$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: 3i05piKbjxHwARJIqn43QmMVwB/VULlEqRHzevqiJqg= Subject key identifier: EE:0F:E5:DC:B9:20:33:3D:AE:12:6F:46:40:3D:09:CD:45:78:62:52 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 0143 Signing time: Thu 03 Jul 2025 04:57:30 +0000 Manifest this update: Thu 03 Jul 2025 04:57:29 +0000 Manifest next update: Thu 10 Jul 2025 04:57:29 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: ZK/1CE35zUR97ATpf7hEhYGKxieRP325hc8BuP5Gp6E=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Jul 3 04:57:29 2025 GMT Not After : Jul 10 04:57:29 2025 GMT Subject: CN=68660db9-d7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:fb:8e:1b:75:11:90:ee:28:43:c6:a9:a7: 7a:f7:b7:97:79:70:4e:25:54:eb:a4:40:af:e8:1a: 0d:94:8e:14:ed:5d:a2:af:67:be:ea:46:c6:bd:f5: bf:6f:24:b1:cc:78:45:f1:3c:35:5d:75:eb:26:a4: d4:84:4e:b0:15:a8:2a:02:79:83:f0:77:62:7b:22: 52:aa:f3:3a:95:91:9a:7f:89:a0:96:de:e3:73:17: 02:79:dc:b9:9f:21:7b:24:f3:ec:be:f9:36:d4:ee: 51:97:c1:38:7b:ec:24:cf:50:97:65:8f:32:c6:87: a9:42:86:6b:f9:1b:bd:d3:b9:3f:9d:50:31:28:3e: 39:33:30:9b:75:96:1f:0b:34:37:c6:64:f9:b2:c8: b6:4b:32:f1:17:8c:20:87:9c:29:44:71:3f:6d:76: b9:76:bd:f6:74:d7:a4:21:6a:f9:23:e2:0c:80:76: c4:f2:36:d8:1d:f8:b3:81:71:49:27:ef:5c:f2:6e: f9:13:a5:c2:ab:46:b2:09:45:f7:bf:d7:68:a2:29: 30:cd:55:72:5c:c0:21:9d:2d:ca:53:c7:a3:bf:14: 13:e6:fe:f8:09:aa:70:d5:28:19:7e:9a:dd:1b:d9: c8:eb:82:d3:b7:3a:3d:06:d5:43:28:1f:30:74:ba: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0F:E5:DC:B9:20:33:3D:AE:12:6F:46:40:3D:09:CD:45:78:62:52 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:40:3e:8d:c9:2e:8b:6d:fa:40:70:89:4c:fe:e1:2f:c1:a4: ed:5f:63:23:76:d7:3a:a1:d4:2d:a7:b7:c4:f1:02:d2:84:50: ae:13:3e:95:51:fd:e4:99:8f:a4:f6:30:b6:bc:17:02:de:91: 35:df:39:4e:bc:76:57:04:8d:19:2b:b7:64:27:a1:92:96:5b: 0d:08:e0:f8:d0:5c:b5:79:8e:a1:a5:38:5a:e6:39:31:8a:4c: ee:07:11:5a:0b:f0:3b:f9:94:d5:6a:ac:2a:b0:d2:ac:dd:ce: db:5f:3c:72:74:fd:1e:41:23:a2:0c:81:65:f4:35:0d:11:5f: 79:de:c6:20:64:96:45:ee:09:e6:1f:ee:3e:6a:a9:cb:b1:97: 8c:a6:3e:28:b3:c4:fd:62:e3:28:b2:82:94:63:9d:68:9f:8a: 5f:64:f1:ce:ac:f3:72:4d:9d:6f:71:37:4f:3c:ad:92:30:c6: 7e:77:6d:d7:51:3b:90:85:b9:12:17:af:cb:4b:b5:8e:17:c6: 12:85:ce:4a:88:ba:85:ec:d3:c4:68:05:11:e2:7e:79:5b:78: 76:8d:cd:e8:06:06:82:5e:86:ee:fd:66:a0:36:80:1d:52:52: 15:6c:74:60:4a:c5:0d:00:af:8b:b7:2a:e3:59:9d:ae:18:ea: 26:17:f4:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUwNzAzMDQ1NzI5WhcNMjUwNzEwMDQ1NzI5WjAYMRYwFAYD VQQDEw02ODY2MGRiOS1kN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOH7jht1EZDuKEPGqad697eXeXBOJVTrpECv6BoNlI4U7V2ir2e+6kbGvfW/ bySxzHhF8Tw1XXXrJqTUhE6wFagqAnmD8HdieyJSqvM6lZGaf4mglt7jcxcCedy5 nyF7JPPsvvk21O5Rl8E4e+wkz1CXZY8yxoepQoZr+Ru907k/nVAxKD45MzCbdZYf CzQ3xmT5ssi2SzLxF4wgh5wpRHE/bXa5dr32dNekIWr5I+IMgHbE8jbYHfizgXFJ J+9c8m75E6XCq0ayCUX3v9dooikwzVVyXMAhnS3KU8ejvxQT5v74Capw1SgZfprd G9nI64LTtzo9BtVDKB8wdLqLyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4P5dy5 IDM9rhJvRkA9Cc1FeGJSMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMQD6NyS6LbfpAcIlM/uEvwaTtX2Mjdtc6odQtp7fE8QLShFCuEz6V Uf3kmY+k9jC2vBcC3pE13zlOvHZXBI0ZK7dkJ6GSllsNCOD40Fy1eY6hpTha5jkx ikzuBxFaC/A7+ZTVaqwqsNKs3c7bXzxydP0eQSOiDIFl9DUNEV953sYgZJZF7gnm H+4+aqnLsZeMpj4os8T9YuMosoKUY51on4pfZPHOrPNyTZ1vcTdPPK2SMMZ+d23X UTuQhbkSF6/LS7WOF8YShc5KiLqF7NPEaAUR4n55W3h2jc3oBgaCXobu/WagNoAd UlIVbHRgSsUNAK+LtyrjWZ2uGOomF/Sz -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:12 2025 by rpki-client