$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: 0lF42vfU0/dk4PP5OwCMnC+/at2g+B7LurAVlmNg6bw= Subject key identifier: 3C:B5:23:97:88:4D:92:89:79:94:84:6F:40:37:CB:B6:9F:5C:92:D8 Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 017E Signing time: Sun 29 Jun 2025 02:45:34 +0000 Manifest this update: Sun 29 Jun 2025 02:45:34 +0000 Manifest next update: Sun 06 Jul 2025 02:45:34 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: uB/jk/8rmdsZXAlaIC29e+2d4LwR9nh28UdRPISVvhg=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: EAsHcyPYziRKahL54/4beVq18nLBLDrzExkB1EWt7iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Jun 29 02:45:34 2025 GMT Not After : Jul 6 02:45:34 2025 GMT Subject: CN=6860a8ce-2dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:71:49:8e:e5:3a:29:05:02:2f:8b:0d:c1: 95:d9:9d:e8:64:d1:1f:25:4a:7d:e8:29:59:57:59: 52:d3:83:b1:cc:1b:2d:37:80:30:b5:1c:cf:c9:52: 06:c8:98:b3:53:38:fd:c2:d9:21:ef:01:ea:5e:bd: 16:cb:28:5e:04:9a:86:b2:c2:15:c8:f8:c8:a3:bf: 11:fb:78:71:cb:a5:3b:7d:f3:1a:61:47:b1:54:ef: f9:8d:5a:7f:a8:fa:22:e9:3a:7c:8e:41:50:24:a5: 3d:b0:c1:c1:11:7e:e9:89:46:f8:ec:7c:81:44:4b: 81:de:d5:7e:9b:6d:f9:a5:30:c5:01:17:61:b5:9d: f7:84:e6:2a:f4:1a:47:1e:37:6e:63:89:e0:15:b8: b2:41:78:93:a6:c4:c5:32:2b:a1:e6:c8:b4:d0:33: 5b:75:d5:6e:b4:44:b7:19:1b:12:57:c3:12:39:c7: e6:c1:ce:be:7e:85:44:65:b1:2b:a4:91:14:32:19: c6:17:e9:58:85:87:cc:fb:38:08:81:18:7a:9f:91: 15:ef:3e:29:47:fa:00:91:f8:14:f0:eb:94:0f:73: 4d:12:8d:24:5b:6e:ff:4a:a1:de:61:8b:0f:b1:b9: 2a:8e:27:04:07:0b:44:39:23:9c:4b:ce:fa:57:6b: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B5:23:97:88:4D:92:89:79:94:84:6F:40:37:CB:B6:9F:5C:92:D8 X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:87:2f:92:3d:21:ef:24:fb:b6:7a:3f:c7:c9:fe:f7:ff: 5d:14:a5:16:12:3b:ea:a3:60:20:e9:05:84:07:10:9a:98:d0: ad:48:93:f9:ce:35:11:3a:9c:34:84:90:7e:67:f0:01:12:4d: 45:23:3b:bc:b6:4a:33:52:e5:a1:ff:5e:b2:25:c7:d6:f6:2b: 6d:10:f5:60:74:6c:d5:3e:f5:08:05:60:5e:52:de:39:4d:cc: f5:3f:c0:36:ed:e6:0e:6a:d2:1f:cf:c1:27:fe:05:5f:af:e0: 57:39:72:8f:c5:d0:01:4c:49:0b:bd:36:c8:40:17:91:9d:dd: 10:55:74:ee:a7:6b:18:5e:33:5a:cd:c5:b4:24:1c:45:4b:34: ca:8a:ba:2a:bd:cd:28:7c:a8:0e:45:e2:f0:30:0a:c8:80:d9: 57:f6:57:9e:0d:a5:f7:bb:7f:91:ea:57:4b:26:89:b8:a0:d0: e4:ff:a7:f7:19:c8:6b:7e:78:f9:7d:f9:de:e8:81:82:6e:b5: 05:5a:5c:a7:e9:4b:d0:75:16:0b:35:cf:51:97:16:4e:a3:99: cc:28:84:24:06:a4:93:69:41:9b:c0:ad:03:f8:55:4a:8b:86: 66:b9:07:e8:ad:df:a3:2c:60:65:ec:ae:64:8b:53:6f:54:a7: 3f:6c:1c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjUwNjI5MDI0NTM0WhcNMjUwNzA2MDI0NTM0WjAYMRYwFAYD VQQDEw02ODYwYThjZS0yZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXpxSY7lOikFAi+LDcGV2Z3oZNEfJUp96ClZV1lS04OxzBstN4AwtRzPyVIG yJizUzj9wtkh7wHqXr0WyyheBJqGssIVyPjIo78R+3hxy6U7ffMaYUexVO/5jVp/ qPoi6Tp8jkFQJKU9sMHBEX7piUb47HyBREuB3tV+m235pTDFARdhtZ33hOYq9BpH HjduY4ngFbiyQXiTpsTFMiuh5si00DNbddVutES3GRsSV8MSOcfmwc6+foVEZbEr pJEUMhnGF+lYhYfM+zgIgRh6n5EV7z4pR/oAkfgU8OuUD3NNEo0kW27/SqHeYYsP sbkqjicEBwtEOSOcS876V2uUcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy1I5eI TZKJeZSEb0A3y7afXJLYMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJkYcvkj0h7yT7tno/x8n+9/9dFKUWEjvqo2Ag6QWEBxCamNCtSJP5 zjUROpw0hJB+Z/ABEk1FIzu8tkozUuWh/16yJcfW9ittEPVgdGzVPvUIBWBeUt45 Tcz1P8A27eYOatIfz8En/gVfr+BXOXKPxdABTEkLvTbIQBeRnd0QVXTup2sYXjNa zcW0JBxFSzTKiroqvc0ofKgOReLwMArIgNlX9leeDaX3u3+R6ldLJom4oNDk/6f3 Gchrfnj5ffne6IGCbrUFWlyn6UvQdRYLNc9RlxZOo5nMKIQkBqSTaUGbwK0D+FVK i4ZmuQford+jLGBl7K5ki1NvVKc/bBwY -----END CERTIFICATE-----Generated at Mon Jun 30 09:54:09 2025 by rpki-client