$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft File: qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json) Hash identifier: p3/+ZXuQLU+3SAw58JQEkzBwtJojgr0bUvIZmp7W55k= Subject key identifier: DD:A1:9C:C8:20:43:AB:37:34:C2:67:EA:CE:0D:D3:E0:F1:A8:41:A5 Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 Certificate issuer: /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft Manifest number: 0B6B Signing time: Wed 02 Jul 2025 19:20:36 +0000 Manifest this update: Wed 02 Jul 2025 19:20:36 +0000 Manifest next update: Wed 09 Jul 2025 19:20:36 +0000 Files and hashes: 1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: Q7IIgD8Sgr/ByFDTfIJlLEXpRTQDOXDQ21iXmrDoGt4=) 2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: pnaBbR2DtiTGY+c3G7fBP288UhK6UiUJopbmpztAwNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586 Validity Not Before: Jul 2 19:20:36 2025 GMT Not After : Jul 9 19:20:36 2025 GMT Subject: CN=68658684-8dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:10:8f:95:56:b7:3f:71:66:93:b1:be:12: 21:6f:75:e0:3e:74:e3:7b:c8:78:d5:94:5b:d8:12: bd:d3:20:7e:81:f7:fb:2c:68:fd:b2:bc:f8:c2:04: 45:9b:0c:ed:07:2c:56:cd:4e:5a:72:eb:9f:04:1b: 53:5a:47:61:8a:99:53:0d:47:52:b6:81:c5:38:b6: f8:19:2f:f1:d6:61:13:dc:18:c2:29:33:d9:2c:f4: 8a:f7:3e:ce:0f:d5:7f:ca:92:61:5d:64:d6:a1:56: 23:c8:89:46:32:5a:b0:5a:8d:dd:b8:04:c9:55:87: d2:8a:8d:4c:7b:99:4f:2d:bb:32:9c:c8:0a:4d:a9: 84:9d:1e:4d:23:24:2b:23:1c:8e:4e:b4:97:60:76: 98:07:08:12:5a:43:1a:ca:91:db:9d:36:5a:92:14: dd:4d:d0:1a:07:a0:20:c0:54:06:3d:71:7f:2e:16: 83:f1:2b:30:e2:14:37:76:32:dd:ad:9b:6d:6c:ee: ff:b9:0e:cb:88:cf:68:f6:30:ab:a1:0f:39:53:d2: 3a:7d:44:d0:cd:d2:e0:e9:15:60:e3:86:24:00:70: f2:16:ff:ec:d4:d5:61:d8:69:20:f2:d5:a6:80:15: 9a:3a:6f:95:4d:46:21:35:0b:8c:f7:86:ff:dc:b8: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:9C:C8:20:43:AB:37:34:C2:67:EA:CE:0D:D3:E0:F1:A8:41:A5 X509v3 Authority Key Identifier: keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:68:f7:24:12:77:b8:ac:89:d6:b4:7e:f3:a4:c3:fd:e7:b4: ba:d4:36:3c:e0:07:06:a2:36:67:35:5a:02:1a:11:3b:81:2e: b6:50:3f:4d:3b:45:45:42:2f:19:eb:4d:32:1b:fa:d5:77:f9: b3:9b:41:9f:b5:e4:f6:72:ad:4c:07:e1:70:68:42:68:60:91: dd:11:91:69:90:96:9a:22:0b:de:1c:e5:0c:73:60:15:34:2c: d6:40:05:5f:f7:a1:6c:68:7f:ba:f2:b3:8b:c1:d5:dd:64:cc: 85:67:bd:e9:4b:83:b0:a8:75:33:81:46:a2:bd:71:a8:94:e7: 9e:0d:44:59:30:bc:bb:f1:2e:7d:89:52:43:73:28:05:04:83: d1:01:a4:fe:51:ab:07:7f:8e:f4:d6:b4:bd:13:f4:28:f6:88: 5a:63:67:68:47:7d:18:9a:66:26:cf:3f:ca:6e:80:c9:5b:1e: 05:48:eb:24:b2:86:08:e8:7d:ac:1e:ef:21:9f:65:7b:6d:a7: ca:e6:b9:89:ce:68:85:f4:f9:b0:4d:f7:b8:c7:87:b3:4b:60: 75:98:bb:ff:23:ba:2b:4c:16:ec:99:6e:3f:e4:16:e0:81:b8: 1c:ba:94:9f:6c:a2:c7:e5:ad:4d:8c:aa:46:ee:00:ca:2b:24: 69:ba:c9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBNEUxMTAvBgNVBAUTKEE5MjE2MzVDNzQ5M0YyMUNEMjYwOTNENTkwMzUxMDgw MkY0RTM1ODYwHhcNMjUwNzAyMTkyMDM2WhcNMjUwNzA5MTkyMDM2WjAYMRYwFAYD VQQDEw02ODY1ODY4NC04ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0MQj5VWtz9xZpOxvhIhb3XgPnTje8h41ZRb2BK90yB+gff7LGj9srz4wgRF mwztByxWzU5acuufBBtTWkdhiplTDUdStoHFOLb4GS/x1mET3BjCKTPZLPSK9z7O D9V/ypJhXWTWoVYjyIlGMlqwWo3duATJVYfSio1Me5lPLbsynMgKTamEnR5NIyQr IxyOTrSXYHaYBwgSWkMaypHbnTZakhTdTdAaB6AgwFQGPXF/LhaD8Ssw4hQ3djLd rZttbO7/uQ7LiM9o9jCroQ85U9I6fUTQzdLg6RVg44YkAHDyFv/s1NVh2Gkg8tWm gBWaOm+VTUYhNQuM94b/3Lg0WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2hnMgg Q6s3NMJn6s4N0+DxqEGlMB8GA1UdIwQYMBaAFKkhY1x0k/Ic0mCT1ZA1EIAvTjWG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUE0RS9BNDlCNEQ3NDM3 QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDhoelNZSlBWa0RVUWdDOU9O WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTRmpYSFNUOGh6U1lKUFZrRFVRZ0M5T05ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUE0RS9BNDlCNEQ3NDM3QzYxMUVBOUQ5NkFFNTFDNEY5QUUwMi9xU0ZqWEhTVDho elNZSlBWa0RVUWdDOU9OWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8aPckEne4rInWtH7zpMP957S61DY84AcGojZnNVoCGhE7gS62UD9N O0VFQi8Z600yG/rVd/mzm0GfteT2cq1MB+FwaEJoYJHdEZFpkJaaIgveHOUMc2AV NCzWQAVf96FsaH+68rOLwdXdZMyFZ73pS4OwqHUzgUaivXGolOeeDURZMLy78S59 iVJDcygFBIPRAaT+UasHf4701rS9E/Qo9ohaY2doR30YmmYmzz/KboDJWx4FSOsk soYI6H2sHu8hn2V7bafK5rmJzmiF9PmwTfe4x4ezS2B1mLv/I7orTBbsmW4/5Bbg gbgcupSfbKLH5a1NjKpG7gDKKyRpuslK -----END CERTIFICATE-----Generated at Thu Jul 3 02:34:13 2025 by rpki-client