$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: kOJ98zBH1OpZBk4sHUq+5TvcKniBsVsc2ffC/7KVRnc= Subject key identifier: 46:2A:5C:7C:77:86:26:BD:80:2D:95:C2:9C:D6:1B:09:5E:D6:AB:0E Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 0140 Signing time: Sun 29 Jun 2025 03:27:33 +0000 Manifest this update: Sun 29 Jun 2025 03:27:33 +0000 Manifest next update: Sun 06 Jul 2025 03:27:33 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 7mR7iaW5Xig8yWNe4FHgOMjvzMy1m/BEpvlL5M5Z9G8=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Jun 29 03:27:33 2025 GMT Not After : Jul 6 03:27:33 2025 GMT Subject: CN=6860b2a5-8054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:16:b4:b6:b0:b9:8e:c1:f3:c7:06:4e:8a: f0:a9:48:1e:45:26:76:12:c4:a9:ec:c3:48:26:c1: 34:cf:3d:57:95:ef:04:fd:53:54:24:3e:65:18:6b: 86:49:36:bf:f9:30:c3:a7:df:ca:c2:eb:fd:94:86: ed:78:24:6b:a9:bb:d6:c6:41:09:1f:9e:e4:3d:98: cf:91:b8:24:ca:be:88:7f:42:16:28:a5:bf:5a:4f: 48:92:27:ad:0a:88:91:6b:ff:5e:fa:c6:f0:3a:77: 35:5d:a2:f9:b0:e6:6f:8b:2a:63:d6:61:a7:d3:52: d9:e8:81:00:95:16:0b:32:4a:1b:d7:65:df:23:05: a4:84:5e:ba:b8:f7:fe:1b:4e:78:3d:2d:82:0b:d6: 5a:fc:e0:40:ce:f8:32:4d:bc:7c:95:03:6c:11:8c: 50:d6:e7:48:71:ba:f4:23:fd:31:2e:72:16:8f:5b: e3:b8:33:75:af:29:99:a7:06:39:ba:9d:36:90:43: 31:c8:cd:10:80:19:58:73:d6:87:2e:f3:24:71:2e: 95:68:26:5d:e2:0e:ad:b1:04:31:52:18:62:4a:c8: e7:7d:10:ef:dc:94:df:b2:f7:a9:e1:dd:f9:b5:d2: 2c:77:eb:4d:30:de:9a:d9:01:52:5e:09:31:12:d1: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:5C:7C:77:86:26:BD:80:2D:95:C2:9C:D6:1B:09:5E:D6:AB:0E X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:18:b7:f8:a7:30:40:49:0f:c4:47:91:ab:31:57:8b:ad:88: d4:19:00:45:2d:11:cf:b4:bf:6b:0c:0d:b3:ee:16:a5:2b:c6: 47:d0:7e:5f:4d:5d:c0:94:5e:8b:5e:80:8e:26:e3:09:47:1d: 1a:03:25:e7:d2:9b:b5:77:5a:eb:ea:63:66:47:77:4b:2f:a2: 78:39:64:88:b3:d2:42:fc:d4:55:8e:8f:30:45:6b:27:01:d8: d7:0a:5e:d7:f1:1c:cc:3d:73:02:24:18:e6:e7:9c:e7:7f:83: b2:59:1a:80:d5:1a:4a:e6:78:a2:5f:b3:3f:48:5a:04:b9:4f: 27:9d:f6:44:41:3d:1e:f2:d5:48:30:1e:08:e7:38:5e:6f:ef: 54:74:17:f9:8e:68:9b:ce:44:25:a5:e9:8c:0f:ca:d2:45:e2: 47:eb:1b:13:79:4d:09:19:ba:ef:f4:53:7c:84:62:2b:5d:bd: ce:40:14:d5:7b:6c:8c:f4:b4:04:e0:6a:41:11:c8:28:c2:e9: e0:fe:24:c6:72:7d:41:3d:5a:f9:30:30:76:5d:24:08:bb:5f: 80:46:e4:cf:7a:97:29:51:aa:c4:78:a2:03:82:c4:35:70:93: cb:4e:c7:88:e6:a8:8a:43:d1:fe:65:92:9f:dd:db:36:2f:bc: cb:a3:b3:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUwNjI5MDMyNzMzWhcNMjUwNzA2MDMyNzMzWjAYMRYwFAYD VQQDEw02ODYwYjJhNS04MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPkWtLawuY7B88cGTorwqUgeRSZ2EsSp7MNIJsE0zz1Xle8E/VNUJD5lGGuG STa/+TDDp9/Kwuv9lIbteCRrqbvWxkEJH57kPZjPkbgkyr6If0IWKKW/Wk9Ikiet CoiRa/9e+sbwOnc1XaL5sOZviypj1mGn01LZ6IEAlRYLMkob12XfIwWkhF66uPf+ G054PS2CC9Za/OBAzvgyTbx8lQNsEYxQ1udIcbr0I/0xLnIWj1vjuDN1rymZpwY5 up02kEMxyM0QgBlYc9aHLvMkcS6VaCZd4g6tsQQxUhhiSsjnfRDv3JTfsvep4d35 tdIsd+tNMN6a2QFSXgkxEtHJ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYqXHx3 hia9gC2VwpzWGwle1qsOMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0GLf4pzBASQ/ER5GrMVeLrYjUGQBFLRHPtL9rDA2z7halK8ZH0H5f TV3AlF6LXoCOJuMJRx0aAyXn0pu1d1rr6mNmR3dLL6J4OWSIs9JC/NRVjo8wRWsn AdjXCl7X8RzMPXMCJBjm55znf4OyWRqA1RpK5niiX7M/SFoEuU8nnfZEQT0e8tVI MB4I5zheb+9UdBf5jmibzkQlpemMD8rSReJH6xsTeU0JGbrv9FN8hGIrXb3OQBTV e2yM9LQE4GpBEcgowung/iTGcn1BPVr5MDB2XSQIu1+ARuTPepcpUarEeKIDgsQ1 cJPLTseI5qiKQ9H+ZZKf3ds2L7zLo7Pe -----END CERTIFICATE-----Generated at Tue Jul 1 03:18:25 2025 by rpki-client