$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: fzOIBQwVQ41MYHbyLZ/PWHJjZgQ+iu0aFZ1ygTLXfV0= Subject key identifier: 90:E3:11:A4:AA:3F:59:36:F6:51:67:DE:10:B7:94:93:84:03:5A:0A Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C2C Signing time: Wed 02 Jul 2025 18:51:46 +0000 Manifest this update: Wed 02 Jul 2025 18:51:46 +0000 Manifest next update: Wed 09 Jul 2025 18:51:46 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: y1rxI7XaDZqECCKpzOlu9HaIVjGgRTB1K154iKuJa2M=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3126 (0xc36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Jul 2 18:51:46 2025 GMT Not After : Jul 9 18:51:46 2025 GMT Subject: CN=68657fc2-a8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:89:b2:ad:7c:15:55:fe:49:51:0a:fe:a6: ed:76:b3:39:a1:38:ba:53:06:8c:1d:39:77:68:45: 16:50:82:86:a6:75:c5:bf:74:7e:5a:16:a9:48:29: 8b:b3:05:3b:87:97:da:bb:e9:d3:85:34:77:05:50: ea:ab:09:bc:fc:f3:fb:0a:eb:cb:c6:9e:5e:82:80: 02:25:69:e9:ec:75:78:85:ed:04:6b:c2:3c:e8:56: 66:74:8a:e5:72:fb:4c:07:cc:c4:82:a7:16:04:7a: 31:c5:05:0b:43:1f:49:64:0e:fe:54:3d:59:8f:03: fe:1c:00:4a:1f:b1:e9:09:cd:f9:f9:13:2b:64:44: fe:fd:12:03:5c:73:b1:b4:33:25:ba:1b:15:34:59: 64:f8:2f:77:5a:c8:d1:09:ae:ab:7f:18:f4:5d:e5: 76:4d:04:5d:54:ef:15:e8:57:22:63:65:28:ea:c9: f5:78:b2:56:25:6d:ca:5d:3a:5f:f9:c9:3c:87:ef: e3:b0:30:f5:a2:bc:8e:13:e5:d9:07:6b:40:fa:1f: 13:71:50:e4:64:97:ec:51:52:d9:ca:e5:a5:75:09: 80:55:22:d8:dc:8d:48:27:34:6c:32:40:05:1a:cf: e4:70:a8:b0:2f:09:01:3a:38:95:74:df:2c:9d:03: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E3:11:A4:AA:3F:59:36:F6:51:67:DE:10:B7:94:93:84:03:5A:0A X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:11:24:57:30:97:49:6e:c7:1b:e7:5d:33:db:c0:2d:6f:a5: f3:57:5e:3f:0e:e1:8d:39:9f:c2:78:f2:b5:9d:df:c6:33:ea: 9e:d6:03:9b:48:59:d5:c0:ab:b2:2e:65:e6:33:15:da:5b:3c: 92:9d:58:5e:4b:1e:be:c2:ce:8b:b0:f5:19:e8:d6:87:6d:a1: 54:03:da:2f:f3:df:92:40:42:d1:d7:78:f3:e0:09:df:ad:54: 21:cc:98:e3:10:87:5f:cf:2a:eb:08:14:bc:68:84:98:74:2c: 2c:dd:13:95:30:ee:59:32:bd:bb:bd:74:bb:5f:4a:35:d5:62: 15:3d:5c:04:ef:ac:2c:79:82:7d:d2:80:90:cd:48:76:49:dc: c0:ea:b1:0e:24:9a:2a:90:78:c5:a9:4e:55:ea:c3:37:db:ef: ff:35:c2:a1:96:51:a7:e2:42:ab:49:29:05:c9:cd:7e:10:23: 86:c3:26:9a:86:ef:81:b1:d6:b0:0e:b6:21:eb:d8:2c:ff:1c: 33:ed:c7:79:3b:28:82:15:00:95:0f:d4:f6:a3:84:9d:ff:24: 40:10:66:1e:59:a1:61:40:fd:e1:84:e3:02:33:4c:30:87:0d: 43:9e:1f:5b:16:7d:f9:38:37:3d:12:c5:75:bd:99:5b:68:5a: cd:7f:36:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUwNzAyMTg1MTQ2WhcNMjUwNzA5MTg1MTQ2WjAYMRYwFAYD VQQDEw02ODY1N2ZjMi1hOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sWJsq18FVX+SVEK/qbtdrM5oTi6UwaMHTl3aEUWUIKGpnXFv3R+WhapSCmL swU7h5fau+nThTR3BVDqqwm8/PP7CuvLxp5egoACJWnp7HV4he0Ea8I86FZmdIrl cvtMB8zEgqcWBHoxxQULQx9JZA7+VD1ZjwP+HABKH7HpCc35+RMrZET+/RIDXHOx tDMluhsVNFlk+C93WsjRCa6rfxj0XeV2TQRdVO8V6FciY2Uo6sn1eLJWJW3KXTpf +ck8h+/jsDD1oryOE+XZB2tA+h8TcVDkZJfsUVLZyuWldQmAVSLY3I1IJzRsMkAF Gs/kcKiwLwkBOjiVdN8snQP3wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDjEaSq P1k29lFn3hC3lJOEA1oKMB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCESRXMJdJbscb510z28Atb6XzV14/DuGNOZ/CePK1nd/GM+qe1gOb SFnVwKuyLmXmMxXaWzySnVheSx6+ws6LsPUZ6NaHbaFUA9ov89+SQELR13jz4Anf rVQhzJjjEIdfzyrrCBS8aISYdCws3ROVMO5ZMr27vXS7X0o11WIVPVwE76wseYJ9 0oCQzUh2SdzA6rEOJJoqkHjFqU5V6sM32+//NcKhllGn4kKrSSkFyc1+ECOGwyaa hu+BsdawDrYh69gs/xwz7cd5OyiCFQCVD9T2o4Sd/yRAEGYeWaFhQP3hhOMCM0ww hw1Dnh9bFn35ODc9EsV1vZlbaFrNfzbw -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:06 2025 by rpki-client