61lPwchLmiPrp7kf2O0MLsYNTuvRu bu+CJwo5Mffsi3eh3xjsgg1fFDVk/aNx/nx5AnXILVZkwQqwkB7EZ3wLBM27y7o1 TdQZwMGicOUh+AJPJUeHoz6MU25ZxRNtH3larfQUwE2RPd28hR6xKWz4mAYLfoLe 3mqYtuLDDXFfKhsNLrTPecRrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6Jh2V0Ej s5mYDZeIbl21s9WuGFcwHwYDVR0jBBgwFoAUqgt4LbmTLiL93vDD91WW7glF4S0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5LzA3Nzk3RkU0QzBE QzExRUY5RTg3MTg0NEM0RjlBRTAyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRT MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWd0NExibVRMaUw5M3ZERDkxV1c3Z2xGNFMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5LzA3Nzk3RkU0QzBEQzExRUY5RTg3MTg0NEM0RjlBRTAyL3FndDRMYm1UTGlM OTN2REQ5MVdXN2dsRjRTMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9aP7SrziLY90RUBqC4W2RD78ByY+/0L52pE9lM8roBz6qTkdXoVCh+ uWDZRjAjg8JMyyIy2hFoF9p/uGTmXO3DRVsN3cBkq57W2/EFv1EcMh3BzDBdxUNZ QbZQhHKhbHndfX6DL38uKVsvC8QroBOhEaDrd450l+M4MPtNvdjBg3QSNqTfgB1E RqbgUmgsWN7DTlJ4dqXGfX7YZjHjT/4OPcAtYyfmcRNnxOuM+TrN3Z1r/HM8mmHE TriED0tOzkYbKn7+/gCfendMGWc9byljiXR4HbEPBRif0YEr2EpZ+wBmo714jA5r Xm0KNhIS1uDRNp7F1tTJSL7IUH/44KQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:59:45 2025 by rpki-client