$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft File: QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json) Hash identifier: ESZkJNm0/rNkOVV39LvZ6BJKITN39XKzZfY2vIHiSa8= Subject key identifier: 76:53:3B:5B:E3:2A:71:70:48:87:07:6B:FA:74:71:2C:10:F4:70:E9 Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft Manifest number: 043C Signing time: Thu 03 Jul 2025 00:41:15 +0000 Manifest this update: Thu 03 Jul 2025 00:41:14 +0000 Manifest next update: Thu 10 Jul 2025 00:41:14 +0000 Files and hashes: 1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: NF2YaW0yPHXWG72oZb7waGopc1F6QKitK3T7A13OBsA=) 2: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y=) 3: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: UdXjbAhF6oniMP9h+eQndIWcxlYyRMTp0LAX//sl/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Jul 3 00:41:14 2025 GMT Not After : Jul 10 00:41:14 2025 GMT Subject: CN=6865d1aa-3ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:e6:29:3f:5e:71:e4:fa:04:05:bc:8a:27: ac:a7:e0:10:d9:24:eb:b9:3d:7a:c4:bd:65:cb:d2: a9:7b:3e:5c:32:31:ca:da:0b:55:6d:d4:db:cf:3f: 8b:7b:63:36:11:ed:fc:35:a8:d9:39:3a:af:3e:70: c1:af:31:f6:a5:d3:74:bb:cb:18:7c:aa:76:03:dd: 54:67:e2:38:a6:3f:67:77:bb:d5:e1:41:59:43:68: 84:13:1b:34:2a:cb:e7:73:8e:48:64:9c:76:54:44: a1:ca:c0:35:d9:a6:08:b1:5d:f8:06:df:2c:96:05: 4b:5a:bc:13:d1:cd:24:d1:13:46:3d:49:de:36:b2: e9:4b:8c:df:38:91:0b:4b:d4:56:74:bb:72:5f:26: 18:2c:6a:9b:af:4c:69:14:b1:ce:f2:52:1a:f7:76: fb:42:b0:9f:b6:9e:db:49:58:f2:52:62:9a:7b:12: 6e:f2:66:8d:6b:40:48:e1:ee:4c:60:fb:1c:0f:bc: 71:ea:8b:76:de:26:ea:c9:92:39:1d:52:ab:63:74: 81:4f:80:50:59:27:97:92:0c:0f:32:c6:70:00:9d: d4:57:ef:59:21:24:d3:52:7d:4b:1c:06:25:09:d4: 5b:44:14:7f:34:ce:7f:05:5b:2d:85:b7:91:a4:ae: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:3B:5B:E3:2A:71:70:48:87:07:6B:FA:74:71:2C:10:F4:70:E9 X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:28:2e:98:e7:15:9c:a9:c0:0c:e2:b4:fc:b8:aa:f2:56:e8: 0c:3c:27:10:64:30:55:2c:7a:6d:54:bc:f5:e1:8d:19:84:51: b5:6f:ab:a8:65:d1:15:f0:8a:3b:b6:00:85:89:56:b8:f0:3a: b3:98:37:74:78:93:4d:09:0f:fd:7a:b6:a1:c3:69:a2:93:46: 5a:7e:be:ff:4f:e6:79:1a:b5:71:8f:17:bd:18:14:83:97:97: 9d:d6:ec:2d:df:00:09:06:c4:ce:5c:a1:76:44:8a:5e:91:2f: c3:b0:a3:2d:ea:16:ab:8a:22:6d:f1:6c:30:0b:c1:54:05:42: 98:d1:03:9d:97:b4:9e:50:44:44:d7:7d:cb:3a:1c:25:2a:ec: 11:b8:9b:94:78:cc:12:43:6c:00:cd:3b:e3:4d:47:cc:d4:13: ec:e8:03:31:59:47:53:67:30:47:32:1e:7b:b6:04:b4:12:0d: 6b:b4:5c:22:ec:41:10:b6:02:41:0a:1f:65:70:64:33:73:a9: 5a:1a:23:02:e7:14:2d:91:0e:f7:c1:01:28:66:14:e8:cb:20: f0:3e:5e:6b:9d:a1:a5:1e:a7:49:1f:fa:64:2f:94:07:f9:60: 3e:e6:cf:46:ea:27:c0:95:ec:14:5c:5d:17:37:52:1b:7d:a6: fb:88:43:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwNzAzMDA0MTE0WhcNMjUwNzEwMDA0MTE0WjAYMRYwFAYD VQQDEw02ODY1ZDFhYS0zYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydHmKT9eceT6BAW8iiesp+AQ2STruT16xL1ly9Kpez5cMjHK2gtVbdTbzz+L e2M2Ee38NajZOTqvPnDBrzH2pdN0u8sYfKp2A91UZ+I4pj9nd7vV4UFZQ2iEExs0 Ksvnc45IZJx2VEShysA12aYIsV34Bt8slgVLWrwT0c0k0RNGPUneNrLpS4zfOJEL S9RWdLtyXyYYLGqbr0xpFLHO8lIa93b7QrCftp7bSVjyUmKaexJu8maNa0BI4e5M YPscD7xx6ot23ibqyZI5HVKrY3SBT4BQWSeXkgwPMsZwAJ3UV+9ZISTTUn1LHAYl CdRbRBR/NM5/BVsthbeRpK6eKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZTO1vj KnFwSIcHa/p0cSwQ9HDpMB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzJEOS9BQTIzRkE5NjY5NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25f TVg1ZTQ0eDF0NGljSWhsLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGKC6Y5xWcqcAM4rT8uKryVugMPCcQZDBVLHptVLz14Y0ZhFG1b6uo ZdEV8Io7tgCFiVa48DqzmDd0eJNNCQ/9erahw2mik0Zafr7/T+Z5GrVxjxe9GBSD l5ed1uwt3wAJBsTOXKF2RIpekS/DsKMt6hariiJt8WwwC8FUBUKY0QOdl7SeUERE 133LOhwlKuwRuJuUeMwSQ2wAzTvjTUfM1BPs6AMxWUdTZzBHMh57tgS0Eg1rtFwi 7EEQtgJBCh9lcGQzc6laGiMC5xQtkQ73wQEoZhToyyDwPl5rnaGlHqdJH/pkL5QH +WA+5s9G6ifAlewUXF0XN1Ibfab7iEOO -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:15 2025 by rpki-client