$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: R9p0tGIIbiRUh+HlhF7AmhHluNjHgT+aSaSwqPiCYcU= Subject key identifier: A4:9F:82:22:23:36:6C:29:E8:BD:F2:98:55:F8:36:6A:04:30:40:EA Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 19FD Signing time: Wed 02 Jul 2025 16:29:55 +0000 Manifest this update: Wed 02 Jul 2025 16:29:55 +0000 Manifest next update: Wed 09 Jul 2025 16:29:55 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: 6ALRuPumkpQd1JpIda5DvKg+jV53ro58QF36jGb+R6Y=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6660 (0x1a04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Jul 2 16:29:55 2025 GMT Not After : Jul 9 16:29:55 2025 GMT Subject: CN=68655e83-a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:f6:c3:e2:82:d2:36:53:70:9e:6e:13:85: 14:8a:1b:c9:c3:31:b5:2f:45:45:cb:d5:b6:c6:47: b0:3a:d8:fb:43:7f:dc:06:9b:e9:98:25:14:86:78: dc:fb:ab:eb:24:14:a4:ef:7b:83:40:8c:37:6c:7f: d8:8a:75:43:8e:4e:4b:c5:d6:66:db:a8:e8:80:3e: f1:55:3a:60:25:1f:a0:86:1e:a9:53:ef:a5:fa:61: 48:71:43:5a:1a:00:99:ef:0d:9b:7d:7d:d2:fc:5b: c5:36:62:da:23:1b:d1:ee:51:3e:f8:63:e6:f1:0d: 7a:54:45:57:2f:7c:0d:35:03:d3:0e:52:ba:dd:40: 80:93:99:6d:74:82:ee:17:2e:14:c7:0d:ba:38:77: 90:74:4e:6d:ca:14:8e:22:bb:60:f9:ce:5d:7f:aa: ed:a1:47:b6:54:37:aa:09:d4:e4:67:8b:ee:cf:d8: 86:cb:48:0a:e8:f4:db:19:3c:61:87:43:04:03:48: ef:08:7c:e0:d9:d4:7f:e2:90:d7:d4:18:60:8c:cd: 73:af:37:e3:fc:de:35:24:e5:45:bf:89:c4:a7:62: 1c:68:c4:57:7b:4e:e7:01:1b:9f:cd:e2:d1:57:f5: 3f:73:4e:ca:d0:18:4b:9c:0a:23:61:71:29:4a:42: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:82:22:23:36:6C:29:E8:BD:F2:98:55:F8:36:6A:04:30:40:EA X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c4:65:e3:be:01:7f:c3:5d:17:63:d4:ea:b5:16:3a:6f:1e: a7:e7:e8:19:5f:a0:93:50:8d:06:c9:2b:07:d2:af:fb:de:b9: 76:3d:17:5b:8f:ed:5d:19:51:a8:6d:b5:40:95:9b:ae:b8:92: 49:c5:48:9d:3c:79:e1:0d:13:68:c7:f2:3c:3a:f2:4b:db:8b: dc:4e:e8:50:aa:6b:ac:4c:20:d0:9a:21:50:f6:2e:6e:d1:db: cb:a2:5e:04:ce:16:75:d9:51:1b:35:d8:69:f1:7a:a9:9c:c5: 99:c1:5a:07:dd:6b:cb:37:15:38:72:f7:ed:9c:d4:2b:e4:ca: 59:c0:37:a1:70:af:23:18:74:9c:cf:47:a3:d2:e2:c0:80:70: 02:67:93:5f:76:68:d8:5b:e2:e4:cd:9a:ea:d0:60:7e:49:db: ea:79:04:0b:23:60:3e:d2:50:7c:b8:58:59:b6:bc:ac:86:a1: 7c:c4:cf:da:c7:f1:6c:cc:05:3f:cd:15:89:f1:28:41:1b:79: d5:ec:4d:a5:12:9e:31:18:6c:54:a7:87:46:70:fb:3d:cf:16: a4:73:40:28:36:2d:56:de:d1:35:ce:0d:63:95:80:b0:2b:44: 5e:ff:2d:b8:d6:2a:99:b5:e8:0b:4b:9f:3f:c7:8f:db:93:bc: 18:1b:59:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUwNzAyMTYyOTU1WhcNMjUwNzA5MTYyOTU1WjAYMRYwFAYD VQQDEw02ODY1NWU4My1hNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC/2w+KC0jZTcJ5uE4UUihvJwzG1L0VFy9W2xkewOtj7Q3/cBpvpmCUUhnjc +6vrJBSk73uDQIw3bH/YinVDjk5LxdZm26jogD7xVTpgJR+ghh6pU++l+mFIcUNa GgCZ7w2bfX3S/FvFNmLaIxvR7lE++GPm8Q16VEVXL3wNNQPTDlK63UCAk5ltdILu Fy4Uxw26OHeQdE5tyhSOIrtg+c5df6rtoUe2VDeqCdTkZ4vuz9iGy0gK6PTbGTxh h0MEA0jvCHzg2dR/4pDX1BhgjM1zrzfj/N41JOVFv4nEp2IcaMRXe07nARufzeLR V/U/c07K0BhLnAojYXEpSkKC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSfgiIj Nmwp6L3ymFX4NmoEMEDqMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxGXjvgF/w10XY9TqtRY6bx6n5+gZX6CTUI0GySsH0q/73rl2PRdb j+1dGVGobbVAlZuuuJJJxUidPHnhDRNox/I8OvJL24vcTuhQqmusTCDQmiFQ9i5u 0dvLol4EzhZ12VEbNdhp8XqpnMWZwVoH3WvLNxU4cvftnNQr5MpZwDehcK8jGHSc z0ej0uLAgHACZ5NfdmjYW+LkzZrq0GB+SdvqeQQLI2A+0lB8uFhZtryshqF8xM/a x/FszAU/zRWJ8ShBG3nV7E2lEp4xGGxUp4dGcPs9zxakc0AoNi1W3tE1zg1jlYCw K0Re/y241iqZtegLS58/x4/bk7wYG1mZ -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:29 2025 by rpki-client