$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft File: qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json) Hash identifier: BjltUUGe89ZJAx3D6JNHcEsUlNwteWYh7J3DodS4JeY= Subject key identifier: AF:54:6D:96:86:2C:C9:F3:03:D0:4E:31:BA:42:D8:05:16:97:47:50 Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft Manifest number: 31 Signing time: Tue 01 Jul 2025 08:28:01 +0000 Manifest this update: Tue 01 Jul 2025 08:28:01 +0000 Manifest next update: Tue 08 Jul 2025 08:28:01 +0000 Files and hashes: 1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: vwjWimT2vOANzxFdco+9ouvfwL0L87PufVetcY0lDgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Jul 1 08:28:01 2025 GMT Not After : Jul 8 08:28:01 2025 GMT Subject: CN=68639c11-8811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:5d:51:17:eb:92:b8:0f:d0:e4:0f:ce:9f: 1a:08:30:d6:e0:f6:a6:3a:57:55:fb:be:e0:1a:e2: 11:0e:0c:fa:78:37:0f:e8:cb:1a:e8:b7:f9:4e:f9: 4a:3e:13:8d:73:fc:68:f2:12:ad:4b:33:41:39:48: c8:fb:f9:63:ff:12:22:ac:4c:ee:ec:14:14:2b:81: fb:a2:8c:16:f5:43:88:3d:bd:1e:c7:ee:50:76:4f: de:d7:1d:c2:88:fd:53:c6:c8:dd:37:0f:17:37:8f: 6f:5a:de:92:b4:d8:2d:b1:64:b0:4b:1c:0b:ae:bc: 15:11:a7:f5:82:7f:0b:bc:3c:79:1b:5a:2a:ea:27: a7:1f:53:f1:d2:97:c1:bd:92:4c:55:9f:d2:d3:dc: 7d:78:4e:02:45:f8:3b:e6:81:a1:99:9f:c7:19:87: a0:4a:29:ea:60:43:bd:98:ea:dc:c2:78:2f:9a:cf: 95:79:d5:08:70:7a:28:2a:f2:e4:f2:3b:20:18:3d: 09:9d:f5:fb:50:fd:a7:9e:d6:3b:25:b2:aa:37:ed: c6:b4:7c:64:af:7d:f6:92:57:1c:ff:d7:46:04:fc: 1e:08:b7:6d:d7:ee:2f:5c:dc:76:9a:2a:11:e3:e7: dc:8a:5a:76:37:eb:95:3e:51:13:e5:21:d5:ad:03: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:54:6D:96:86:2C:C9:F3:03:D0:4E:31:BA:42:D8:05:16:97:47:50 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:24:d9:d4:ed:95:5d:bc:e6:b1:22:f2:05:78:17:44:2a:05: 44:5d:2c:0b:79:15:94:b4:e7:5d:4f:10:44:d7:0f:05:87:eb: 7a:40:95:3b:2b:d7:1c:ac:8c:70:2b:09:f6:1d:43:7f:cb:cb: e2:12:82:5f:eb:ac:08:c5:bd:cd:47:d7:72:4c:8a:ef:ce:0d: aa:12:ce:29:a4:72:60:b9:4d:99:ab:c7:59:ec:1c:05:fb:ed: b1:39:6c:59:4d:e6:ca:29:11:6f:25:05:bd:73:57:00:0f:7b: 50:29:3f:58:11:bb:5e:66:96:c2:59:ce:62:e5:e4:84:35:d0: c1:18:d9:76:8e:b7:78:84:03:72:71:34:fc:fc:04:64:87:78: 17:dc:eb:a6:5f:d3:45:a0:8b:d5:83:97:d5:3a:13:26:5e:71: 75:70:8f:04:74:37:79:c7:d9:8a:60:96:ea:6f:42:2f:e2:d9: 07:64:bd:61:bd:ee:ce:6b:bc:a8:ac:26:22:af:ae:e9:9a:46: 55:72:4e:2f:c2:9c:81:64:4b:6e:09:cd:20:c1:c2:32:db:be: 4e:a1:13:85:70:de:62:b2:ec:5e:19:79:e5:96:fc:29:26:73: 05:8f:05:a1:44:c5:ed:1a:8b:22:72:25:4e:83:3d:9e:9e:37: dc:2b:03:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTA3MDEwODI4MDFaFw0yNTA3MDgwODI4MDFaMBgxFjAUBgNV BAMTDTY4NjM5YzExLTg4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLx11RF+uSuA/Q5A/OnxoIMNbg9qY6V1X7vuAa4hEODPp4Nw/oyxrot/lO+Uo+ E41z/GjyEq1LM0E5SMj7+WP/EiKsTO7sFBQrgfuijBb1Q4g9vR7H7lB2T97XHcKI /VPGyN03Dxc3j29a3pK02C2xZLBLHAuuvBURp/WCfwu8PHkbWirqJ6cfU/HSl8G9 kkxVn9LT3H14TgJF+DvmgaGZn8cZh6BKKepgQ72Y6tzCeC+az5V51Qhweigq8uTy OyAYPQmd9ftQ/aee1jslsqo37ca0fGSvffaSVxz/10YE/B4It23X7i9c3HaaKhHj 59yKWnY365U+URPlIdWtAzALAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr1RtloYs yfMD0E4xukLYBRaXR1AwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RjcyL0NBQUYwRDRDMEUyQzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhU d1ZUSVpRdzBKck9MWTUzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwk2dTtlV285rEi8gV4F0QqBURdLAt5FZS0511PEETXDwWH63pAlTsr 1xysjHArCfYdQ3/Ly+ISgl/rrAjFvc1H13JMiu/ODaoSzimkcmC5TZmrx1nsHAX7 7bE5bFlN5sopEW8lBb1zVwAPe1ApP1gRu15mlsJZzmLl5IQ10MEY2XaOt3iEA3Jx NPz8BGSHeBfc66Zf00Wgi9WDl9U6EyZecXVwjwR0N3nH2YpglupvQi/i2QdkvWG9 7s5rvKisJiKvrumaRlVyTi/CnIFkS24JzSDBwjLbvk6hE4Vw3mKy7F4ZeeWW/Ckm cwWPBaFExe0aiyJyJU6DPZ6eN9wrA4I= -----END CERTIFICATE-----Generated at Wed Jul 2 00:40:03 2025 by rpki-client