$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json) Hash identifier: FgD1qn4IeTg1nCuqFu7GnilSCPH5ceGve/5XF4OPqN8= Subject key identifier: 44:C4:9C:A1:D8:DB:77:9A:AC:8C:A1:3D:E4:33:86:72:B1:68:1E:67 Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft Manifest number: 073A Signing time: Wed 02 Jul 2025 22:17:22 +0000 Manifest this update: Wed 02 Jul 2025 22:17:21 +0000 Manifest next update: Wed 09 Jul 2025 22:17:21 +0000 Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: 4qx9Ml189h6IlYgj+A7sIw0wFvwY3XMbjF+dtJKCoOA=) 2: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=) 3: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: NM6XJemfTUWbZD5USjCUF06iWFcxtpplXM/BhjMLwTs=) 4: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: xcv2mpFGfangjKYY2vbEm6RbSQ1lS7sMyZ3S+/1HCdM=) 5: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: wfUh86xaRMHfMPKn2xE1FPCdy3JfmptKIqIJ2TmKJxw=) 6: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: lXMyXIdfvbwQROqw/pE3PgGn2BRu07uMklJZGHe93PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF Validity Not Before: Jul 2 22:17:21 2025 GMT Not After : Jul 9 22:17:21 2025 GMT Subject: CN=6865aff2-3a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:07:ac:75:b0:25:f8:24:c5:0f:09:1e:bc: d9:8c:c6:0d:30:ce:4b:4d:ad:56:63:f4:83:df:05: f7:6c:87:09:e7:a7:87:ed:01:db:78:c8:75:98:c1: 8d:92:bc:e7:08:4c:49:df:2b:fb:f9:a1:f4:af:e7: 08:e7:8f:64:ac:c2:a4:2d:9f:20:2c:5d:1d:d9:b2: 0e:e2:31:16:a9:7f:65:81:6f:0b:4c:ab:d0:a6:11: 51:a0:14:e2:dd:83:4b:eb:72:5c:03:f8:17:82:e6: 6c:5f:30:5b:53:73:ed:e9:3b:f1:d1:72:e1:92:e0: 0b:eb:38:a0:d3:1a:8e:86:b5:f6:b1:93:18:07:02: 73:c9:3c:97:50:79:23:75:d0:38:10:ca:d3:24:9d: a0:8b:14:5c:e8:56:13:61:f4:5e:52:b3:19:55:01: f0:59:ef:48:1d:06:3f:32:31:04:e7:a0:03:5f:78: 11:ea:58:77:6b:86:da:cf:40:b2:c5:8f:cc:ff:96: ab:f4:00:53:21:ec:c3:95:b1:f6:d0:bf:71:6e:bd: d6:d8:80:72:c3:99:11:0f:82:4c:84:5b:9a:f8:6e: 23:f2:91:6c:12:2a:69:e8:45:bb:34:76:7a:e9:3a: 78:0d:99:61:03:25:2b:a0:e5:8b:0d:a2:12:52:61: 9b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:9C:A1:D8:DB:77:9A:AC:8C:A1:3D:E4:33:86:72:B1:68:1E:67 X509v3 Authority Key Identifier: keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:e5:7d:51:1f:ef:c6:23:37:5a:9e:cc:bf:b1:92:af:d2: 8c:64:ea:6c:9a:0c:d1:c1:bf:5f:6d:5f:75:3b:9b:0e:94:de: d6:5f:db:da:9e:95:89:75:dc:95:fa:8d:79:f8:a3:d2:55:cc: 8f:9a:f2:b4:3c:44:22:1f:d1:ad:7c:38:98:b7:ad:64:14:eb: 51:44:11:12:04:a9:29:4a:76:29:15:40:f7:e1:34:e7:e1:e7: c8:b0:c0:2c:5c:fa:00:57:65:68:28:73:26:9f:5b:1e:43:78: be:2e:0a:10:50:98:c7:41:9f:f1:11:4b:c5:0e:8c:10:0c:36: 36:51:79:92:7a:76:8d:17:cf:8b:5a:4f:dc:5a:41:40:b6:72: f8:2a:d1:8b:2e:3e:a6:7a:02:90:7e:6a:cb:b2:ba:1b:1a:3d: 52:b0:62:02:61:ad:57:ec:cd:af:b8:ea:57:2c:51:94:22:21: e6:6a:46:34:17:d3:11:9a:63:22:71:bc:84:2d:b5:0b:ef:15: bd:03:ad:e1:7f:9b:ed:2e:4d:f0:12:dc:d9:54:58:67:80:21: 75:5b:b6:60:df:94:3e:d6:00:d4:0b:e8:d2:61:23:dc:63:0d: db:75:9e:a2:9d:b5:50:75:cb:2b:2d:32:ca:81:55:2a:e9:37: c4:1d:e0:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcxQzIxMTAvBgNVBAUTKEE5RUFCQzI0NjUxMTZFRDExRDZDOENEQUUyMDExMjM3 Q0YxRjU5REYwHhcNMjUwNzAyMjIxNzIxWhcNMjUwNzA5MjIxNzIxWjAYMRYwFAYD VQQDEw02ODY1YWZmMi0zYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhsHrHWwJfgkxQ8JHrzZjMYNMM5LTa1WY/SD3wX3bIcJ56eH7QHbeMh1mMGN krznCExJ3yv7+aH0r+cI549krMKkLZ8gLF0d2bIO4jEWqX9lgW8LTKvQphFRoBTi 3YNL63JcA/gXguZsXzBbU3Pt6Tvx0XLhkuAL6zig0xqOhrX2sZMYBwJzyTyXUHkj ddA4EMrTJJ2gixRc6FYTYfReUrMZVQHwWe9IHQY/MjEE56ADX3gR6lh3a4baz0Cy xY/M/5ar9ABTIezDlbH20L9xbr3W2IByw5kRD4JMhFua+G4j8pFsEipp6EW7NHZ6 6Tp4DZlhAyUroOWLDaISUmGbQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETEnKHY 23earIyhPeQzhnKxaB5nMB8GA1UdIwQYMBaAFKnqvCRlEW7RHWyM2uIBEjfPH1nf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzFDMi9ERTYxNjY2ODU1 QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0RWRiSXphNGdFU044OGZX ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlcThKR1VSYnRFZGJJemE0Z0VTTjg4ZldkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzFDMi9ERTYxNjY2ODU1QTkxMUVCOTlBRkRBNURDNEY5QUUwMi9xZXE4SkdVUmJ0 RWRiSXphNGdFU044OGZXZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+OeV9UR/vxiM3Wp7Mv7GSr9KMZOpsmgzRwb9fbV91O5sOlN7WX9va npWJddyV+o15+KPSVcyPmvK0PEQiH9GtfDiYt61kFOtRRBESBKkpSnYpFUD34TTn 4efIsMAsXPoAV2VoKHMmn1seQ3i+LgoQUJjHQZ/xEUvFDowQDDY2UXmSenaNF8+L Wk/cWkFAtnL4KtGLLj6megKQfmrLsrobGj1SsGICYa1X7M2vuOpXLFGUIiHmakY0 F9MRmmMicbyELbUL7xW9A63hf5vtLk3wEtzZVFhngCF1W7Zg35Q+1gDUC+jSYSPc Yw3bdZ6inbVQdcsrLTLKgVUq6TfEHeDi -----END CERTIFICATE-----Generated at Thu Jul 3 17:18:25 2025 by rpki-client