$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: GC+urn5BXIoMpgTlWokUwCuBv1Qj2DvCaelzh2Z3pk8= Subject key identifier: 70:FF:13:38:5B:8C:41:5B:5F:4A:96:81:16:48:C0:11:F0:12:51:08 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0622 Signing time: Wed 02 Jul 2025 23:05:46 +0000 Manifest this update: Wed 02 Jul 2025 23:05:45 +0000 Manifest next update: Wed 09 Jul 2025 23:05:45 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: wLSlS1oRTP8LRY/DYq1kp7I8MvMP47RNg2tc4aOCC1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Jul 2 23:05:45 2025 GMT Not After : Jul 9 23:05:45 2025 GMT Subject: CN=6865bb49-3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:f0:32:97:da:95:3a:66:b0:85:00:a8:bb: fb:18:9d:cf:9d:fc:42:20:05:1d:cc:ff:a9:22:28: ee:50:4d:2b:4c:a4:24:e4:a5:50:93:da:c4:6d:40: f4:a7:63:54:3c:08:89:e7:29:e5:7c:a2:ef:ae:63: bb:06:14:5a:fe:85:68:5c:87:27:18:92:97:e2:75: f7:74:ed:f7:bf:64:98:98:3c:d9:62:63:f7:b7:36: ca:f2:db:a2:4e:08:aa:42:c1:c3:b2:7c:fb:9c:c2: 48:d4:40:d3:b9:51:78:d7:75:57:57:35:60:ca:7e: f9:22:3d:23:2a:e7:1a:99:c7:6d:d4:3c:63:0c:e8: 82:5e:9b:46:a1:e7:bd:17:d6:65:57:fd:95:20:22: f0:da:00:f5:8e:3e:bb:70:63:9d:f8:f7:9e:c3:48: 3c:e8:dd:c9:42:e6:18:d6:01:0c:ab:7f:66:a0:d0: 6f:a1:6a:54:13:dc:e5:22:c6:ce:7b:b5:da:6f:61: ea:56:f7:36:df:dc:1f:02:5b:43:2a:b2:2c:bd:74: cb:f2:1d:f1:96:72:2d:d1:f5:88:e9:a3:56:0c:2e: 75:a6:bc:20:6e:a2:0f:eb:b8:55:fd:6f:b3:60:a7: a8:d2:05:4b:2e:04:35:e0:61:32:19:e8:d7:47:80: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FF:13:38:5B:8C:41:5B:5F:4A:96:81:16:48:C0:11:F0:12:51:08 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ca:19:91:5e:90:e5:3d:97:f5:ee:95:66:e5:72:88:5a:c9: 16:6b:8f:fa:8c:c1:62:11:fa:35:f7:ea:09:b8:26:c4:c5:c5: 99:4e:0c:4e:8d:e9:63:39:e2:c6:2c:e0:0b:88:62:33:22:42: fa:79:91:19:40:4e:44:a3:ae:41:6e:2c:e8:8c:f0:06:47:be: 54:d7:a6:b9:7f:a7:da:11:e5:6f:b9:69:32:8d:15:ff:a0:c9: 06:b8:2d:61:71:69:39:f9:3e:7b:97:a8:98:32:cb:71:39:ca: 43:33:4c:4d:f0:b6:1d:42:89:72:1d:43:13:6b:62:33:bf:a2: 62:21:5e:96:37:10:d6:b5:6c:b1:e6:e5:ef:51:b0:69:48:47: 8f:0b:58:29:2f:c5:56:c5:d7:98:19:cb:df:69:e3:00:57:63: 49:96:1f:dd:a6:d0:7f:f0:c0:87:59:a1:30:71:ad:cc:ad:95: a2:e6:f4:30:a8:64:d3:eb:61:01:b1:04:8d:40:dc:bb:bf:c5: c0:5a:2f:70:f6:27:6e:c6:3e:d4:02:15:83:06:51:42:98:fa: 09:43:34:9e:49:a1:b3:f1:c2:bd:2a:cf:ed:40:db:19:07:24: 1d:a0:00:e9:24:e3:fd:d2:ad:40:84:67:c2:72:6d:c0:94:3c: 6d:c1:20:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjUwNzAyMjMwNTQ1WhcNMjUwNzA5MjMwNTQ1WjAYMRYwFAYD VQQDEw02ODY1YmI0OS0zYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjTwMpfalTpmsIUAqLv7GJ3PnfxCIAUdzP+pIijuUE0rTKQk5KVQk9rEbUD0 p2NUPAiJ5ynlfKLvrmO7BhRa/oVoXIcnGJKX4nX3dO33v2SYmDzZYmP3tzbK8tui TgiqQsHDsnz7nMJI1EDTuVF413VXVzVgyn75Ij0jKucamcdt1DxjDOiCXptGoee9 F9ZlV/2VICLw2gD1jj67cGOd+Peew0g86N3JQuYY1gEMq39moNBvoWpUE9zlIsbO e7Xab2HqVvc239wfAltDKrIsvXTL8h3xlnIt0fWI6aNWDC51prwgbqIP67hV/W+z YKeo0gVLLgQ14GEyGejXR4CA5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD/Ezhb jEFbX0qWgRZIwBHwElEIMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvyhmRXpDlPZf17pVm5XKIWskWa4/6jMFiEfo19+oJuCbExcWZTgxO jeljOeLGLOALiGIzIkL6eZEZQE5Eo65BbizojPAGR75U16a5f6faEeVvuWkyjRX/ oMkGuC1hcWk5+T57l6iYMstxOcpDM0xN8LYdQolyHUMTa2Izv6JiIV6WNxDWtWyx 5uXvUbBpSEePC1gpL8VWxdeYGcvfaeMAV2NJlh/dptB/8MCHWaEwca3MrZWi5vQw qGTT62EBsQSNQNy7v8XAWi9w9iduxj7UAhWDBlFCmPoJQzSeSaGz8cK9Ks/tQNsZ ByQdoADpJOP90q1AhGfCcm3AlDxtwSDh -----END CERTIFICATE-----Generated at Fri Jul 4 08:25:28 2025 by rpki-client