$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: ZixY5fyk9YPcD8c07/yXuBPjbltLk+tZVa0QTATjZeE= Subject key identifier: 66:31:6B:24:3D:3F:72:7B:3D:1C:35:7F:D9:49:96:64:2F:C6:BE:80 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: 95 Signing time: Thu 03 Jul 2025 06:37:32 +0000 Manifest this update: Thu 03 Jul 2025 06:37:32 +0000 Manifest next update: Thu 10 Jul 2025 06:37:32 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: C/JtuEjciOiOIDS7lsFxu8qIcLWDIQlTw9TsJeZyyNg=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Jul 3 06:37:32 2025 GMT Not After : Jul 10 06:37:32 2025 GMT Subject: CN=6866252c-37a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:78:19:78:de:02:b5:d0:fa:0d:2e:a6:5d: 24:69:7d:c2:61:70:de:ce:7e:b4:e0:f9:6a:a5:d4: 1e:ca:8d:89:dc:b0:60:26:2e:02:87:0f:a2:f5:87: 29:6f:7a:8b:96:86:b7:4f:06:ba:96:bf:fa:2b:ec: 8e:35:fd:14:10:8f:71:ef:03:19:86:97:f7:eb:67: c9:92:c7:8d:e3:64:c2:a5:5d:a6:e2:ce:a2:cb:e0: 8d:17:6b:a6:39:2f:ce:a7:57:f0:1b:f6:7a:94:b8: 1c:13:96:5b:00:6b:76:0d:5c:85:81:3f:69:5a:c0: 85:9a:56:48:55:e8:75:d2:e9:0a:bc:0e:50:4c:55: 93:e3:5a:29:87:1e:71:26:f1:c1:2c:3d:77:cd:24: 1e:95:9d:9f:b0:83:b0:3e:1d:2b:3d:2e:87:b0:4a: 13:04:2f:eb:58:eb:37:bd:3f:05:84:d0:7e:ab:fb: b5:b3:67:b5:dc:08:d7:90:ab:bf:36:2a:ab:ca:f5: 69:c6:fc:5f:45:53:8d:00:4c:10:1f:8e:cc:c4:43: 9d:ec:5c:57:3c:8a:52:6d:46:09:21:35:a4:d0:84: 85:61:c1:65:98:3b:87:5c:4e:4b:a6:11:1c:1d:67: 59:b0:52:e4:a1:bc:a6:99:60:2f:70:d1:8b:a6:9e: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:31:6B:24:3D:3F:72:7B:3D:1C:35:7F:D9:49:96:64:2F:C6:BE:80 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:13:fd:31:20:18:1e:0d:b2:09:6f:77:50:12:38:31:9c:3f: fe:45:94:a2:f6:49:f3:b0:bd:64:06:18:90:53:a7:e7:1d:49: 3b:d4:f6:a3:7e:ec:66:8d:8c:ff:6a:e5:7a:9b:89:72:a4:ce: 11:9c:5e:0e:17:86:39:ff:c9:62:68:2f:0e:ed:74:61:6d:d7: b1:6e:fd:49:7e:f6:63:23:96:26:cc:57:20:f6:79:b6:ef:4e: ea:23:6a:d4:90:ad:7a:ff:18:48:32:95:19:a7:21:f9:05:5d: 55:22:93:e2:9a:b3:a8:b2:8d:39:39:0e:3e:d9:f5:74:45:93: f5:a6:44:c6:30:f6:d4:95:10:58:17:c8:39:fb:b6:06:f9:9a: 23:ab:2b:6d:3d:0b:18:32:d5:f7:03:35:8d:43:8f:3d:c9:8a: 8a:dc:a7:fe:c7:9e:0e:17:1c:b3:d0:1b:df:84:3f:cc:a0:bf: 69:f3:be:c3:f6:cb:8a:84:14:10:4d:44:7c:ee:21:9f:db:c9: 09:1d:04:49:ff:8e:f1:75:5a:08:37:dc:81:16:a4:63:ca:4c: 11:aa:31:23:ca:f8:65:fc:8c:78:5d:13:46:d5:2e:89:25:1e: df:3e:14:b9:96:f1:ba:e5:e4:25:ab:50:87:0c:3b:62:ce:b0: b1:39:89:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUwNzAzMDYzNzMyWhcNMjUwNzEwMDYzNzMyWjAYMRYwFAYD VQQDEw02ODY2MjUyYy0zN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIJ4GXjeArXQ+g0upl0kaX3CYXDezn604PlqpdQeyo2J3LBgJi4Chw+i9Ycp b3qLloa3Twa6lr/6K+yONf0UEI9x7wMZhpf362fJkseN42TCpV2m4s6iy+CNF2um OS/Op1fwG/Z6lLgcE5ZbAGt2DVyFgT9pWsCFmlZIVeh10ukKvA5QTFWT41ophx5x JvHBLD13zSQelZ2fsIOwPh0rPS6HsEoTBC/rWOs3vT8FhNB+q/u1s2e13AjXkKu/ NiqryvVpxvxfRVONAEwQH47MxEOd7FxXPIpSbUYJITWk0ISFYcFlmDuHXE5LphEc HWdZsFLkobymmWAvcNGLpp4N/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYxayQ9 P3J7PRw1f9lJlmQvxr6AMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnE/0xIBgeDbIJb3dQEjgxnD/+RZSi9knzsL1kBhiQU6fnHUk71Paj fuxmjYz/auV6m4lypM4RnF4OF4Y5/8liaC8O7XRhbdexbv1JfvZjI5YmzFcg9nm2 707qI2rUkK16/xhIMpUZpyH5BV1VIpPimrOoso05OQ4+2fV0RZP1pkTGMPbUlRBY F8g5+7YG+ZojqyttPQsYMtX3AzWNQ489yYqK3Kf+x54OFxyz0BvfhD/MoL9p877D 9suKhBQQTUR87iGf28kJHQRJ/47xdVoIN9yBFqRjykwRqjEjyvhl/Ix4XRNG1S6J JR7fPhS5lvG65eQlq1CHDDtizrCxOYkp -----END CERTIFICATE-----Generated at Thu Jul 3 10:52:08 2025 by rpki-client