$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json) Hash identifier: XIh14HwclkR4vNTaP2jSJJ0+vT8hX4e3uyZpHgstnrQ= Subject key identifier: C8:7B:84:C4:3A:3F:31:B6:F5:7A:DC:9D:21:0F:99:59:54:50:E4:64 Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Certificate serial: 0B90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft Manifest number: 0B89 Signing time: Wed 02 Jul 2025 15:17:33 +0000 Manifest this update: Wed 02 Jul 2025 15:17:33 +0000 Manifest next update: Wed 09 Jul 2025 15:17:33 +0000 Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: 1sxzqq7YVmni5Rq+JANUQKsFpImmdQ/2cvu8i2bVlxs=) 2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F Validity Not Before: Jul 2 15:17:33 2025 GMT Not After : Jul 9 15:17:33 2025 GMT Subject: CN=68654d8d-56ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:b3:62:28:09:54:08:c0:dd:48:41:de:5a: c8:0d:ca:98:6a:bf:bb:e6:0a:a8:60:0a:09:44:1d: 14:56:d0:48:a0:73:00:3a:d4:97:e1:d7:62:7d:98: 1e:93:9c:27:76:a6:1a:90:ca:8a:50:15:3f:de:e7: 8c:41:e6:f8:72:61:e2:2a:5c:47:14:76:a6:01:fd: ac:9e:94:90:7a:5e:89:98:2f:69:1e:30:0e:b7:dd: 56:2a:d7:01:c4:b7:6c:e7:4d:c6:de:9f:d9:8b:e4: d3:cf:e2:91:99:d7:2b:2e:de:07:b3:c9:7d:47:6e: ae:91:3f:be:17:0e:16:61:05:b7:77:11:cc:f7:87: 4e:51:4c:e5:8d:33:d1:4c:f3:36:99:0a:0b:91:48: 7a:2a:82:4e:ec:63:70:75:64:62:fc:36:c8:b5:78: c7:e9:9f:34:62:25:25:92:33:e3:ab:83:83:64:6f: 50:70:7b:76:21:8d:f5:49:4d:71:74:dc:50:8e:76: 8d:ae:be:17:f4:88:b8:12:2f:a8:2c:7d:ae:ce:73: de:7f:5a:21:7a:c9:b5:f7:9d:30:ba:b9:24:2a:0e: 6e:8f:5a:03:34:2a:33:f9:d2:4f:f4:39:fe:2b:12: 71:82:1c:06:46:cf:5c:2d:65:8a:94:0b:a2:cb:24: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7B:84:C4:3A:3F:31:B6:F5:7A:DC:9D:21:0F:99:59:54:50:E4:64 X509v3 Authority Key Identifier: keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:46:82:bd:e8:2d:e7:6e:42:67:6b:38:4f:b2:b0:3f:00:82: ac:9d:31:90:b9:32:8b:94:4a:0c:0e:5c:33:43:ea:c1:52:b5: b5:96:33:82:70:9a:d8:b2:09:03:ae:71:ea:bf:21:f3:c6:eb: 54:0a:f6:f1:03:50:52:7b:19:fe:3c:1c:d5:a1:12:89:23:a7: c3:8b:41:7a:e0:8c:e2:0e:4d:6e:af:6b:06:06:0d:be:28:ef: 37:d0:3a:cd:a6:4b:9a:c2:34:02:18:ea:5c:ee:da:c4:ab:a1: a0:e7:d8:10:69:b7:85:7f:b0:77:60:be:98:82:e0:1c:78:1b: 7d:92:33:50:e5:8d:06:7f:79:1e:83:69:9f:fa:19:5e:35:e5: b1:86:41:0f:20:d0:cf:bd:3d:f8:ea:d4:b0:3f:b0:bd:68:37: 5f:8c:4a:ae:61:18:ec:c7:a2:19:10:75:ed:5f:1b:cd:62:44: 19:7b:b3:e3:89:11:a3:36:ba:a3:ad:54:5a:fd:a4:8a:10:f6: 41:9c:fc:fa:84:69:ec:8f:aa:d0:e2:fc:42:08:bf:a5:b9:52: 5f:d0:b5:ed:bb:1f:9a:4e:f0:c3:9e:79:a2:87:67:13:7f:7c: 02:08:da:7e:da:b3:b9:0a:d9:02:6f:5c:d1:5b:41:08:2a:b8: c3:50:a6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKDdEMDQ1MTY1QjI5QTY4QUZDQjhCQTgxNTk5Q0UzMDY3 NDU0NEZEOEYwHhcNMjUwNzAyMTUxNzMzWhcNMjUwNzA5MTUxNzMzWjAYMRYwFAYD VQQDEw02ODY1NGQ4ZC01NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZSzYigJVAjA3UhB3lrIDcqYar+75gqoYAoJRB0UVtBIoHMAOtSX4ddifZge k5wndqYakMqKUBU/3ueMQeb4cmHiKlxHFHamAf2snpSQel6JmC9pHjAOt91WKtcB xLds503G3p/Zi+TTz+KRmdcrLt4Hs8l9R26ukT++Fw4WYQW3dxHM94dOUUzljTPR TPM2mQoLkUh6KoJO7GNwdWRi/DbItXjH6Z80YiUlkjPjq4ODZG9QcHt2IY31SU1x dNxQjnaNrr4X9Ii4Ei+oLH2uznPef1ohesm1950wurkkKg5uj1oDNCoz+dJP9Dn+ KxJxghwGRs9cLWWKlAuiyyTxdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh7hMQ6 PzG29XrcnSEPmVlUUORkMB8GA1UdIwQYMBaAFH0EUWWymmivy4uoFZnOMGdFRP2P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi83QTc1MEEwQTJE RDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFLX0xpNmdWbWM0d1owVkVf WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZRUlJaYkthYUtfTGk2Z1ZtYzR3WjBWRV9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi83QTc1MEEwQTJERDgxMUVBOUMzNTIwNURDNEY5QUUwMi9mUVJSWmJLYWFL X0xpNmdWbWM0d1owVkVfWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADRoK96C3nbkJnazhPsrA/AIKsnTGQuTKLlEoMDlwzQ+rBUrW1ljOC cJrYsgkDrnHqvyHzxutUCvbxA1BSexn+PBzVoRKJI6fDi0F64IziDk1ur2sGBg2+ KO830DrNpkuawjQCGOpc7trEq6Gg59gQabeFf7B3YL6YguAceBt9kjNQ5Y0Gf3ke g2mf+hleNeWxhkEPINDPvT346tSwP7C9aDdfjEquYRjsx6IZEHXtXxvNYkQZe7Pj iRGjNrqjrVRa/aSKEPZBnPz6hGnsj6rQ4vxCCL+luVJf0LXtux+aTvDDnnmih2cT f3wCCNp+2rO5CtkCb1zRW0EIKrjDUKaF -----END CERTIFICATE-----Generated at Thu Jul 3 23:28:51 2025 by rpki-client