$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: HEFouz+oaX6HoR0/XKwZGdsDLAAsn5kCCrP0EKF09Lk= Subject key identifier: 03:84:41:44:88:4D:31:FD:59:BC:83:9E:BB:11:D7:B6:E1:C5:92:1B Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 03A3 Signing time: Tue 01 Jul 2025 01:20:48 +0000 Manifest this update: Tue 01 Jul 2025 01:20:48 +0000 Manifest next update: Tue 08 Jul 2025 01:20:47 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: xpFe5ZENi8F1tKf1lkuD9Ct5LxRQ3NuHH3Vjbe9nEVU=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: wh4KvNLBK6XFgoR8FRnF/jwZCf/huqxHy9C0SYykY04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Jul 1 01:20:48 2025 GMT Not After : Jul 8 01:20:47 2025 GMT Subject: CN=686337f0-ba5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:f1:3e:78:36:06:91:c5:ac:a9:c6:aa:a8: e6:cd:52:8a:d9:3b:66:0f:8a:80:8b:e3:e3:a0:b5: 82:d7:37:6d:a4:f0:ef:b8:aa:b4:96:f2:0e:cd:59: d8:51:1d:48:96:61:3c:be:08:07:b2:cd:1c:d6:c4: 6f:15:58:e6:f1:5d:9b:49:df:c4:b3:1f:d9:e1:52: f7:ff:4b:be:ec:70:5f:0e:43:64:c2:02:df:f0:44: db:a2:6e:39:5e:07:f4:b7:46:44:b6:b8:70:05:ba: c7:e2:b7:a1:92:a9:cb:0f:be:4a:ce:8b:b3:72:12: 4c:44:6e:39:8b:b4:71:ba:4d:48:92:39:c3:2c:36: 49:c0:f7:3d:ea:64:1c:47:40:5b:3e:17:27:b0:55: 8d:ff:f0:2f:b3:57:53:93:3a:da:8d:40:0e:ab:ab: 89:f1:22:b8:4c:b0:98:ea:66:99:1f:ce:2a:2d:41: 37:b7:1f:fb:e2:a9:de:18:06:f7:06:d1:f0:8e:20: 02:5d:de:96:76:8f:b1:d9:b8:7b:81:66:1f:09:37: 06:c9:ed:97:05:67:e8:e9:2a:cf:6d:cb:a8:5a:20: b7:3f:49:da:6c:b9:56:63:33:34:63:df:87:ab:61: 62:40:25:13:9f:15:ce:c0:e3:06:ed:cd:ad:cf:f1: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:84:41:44:88:4D:31:FD:59:BC:83:9E:BB:11:D7:B6:E1:C5:92:1B X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:54:74:e8:0b:30:60:b9:94:d4:4b:45:62:8f:25:4d:dc:b6: 36:0a:e8:21:65:ab:33:3a:e8:b2:26:82:3d:90:64:6e:47:50: 4c:3e:c1:79:25:90:61:91:b1:df:2b:76:78:d1:19:82:80:e7: 30:87:fb:93:f1:27:32:45:f6:2b:85:2a:c6:48:c1:0c:14:3a: e7:a0:4c:76:73:af:30:9a:4b:0a:d7:f8:8c:42:ff:c0:26:47: 71:5b:3f:e3:a0:9a:59:f8:42:cb:a7:db:75:25:1f:2f:7a:69: 40:d4:79:5f:fc:9e:f4:72:cb:90:16:b7:72:fa:af:1b:74:11: 2f:6b:9a:3d:f4:fc:6c:66:d6:0c:ad:a3:60:73:08:d2:e5:62: 97:18:68:04:97:32:3d:1d:72:33:cb:e1:4f:8f:ca:70:f8:41: 60:5e:30:5e:0b:d6:59:84:80:28:2f:3a:1b:08:2a:55:2e:b5: 55:aa:d8:d9:06:22:8f:9a:d3:df:08:62:82:9e:47:79:72:7a: eb:5c:ca:b6:0e:23:32:c2:58:89:8f:0c:ba:a1:68:f1:1f:5c: 1e:39:04:bb:8b:42:25:86:18:4d:ce:bb:35:b0:7c:ee:32:5a: e8:0d:3a:5c:16:94:33:49:c1:07:25:99:4a:00:c0:e5:ca:eb: 4d:08:26:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwNzAxMDEyMDQ4WhcNMjUwNzA4MDEyMDQ3WjAYMRYwFAYD VQQDEw02ODYzMzdmMC1iYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjzxPng2BpHFrKnGqqjmzVKK2TtmD4qAi+PjoLWC1zdtpPDvuKq0lvIOzVnY UR1IlmE8vggHss0c1sRvFVjm8V2bSd/Esx/Z4VL3/0u+7HBfDkNkwgLf8ETbom45 Xgf0t0ZEtrhwBbrH4rehkqnLD75KzouzchJMRG45i7Rxuk1IkjnDLDZJwPc96mQc R0BbPhcnsFWN//Avs1dTkzrajUAOq6uJ8SK4TLCY6maZH84qLUE3tx/74qneGAb3 BtHwjiACXd6Wdo+x2bh7gWYfCTcGye2XBWfo6SrPbcuoWiC3P0nabLlWYzM0Y9+H q2FiQCUTnxXOwOMG7c2tz/EMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOEQUSI TTH9WbyDnrsR17bhxZIbMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkVHToCzBguZTUS0VijyVN3LY2CughZaszOuiyJoI9kGRuR1BMPsF5 JZBhkbHfK3Z40RmCgOcwh/uT8ScyRfYrhSrGSMEMFDrnoEx2c68wmksK1/iMQv/A JkdxWz/joJpZ+ELLp9t1JR8vemlA1Hlf/J70csuQFrdy+q8bdBEva5o99PxsZtYM raNgcwjS5WKXGGgElzI9HXIzy+FPj8pw+EFgXjBeC9ZZhIAoLzobCCpVLrVVqtjZ BiKPmtPfCGKCnkd5cnrrXMq2DiMywliJjwy6oWjxH1weOQS7i0IlhhhNzrs1sHzu MlroDTpcFpQzScEHJZlKAMDlyutNCCZt -----END CERTIFICATE-----Generated at Wed Jul 2 16:00:42 2025 by rpki-client