$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: z+rVLlx6EvUF7lGPeFUz3Z22Z0x85NdcBX36atT2ONg= Subject key identifier: 27:88:4A:F8:D2:81:DF:63:C1:18:51:51:C5:8A:C8:3B:88:75:9A:42 Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0438 Signing time: Tue 01 Jul 2025 00:53:37 +0000 Manifest this update: Tue 01 Jul 2025 00:53:36 +0000 Manifest next update: Tue 08 Jul 2025 00:53:36 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: HFFbDn3Qgo/Yc8CopYR03awq+X6X+CUVkNybVack+Hg=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: Jul 1 00:53:36 2025 GMT Not After : Jul 8 00:53:36 2025 GMT Subject: CN=68633190-8503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1a:e0:13:5c:38:37:f6:00:78:c8:51:1d:a8: 20:01:b4:c8:a0:e0:c8:f3:fc:8f:36:bb:5c:1b:d2: 60:9f:3f:3b:fb:76:a8:8c:05:6b:ca:ec:2c:af:3a: e6:8f:b7:f7:91:8b:be:6b:e8:6f:b2:a5:06:6e:fb: 3b:23:72:ce:17:7a:cf:18:71:b4:00:aa:63:b1:2b: fa:c5:5c:96:a5:0d:b8:08:ac:ff:75:09:f1:5d:64: b1:78:dd:ce:e9:6a:22:65:f3:c1:dd:18:f0:02:ec: d0:e8:0a:73:98:c3:23:21:1b:09:11:52:28:35:70: df:29:f3:04:cb:26:04:57:2a:1c:ee:d9:db:2f:68: 5d:83:f9:fb:b1:3f:a0:c8:17:67:2e:56:1c:29:61: de:38:d9:30:30:46:9d:cd:91:98:6d:fa:77:ec:72: 80:23:c3:47:a5:a5:6e:2a:70:8c:19:6e:d4:0c:8e: bb:4d:6b:7a:0b:96:ca:c1:2d:3a:c5:b7:eb:23:cd: f0:71:0b:44:0e:00:e2:2e:72:5f:c9:e2:cb:88:f1: 09:66:16:13:d6:ab:bb:72:5e:a0:4a:98:e7:38:94: ce:e1:2f:a7:2c:98:db:e7:2c:46:40:af:3f:06:a0: 10:fd:0e:8a:b3:ee:f8:78:25:c0:7e:75:e8:de:58: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:4A:F8:D2:81:DF:63:C1:18:51:51:C5:8A:C8:3B:88:75:9A:42 X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d9:96:c9:d1:96:d7:f6:9b:8c:3d:9a:1b:28:e1:0a:26:e7: 47:72:1d:28:c0:a5:f0:b6:92:00:8a:b1:49:fd:bd:a3:57:3d: 5d:3e:d2:3b:18:c3:55:41:72:58:7f:62:66:86:64:00:b4:19: 8d:59:7e:06:fb:f4:ae:1b:9c:e4:7c:bd:84:99:b1:be:e4:10: 5a:d4:71:75:fd:1a:07:93:27:23:32:3a:1a:a2:a3:1d:d7:a1: 42:c4:79:5e:ef:04:65:79:a6:3a:16:d8:c7:07:3d:f3:9c:f1: ff:a0:a0:44:9d:72:e4:57:90:18:9f:1b:c7:1c:30:88:a6:fe: f0:95:58:86:f5:e9:71:9b:2e:05:a8:32:4c:ab:e4:84:3e:c8: af:83:c0:6f:43:a9:11:02:fa:d7:36:e9:8a:8c:56:ea:3d:af: 04:5a:e5:5e:d7:c1:4e:18:69:94:ee:9c:91:1e:09:76:67:67: 73:3f:0c:e5:26:83:9b:20:5e:c3:62:cf:93:fe:68:0a:78:e7: 58:3d:a7:4b:ee:7d:df:1e:c2:80:a3:32:db:9e:84:9e:bb:65: 17:23:83:9e:8c:f0:db:13:25:bb:df:11:03:2e:17:4a:79:a9: 33:5f:ee:55:6e:55:ba:e1:59:49:7d:8a:df:d6:53:f0:c3:dc: ed:0e:45:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUwNzAxMDA1MzM2WhcNMjUwNzA4MDA1MzM2WjAYMRYwFAYD VQQDEw02ODYzMzE5MC04NTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhrgE1w4N/YAeMhRHaggAbTIoODI8/yPNrtcG9Jgnz87+3aojAVryuwsrzrm j7f3kYu+a+hvsqUGbvs7I3LOF3rPGHG0AKpjsSv6xVyWpQ24CKz/dQnxXWSxeN3O 6WoiZfPB3RjwAuzQ6ApzmMMjIRsJEVIoNXDfKfMEyyYEVyoc7tnbL2hdg/n7sT+g yBdnLlYcKWHeONkwMEadzZGYbfp37HKAI8NHpaVuKnCMGW7UDI67TWt6C5bKwS06 xbfrI83wcQtEDgDiLnJfyeLLiPEJZhYT1qu7cl6gSpjnOJTO4S+nLJjb5yxGQK8/ BqAQ/Q6Ks+74eCXAfnXo3lgQeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeISvjS gd9jwRhRUcWKyDuIdZpCMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2ZbJ0ZbX9puMPZobKOEKJudHch0owKXwtpIAirFJ/b2jVz1dPtI7 GMNVQXJYf2JmhmQAtBmNWX4G+/SuG5zkfL2EmbG+5BBa1HF1/RoHkycjMjoaoqMd 16FCxHle7wRleaY6FtjHBz3znPH/oKBEnXLkV5AYnxvHHDCIpv7wlViG9elxmy4F qDJMq+SEPsivg8BvQ6kRAvrXNumKjFbqPa8EWuVe18FOGGmU7pyRHgl2Z2dzPwzl JoObIF7DYs+T/mgKeOdYPadL7n3fHsKAozLbnoSeu2UXI4OejPDbEyW73xEDLhdK eakzX+5VblW64VlJfYrf1lPww9ztDkUK -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:44 2025 by rpki-client