$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: uhk9SZc7+kWz529xi7f2TQNMrX+mU1FWOshTjk9LdTQ= Subject key identifier: EA:23:20:EE:92:F0:95:3A:16:6F:BF:53:8A:C0:3F:91:A7:BB:2B:4D Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 0103 Signing time: Thu 03 Jul 2025 05:15:29 +0000 Manifest this update: Thu 03 Jul 2025 05:15:28 +0000 Manifest next update: Thu 10 Jul 2025 05:15:28 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: crBb2S7hO62RiMTpB+VVe9v1MmbUqvQsmVsLakbcNgY=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Jul 3 05:15:28 2025 GMT Not After : Jul 10 05:15:28 2025 GMT Subject: CN=686611f0-abee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f4:ae:5d:f1:8f:c9:5b:a5:3f:83:d8:82:46: 86:e7:7c:9b:d1:fb:cc:1c:3a:ee:c2:79:db:be:a4: 97:83:de:a4:91:eb:ab:24:a4:ad:b8:ba:9b:15:14: fa:bd:26:02:7d:d7:bb:a6:3d:e9:65:e4:47:8a:6e: 2d:4a:64:9c:11:d0:5d:10:a8:cb:7e:ec:45:c0:1e: 33:61:e4:1a:ff:6f:b8:57:0b:cb:45:42:af:08:db: e6:c0:29:c6:bd:18:67:4b:cf:da:28:59:fd:1b:5c: ed:54:81:5d:89:9e:20:e5:0b:75:a0:19:c5:cf:08: da:bb:bb:6b:00:c8:e8:42:02:95:13:30:d7:d5:54: e3:5c:bc:1c:c9:31:27:a0:37:a1:d4:0b:d9:2b:7e: f5:9b:64:fd:18:6f:2b:8f:24:5e:b6:4e:41:7c:18: 9d:75:be:b7:e6:92:bd:74:0d:f4:00:e1:78:51:ec: a5:52:75:dc:5f:b0:7f:16:d5:cc:e5:d7:21:21:ff: d8:4b:25:8f:dd:45:4d:06:a8:31:16:2e:c2:e5:3c: 9b:fe:f3:df:b1:0e:6e:f2:ff:65:76:81:97:77:d9: 59:11:ad:db:f9:c9:0f:7e:75:81:9b:29:82:f8:c7: c2:b4:1f:f0:32:d0:4b:09:39:f8:8c:69:68:fe:d1: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:23:20:EE:92:F0:95:3A:16:6F:BF:53:8A:C0:3F:91:A7:BB:2B:4D X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:4f:74:16:96:d5:83:83:d8:e1:f2:6b:da:41:5f:a6:cd:06: c2:fd:6c:40:e5:cb:9a:27:6c:2b:1b:63:62:7f:0a:0a:fd:fe: 65:40:47:40:33:dc:7b:03:d2:50:b3:cf:50:5b:ac:86:d7:f2: 1b:d8:53:99:b4:97:95:75:a4:0e:27:74:46:03:ed:7e:4d:b6: 90:d1:a1:34:f6:11:7f:2a:28:4c:dc:c3:69:a4:f3:6e:a4:49: 35:11:49:54:af:9a:df:bc:f0:d1:e0:c2:ff:f9:ac:d0:a3:eb: 61:f1:9c:30:05:33:4f:2d:f6:02:c5:89:b8:9f:1a:6f:ab:d1: 90:6c:e5:21:c3:aa:c7:f3:1e:c8:be:1b:7b:f5:86:02:86:ef: 4c:8b:5d:b4:16:5d:a2:ae:35:58:e5:13:3a:1f:78:ff:53:88: 76:26:a9:d1:2c:c0:69:da:a7:48:4b:0d:69:7e:72:52:1d:15: 81:c1:67:77:ec:67:2d:f5:96:07:f7:e8:f4:2c:21:98:69:41: 66:0b:6c:1f:aa:a3:66:6d:d6:3b:39:1d:40:e3:7b:d0:3e:91: dc:84:05:d3:6e:bb:65:f5:ea:1b:9c:49:7b:a5:75:84:56:97: 46:50:b2:d3:08:dc:1a:68:0a:1e:a7:55:e8:e4:ec:58:e1:06: 72:bd:0d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUwNzAzMDUxNTI4WhcNMjUwNzEwMDUxNTI4WjAYMRYwFAYD VQQDEw02ODY2MTFmMC1hYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/SuXfGPyVulP4PYgkaG53yb0fvMHDruwnnbvqSXg96kkeurJKStuLqbFRT6 vSYCfde7pj3pZeRHim4tSmScEdBdEKjLfuxFwB4zYeQa/2+4VwvLRUKvCNvmwCnG vRhnS8/aKFn9G1ztVIFdiZ4g5Qt1oBnFzwjau7trAMjoQgKVEzDX1VTjXLwcyTEn oDeh1AvZK371m2T9GG8rjyRetk5BfBiddb635pK9dA30AOF4UeylUnXcX7B/FtXM 5dchIf/YSyWP3UVNBqgxFi7C5Tyb/vPfsQ5u8v9ldoGXd9lZEa3b+ckPfnWBmymC +MfCtB/wMtBLCTn4jGlo/tEgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOojIO6S 8JU6Fm+/U4rAP5GnuytNMB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCT3QWltWDg9jh8mvaQV+mzQbC/WxA5cuaJ2wrG2NifwoK/f5lQEdA M9x7A9JQs89QW6yG1/Ib2FOZtJeVdaQOJ3RGA+1+TbaQ0aE09hF/KihM3MNppPNu pEk1EUlUr5rfvPDR4ML/+azQo+th8ZwwBTNPLfYCxYm4nxpvq9GQbOUhw6rH8x7I vht79YYChu9Mi120Fl2irjVY5RM6H3j/U4h2JqnRLMBp2qdISw1pfnJSHRWBwWd3 7Gct9ZYH9+j0LCGYaUFmC2wfqqNmbdY7OR1A43vQPpHchAXTbrtl9eobnEl7pXWE VpdGULLTCNwaaAoep1Xo5OxY4QZyvQ1s -----END CERTIFICATE-----Generated at Fri Jul 4 21:39:14 2025 by rpki-client