$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft File: qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json) Hash identifier: 0dGMaBT1EkoGFyUqe7CvaeBkNgQ9tyCJUPp8tSg1H3U= Subject key identifier: 58:E4:4C:DC:8B:EC:85:49:67:51:C9:75:F1:E3:13:66:8B:03:73:D2 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft Manifest number: FF Signing time: Thu 03 Jul 2025 05:21:38 +0000 Manifest this update: Thu 03 Jul 2025 05:21:38 +0000 Manifest next update: Thu 10 Jul 2025 05:21:38 +0000 Files and hashes: 1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: /rlpa4zNl3dYlvUgqULeEgFtUSd1ld5fRzcP92TszOc=) 2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Jul 3 05:21:38 2025 GMT Not After : Jul 10 05:21:38 2025 GMT Subject: CN=68661362-32d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:90:dc:a2:49:e2:69:ef:ce:4d:88:4b:84:2a: b8:eb:4a:be:0e:d3:3e:70:bf:fa:3b:80:ae:af:0d: ec:f1:10:ae:a4:d6:d6:55:3b:48:c8:05:e3:61:36: ea:6d:f2:18:fe:09:59:b3:ea:18:ed:96:2a:dd:b2: 86:72:0a:3e:0c:23:17:25:88:dd:53:15:98:c7:19: cc:58:48:10:33:51:cb:e2:62:11:dd:43:b4:c5:8f: 56:1f:2f:b8:fd:e1:1a:0e:5b:c1:08:0e:90:be:41: 40:f1:4b:67:b1:d2:83:c3:82:7d:44:68:0a:22:cc: 28:9c:a6:46:86:17:5e:de:b0:8c:db:b8:ff:9a:0a: 96:42:94:d9:88:30:89:30:38:3c:4a:00:65:98:c0: 90:10:a5:40:fc:ce:76:79:5a:d2:74:53:94:42:d6: fd:5d:08:97:d1:e5:fa:9c:dd:c7:1e:cc:a7:e0:c8: 4a:43:11:5d:58:36:4e:6d:6e:92:1d:32:39:fd:f1: 5c:19:b1:b6:15:40:52:9d:c7:ca:15:db:20:15:20: 03:83:11:f6:a6:7c:f3:12:c3:ff:10:b2:b2:af:e5: 81:7c:bd:30:2f:6c:51:34:1c:af:7a:a9:a1:4e:f5: bd:ec:c1:db:74:17:48:b1:26:5e:2d:83:75:80:08: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:4C:DC:8B:EC:85:49:67:51:C9:75:F1:E3:13:66:8B:03:73:D2 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0d:12:31:7f:fe:2a:48:df:9b:b7:92:36:36:fa:7d:ae:3d: a1:69:bd:9f:fd:5d:ee:22:82:e8:d1:ad:06:d0:da:be:f0:83: 2f:24:3f:f1:5c:eb:43:b0:12:3c:8e:7f:5a:ff:a8:31:22:12: bd:6c:cc:a5:e1:4a:74:00:1a:49:48:49:23:ec:f8:3c:6e:a5: 05:b6:45:25:2e:6c:30:2c:8b:10:f2:31:78:e8:00:d4:f6:3b: 10:e6:57:f0:b5:c9:50:0f:bc:7d:f2:87:d3:d4:ac:dc:b0:15: 53:3d:7c:f2:13:43:a7:33:d6:2d:75:9a:3d:fb:49:41:73:9b: 1e:10:bd:40:cd:f7:e8:a4:ea:8f:6a:c2:97:8b:cf:65:91:22: 4f:87:c0:1a:3f:c6:78:fd:27:8b:f9:34:a3:0a:e9:de:2f:06: 12:16:b9:7f:af:93:7b:71:0e:b2:59:24:57:43:93:62:3a:6f: e2:d8:28:d3:df:ad:be:01:37:bd:d1:55:f8:f8:b5:15:6f:48: d8:87:9c:e4:92:20:89:62:8d:e7:d3:1b:2d:ee:d2:10:ef:13: 5d:29:ad:cf:6c:2b:a8:ce:78:01:36:06:35:74:4d:37:4d:93: 49:ab:c5:eb:f4:d4:0a:2a:3e:fd:cd:21:f9:71:b2:30:99:b9: eb:af:fa:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUwNzAzMDUyMTM4WhcNMjUwNzEwMDUyMTM4WjAYMRYwFAYD VQQDEw02ODY2MTM2Mi0zMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JDcokniae/OTYhLhCq460q+DtM+cL/6O4Curw3s8RCupNbWVTtIyAXjYTbq bfIY/glZs+oY7ZYq3bKGcgo+DCMXJYjdUxWYxxnMWEgQM1HL4mIR3UO0xY9WHy+4 /eEaDlvBCA6QvkFA8UtnsdKDw4J9RGgKIswonKZGhhde3rCM27j/mgqWQpTZiDCJ MDg8SgBlmMCQEKVA/M52eVrSdFOUQtb9XQiX0eX6nN3HHsyn4MhKQxFdWDZObW6S HTI5/fFcGbG2FUBSncfKFdsgFSADgxH2pnzzEsP/ELKyr+WBfL0wL2xRNByveqmh TvW97MHbdBdIsSZeLYN1gAgKDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjkTNyL 7IVJZ1HJdfHjE2aLA3PSMB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DRIxf/4qSN+bt5I2Nvp9rj2hab2f/V3uIoLo0a0G0Nq+8IMvJD/x XOtDsBI8jn9a/6gxIhK9bMyl4Up0ABpJSEkj7Pg8bqUFtkUlLmwwLIsQ8jF46ADU 9jsQ5lfwtclQD7x98ofT1KzcsBVTPXzyE0OnM9YtdZo9+0lBc5seEL1AzffopOqP asKXi89lkSJPh8AaP8Z4/SeL+TSjCuneLwYSFrl/r5N7cQ6yWSRXQ5NiOm/i2CjT 362+ATe90VX4+LUVb0jYh5zkkiCJYo3n0xst7tIQ7xNdKa3PbCuozngBNgY1dE03 TZNJq8Xr9NQKKj79zSH5cbIwmbnrr/rP -----END CERTIFICATE-----Generated at Fri Jul 4 10:50:07 2025 by rpki-client