$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: xM2EisW6TlDQ0wnw/waxmOe0XUXkJqWywzI+BYGD3qk= Subject key identifier: C8:43:8B:8E:E9:C4:04:CA:FD:F4:0E:70:D7:47:C2:C4:EE:24:81:8D Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01C4 Signing time: Tue 01 Jul 2025 03:20:48 +0000 Manifest this update: Tue 01 Jul 2025 03:20:47 +0000 Manifest next update: Tue 08 Jul 2025 03:20:47 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: jjikXGSv3BDg3SvBY5fQ0zLgkEudiWKmgmgTOMHd5VE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Jul 1 03:20:47 2025 GMT Not After : Jul 8 03:20:47 2025 GMT Subject: CN=6863540f-60fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:33:e0:27:f0:df:ec:ea:47:3a:80:55:5f: a5:3d:49:80:a1:29:c7:f3:e8:e6:c5:4f:b7:58:3f: 83:59:2b:67:b5:d6:f9:0b:0f:a6:e7:1b:6f:a5:07: 0c:5a:83:4b:25:32:8b:46:31:4b:82:f7:5a:ee:38: 95:f4:09:e5:15:9a:1b:ab:14:7e:88:1f:f4:28:26: 8d:d1:04:f1:c4:46:fb:85:ef:56:68:fd:c9:a1:83: d4:10:3f:4e:ff:4f:9b:d1:99:6c:0f:db:01:aa:db: 62:10:73:94:e1:73:ae:ef:d7:9d:f4:d4:72:19:bb: 10:3e:43:fb:d1:8f:05:83:98:f0:63:b5:94:0b:f6: 92:4b:e7:c7:65:c5:89:16:9e:fe:67:60:4c:03:34: 56:a5:ff:5c:1d:6c:90:c3:16:00:de:8c:07:d8:79: bd:a3:3a:f4:9c:6d:13:3f:30:9e:c3:a9:42:2d:4e: f4:5c:f9:34:a3:29:03:ea:1e:27:0b:af:7a:cd:dc: ca:79:aa:4a:6b:d2:03:51:77:3f:6b:68:cc:91:bd: 72:d4:d3:5a:75:a2:bf:4a:85:b3:d8:3c:c1:04:da: 9e:75:86:33:40:c7:d2:9e:10:03:dc:2d:90:7e:0f: 6f:f4:46:b5:19:c3:bb:9e:9a:0e:96:91:23:11:46: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:43:8B:8E:E9:C4:04:CA:FD:F4:0E:70:D7:47:C2:C4:EE:24:81:8D X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fb:b1:f4:12:79:2b:c7:91:9c:11:ec:a2:fd:74:32:72:3d: fb:89:1f:fe:89:75:71:83:81:c7:ea:48:48:71:f7:10:e3:25: d1:d5:58:60:1d:cf:79:20:f1:77:1d:3e:63:4a:85:76:d6:7f: 93:39:25:98:9a:88:a8:78:84:79:5b:57:98:e5:e6:14:bb:6b: 6e:31:14:c9:1f:56:76:89:a7:3b:53:f0:b1:43:4f:8a:53:07: 94:54:88:11:46:fc:00:85:4a:03:76:d7:bc:7c:1d:4d:8c:09: 23:d0:4d:80:ea:60:39:c8:f8:3d:a5:6c:fa:3d:a0:f7:7f:6b: 32:0d:45:76:21:ea:69:e4:70:48:d6:1c:12:c8:23:25:7c:0d: cd:c0:02:f1:ec:1e:94:ba:24:3e:e9:cb:7b:e2:a7:c4:b1:72: 04:06:1c:b5:f6:e6:27:5b:9f:ad:67:76:90:5c:f1:87:9d:23: a5:b1:3d:0d:dc:87:65:11:ec:42:29:1a:72:78:8f:d7:57:e8: 2e:df:f9:31:72:12:7a:d0:91:3e:fd:94:f3:3f:fb:0c:a4:92: b6:e5:df:19:6b:6c:7b:c9:5b:35:85:33:e3:7c:3e:a9:f0:da: a8:51:13:d9:14:2a:72:77:03:18:44:45:23:db:33:05:5e:76: c5:0d:af:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUwNzAxMDMyMDQ3WhcNMjUwNzA4MDMyMDQ3WjAYMRYwFAYD VQQDEw02ODYzNTQwZi02MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAMz4Cfw3+zqRzqAVV+lPUmAoSnH8+jmxU+3WD+DWStntdb5Cw+m5xtvpQcM WoNLJTKLRjFLgvda7jiV9AnlFZobqxR+iB/0KCaN0QTxxEb7he9WaP3JoYPUED9O /0+b0ZlsD9sBqttiEHOU4XOu79ed9NRyGbsQPkP70Y8Fg5jwY7WUC/aSS+fHZcWJ Fp7+Z2BMAzRWpf9cHWyQwxYA3owH2Hm9ozr0nG0TPzCew6lCLU70XPk0oykD6h4n C696zdzKeapKa9IDUXc/a2jMkb1y1NNadaK/SoWz2DzBBNqedYYzQMfSnhAD3C2Q fg9v9Ea1GcO7npoOlpEjEUYu4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhDi47p xATK/fQOcNdHwsTuJIGNMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy+7H0Enkrx5GcEeyi/XQycj37iR/+iXVxg4HH6khIcfcQ4yXR1Vhg Hc95IPF3HT5jSoV21n+TOSWYmoioeIR5W1eY5eYUu2tuMRTJH1Z2iac7U/CxQ0+K UweUVIgRRvwAhUoDdte8fB1NjAkj0E2A6mA5yPg9pWz6PaD3f2syDUV2Iepp5HBI 1hwSyCMlfA3NwALx7B6UuiQ+6ct74qfEsXIEBhy19uYnW5+tZ3aQXPGHnSOlsT0N 3IdlEexCKRpyeI/XV+gu3/kxchJ60JE+/ZTzP/sMpJK25d8Za2x7yVs1hTPjfD6p 8NqoURPZFCpydwMYREUj2zMFXnbFDa9h -----END CERTIFICATE-----Generated at Thu Jul 3 03:44:21 2025 by rpki-client