$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: kKnYUSTOixd+zwZ+YjfE9Ch08SehZjcTXXJ1WvTRNgs= Subject key identifier: 2C:88:64:F7:C5:5C:24:5B:54:D7:4D:6D:84:D4:35:BF:63:81:CC:2F Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1036 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 1021 Signing time: Wed 02 Jul 2025 17:38:23 +0000 Manifest this update: Wed 02 Jul 2025 17:38:23 +0000 Manifest next update: Wed 09 Jul 2025 17:38:23 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: FdY98BIu77+EOrWm/ReXNORECNa6VrQCK8i2yfDzwy0=) 2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: ZNHHRF85+z4Is0+eLKcAwqdcHd29O7GXMUqQBRk0J/w=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: N1sk6XLj5xgH93qOL/I5QuR42p2aQ914FnE3hKMRCac=) 4: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 9+Gtcwt1HizyRVjiJLATuFRgohbLeetX6+Rnfri/zZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4150 (0x1036) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jul 2 17:38:23 2025 GMT Not After : Jul 9 17:38:23 2025 GMT Subject: CN=68656e8f-c78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:11:72:89:0e:cc:ba:fc:66:00:bf:87:81: 8c:44:eb:9d:c5:02:e3:e3:35:6e:44:9e:5b:47:30: 52:c7:9a:c6:db:fa:5a:6f:97:8f:bf:47:92:cf:4a: ee:56:16:97:d6:75:02:ef:fe:06:34:8a:ce:71:49: b2:1f:98:f8:4a:fb:0c:b7:e0:f6:89:69:bd:2d:25: 19:d6:36:29:a9:40:dc:38:9c:be:5d:4a:c3:e3:fd: 7f:85:51:23:4b:54:df:53:24:7c:1e:10:64:2c:49: ce:bb:b0:c8:15:b8:dd:74:79:89:5b:58:3c:1b:77: 7c:7d:3a:b9:0a:2d:c7:fb:79:72:c9:0b:e2:7a:3c: ba:5b:2d:24:88:11:d1:fd:4a:8b:00:a0:f7:19:e5: eb:bc:9f:5c:57:19:1a:fc:c2:dd:fc:1b:f4:0e:12: 42:dd:e0:79:11:0e:4a:17:d2:5d:20:0a:c4:1c:77: 37:5e:22:03:56:fa:42:70:18:6f:f1:cb:d2:7e:9e: 0c:4a:fa:b2:56:25:47:66:80:56:cf:c1:97:4d:b4: 0f:f3:88:fb:d1:b8:e2:64:52:c8:b5:cf:ac:16:31: 97:59:73:ae:ad:7d:0b:1a:83:af:b3:0b:54:fe:4d: b6:fc:0f:09:35:66:97:83:99:d9:39:3c:84:c6:2f: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:64:F7:C5:5C:24:5B:54:D7:4D:6D:84:D4:35:BF:63:81:CC:2F X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:54:87:b5:cd:18:92:34:9b:aa:69:5a:70:1d:35:1d:57:8f: 0a:b2:da:8b:f7:55:84:ba:4e:ab:90:74:02:e7:39:56:f1:a2: c4:95:b9:11:d1:f1:75:3c:fc:ad:31:03:ab:84:93:26:e0:f7: 1b:dc:a9:47:0b:68:f1:cb:29:b6:03:7b:7d:94:c7:3b:19:b4: 0f:28:1b:f3:d7:30:64:53:67:e3:d9:39:82:cd:a1:89:aa:c6: 60:c9:cf:94:1a:73:39:86:b6:38:1c:25:44:ec:08:6a:21:10: f4:d5:7d:39:ea:11:90:d0:17:01:45:54:0f:52:ff:d9:d7:dc: f6:1f:12:e9:49:c3:00:87:c1:eb:c2:bd:94:25:aa:63:8a:51: c4:0f:2c:72:f5:61:82:9b:1b:0f:13:2b:b6:d4:e8:3e:ec:d5: d4:c9:97:c1:d4:e3:b0:2d:de:94:e3:93:25:e6:13:a7:07:af: f1:8c:d4:7d:50:ce:bd:d0:f0:ad:fa:a0:79:ca:3d:e2:d2:b4: ee:ca:c0:b6:3a:ee:93:8c:19:f1:82:e3:31:2e:b2:91:d0:ca: 7a:5c:32:bf:9b:ac:19:d8:b2:9f:1b:9d:85:a9:75:4f:39:2f: d3:b3:8b:80:f8:6b:87:a1:c4:48:73:64:77:de:6d:8c:be:eb: 9e:48:92:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjUwNzAyMTczODIzWhcNMjUwNzA5MTczODIzWjAYMRYwFAYD VQQDEw02ODY1NmU4Zi1jNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3osRcokOzLr8ZgC/h4GMROudxQLj4zVuRJ5bRzBSx5rG2/pab5ePv0eSz0ru VhaX1nUC7/4GNIrOcUmyH5j4SvsMt+D2iWm9LSUZ1jYpqUDcOJy+XUrD4/1/hVEj S1TfUyR8HhBkLEnOu7DIFbjddHmJW1g8G3d8fTq5Ci3H+3lyyQviejy6Wy0kiBHR /UqLAKD3GeXrvJ9cVxka/MLd/Bv0DhJC3eB5EQ5KF9JdIArEHHc3XiIDVvpCcBhv 8cvSfp4MSvqyViVHZoBWz8GXTbQP84j70bjiZFLItc+sFjGXWXOurX0LGoOvswtU /k22/A8JNWaXg5nZOTyExi9b7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyIZPfF XCRbVNdNbYTUNb9jgcwvMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlVIe1zRiSNJuqaVpwHTUdV48KstqL91WEuk6rkHQC5zlW8aLElbkR 0fF1PPytMQOrhJMm4Pcb3KlHC2jxyym2A3t9lMc7GbQPKBvz1zBkU2fj2TmCzaGJ qsZgyc+UGnM5hrY4HCVE7AhqIRD01X056hGQ0BcBRVQPUv/Z19z2HxLpScMAh8Hr wr2UJapjilHEDyxy9WGCmxsPEyu21Og+7NXUyZfB1OOwLd6U45Ml5hOnB6/xjNR9 UM690PCt+qB5yj3i0rTuysC2Ou6TjBnxguMxLrKR0Mp6XDK/m6wZ2LKfG52FqXVP OS/Ts4uA+GuHocRIc2R33m2MvuueSJIv -----END CERTIFICATE-----Generated at Fri Jul 4 00:40:07 2025 by rpki-client