$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: dhPmztcmTDvIRwd3gWhjiQYcrSJMfgQT8fMrNk4El/0= Subject key identifier: 66:D1:7B:E8:B8:2C:86:D3:5A:88:55:5B:99:FF:FA:79:C3:59:68:60 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0238 Signing time: Thu 03 Jul 2025 02:20:44 +0000 Manifest this update: Thu 03 Jul 2025 02:20:44 +0000 Manifest next update: Thu 10 Jul 2025 02:20:44 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: 9r3/1/qKGQuGOuirueETiYlLJOvgJ37S1nXFywVpbPs=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: IN+H6LUETq8W/dLs0PZX77bed7F0mQsx+AWJPeSHLek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Jul 3 02:20:44 2025 GMT Not After : Jul 10 02:20:44 2025 GMT Subject: CN=6865e8fc-9c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:78:0c:3e:2e:e2:60:ce:42:99:41:1a:1c: 4a:1e:35:79:e3:28:1d:e1:4e:ee:c8:20:8e:bc:03: f3:06:64:44:b8:a4:da:1f:25:bf:26:86:63:85:e0: 97:94:44:f1:f7:31:8f:63:bf:7e:7b:71:a0:e5:94: 1b:59:53:af:e0:64:60:33:5c:21:6b:5a:91:b6:95: 5b:a1:31:d4:82:ef:70:99:51:ef:bc:d6:9f:c7:0c: d2:77:81:d5:73:fa:b7:d9:93:19:96:27:05:20:83: a7:f1:cb:25:d0:62:55:15:5e:79:cf:1d:f1:14:bc: ea:e2:e9:d5:97:c0:b9:0c:73:e5:cb:56:24:b2:c0: 27:04:ce:ff:10:23:f2:06:d1:90:6d:3b:14:ab:fe: 69:72:9e:d0:58:5e:a9:26:6d:2c:dd:bb:b1:4b:69: 41:75:bd:35:7d:1c:db:51:a5:53:1f:7c:85:96:61: 7a:66:3d:00:38:19:b7:db:2c:84:f2:6b:44:59:0e: d8:c1:53:f8:f1:cd:4f:e5:64:d0:51:c3:10:a7:4f: ee:25:ba:16:b2:72:2b:33:de:3b:0b:84:3b:bf:03: 36:5b:00:26:a6:2c:73:47:61:6e:02:07:ba:8d:68: 32:bc:02:6b:19:2b:d3:25:d0:d9:d1:52:16:be:73: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:7B:E8:B8:2C:86:D3:5A:88:55:5B:99:FF:FA:79:C3:59:68:60 X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:98:7f:ff:b5:43:4f:ec:27:30:d3:37:e8:c5:79:e1:69:78: 8b:5b:c7:f1:bd:f3:45:1f:f4:72:81:44:fd:7d:a6:fe:24:4f: 07:5e:4f:f8:ea:3a:81:6b:18:86:cf:91:1d:2e:f0:39:9d:6b: 6a:61:0a:13:bc:69:7c:82:53:5b:5e:42:87:79:6c:3a:a9:0f: a2:98:cc:81:e4:55:ae:db:37:a5:26:d0:15:9a:e8:70:33:37: 24:2f:92:88:a3:e0:d9:d5:0f:85:69:5b:59:70:97:e1:a3:a8: 11:1a:3a:91:50:85:d5:29:db:c3:a0:99:20:d7:f2:f8:2e:37: 50:42:0f:1a:18:04:b7:4a:eb:8e:16:f1:38:7e:e5:47:6c:f4: f7:a6:e4:e5:c1:fb:27:77:6c:5a:22:cc:be:5e:dc:84:f2:ed: 86:d6:a1:30:8c:3e:b6:7e:a0:d7:79:fa:04:25:f4:30:b5:4b: 88:97:e3:f3:2a:39:84:94:fa:8d:77:ee:98:2b:29:0a:6e:f4: 45:9b:7f:f9:94:fc:9a:7c:36:f0:2e:36:8d:01:53:cb:50:17: 8e:1f:91:4c:fc:4b:89:83:1b:cd:16:32:a0:58:de:b9:7b:b1: 51:03:3e:96:11:88:cb:7a:f9:ee:46:02:88:0c:3c:7d:59:ec: 49:96:20:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNzAzMDIyMDQ0WhcNMjUwNzEwMDIyMDQ0WjAYMRYwFAYD VQQDEw02ODY1ZThmYy05YzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+x4DD4u4mDOQplBGhxKHjV54ygd4U7uyCCOvAPzBmREuKTaHyW/JoZjheCX lETx9zGPY79+e3Gg5ZQbWVOv4GRgM1wha1qRtpVboTHUgu9wmVHvvNafxwzSd4HV c/q32ZMZlicFIIOn8csl0GJVFV55zx3xFLzq4unVl8C5DHPly1YkssAnBM7/ECPy BtGQbTsUq/5pcp7QWF6pJm0s3buxS2lBdb01fRzbUaVTH3yFlmF6Zj0AOBm32yyE 8mtEWQ7YwVP48c1P5WTQUcMQp0/uJboWsnIrM947C4Q7vwM2WwAmpixzR2FuAge6 jWgyvAJrGSvTJdDZ0VIWvnNCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbRe+i4 LIbTWohVW5n/+nnDWWhgMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mH//tUNP7Ccw0zfoxXnhaXiLW8fxvfNFH/RygUT9fab+JE8HXk/4 6jqBaxiGz5EdLvA5nWtqYQoTvGl8glNbXkKHeWw6qQ+imMyB5FWu2zelJtAVmuhw MzckL5KIo+DZ1Q+FaVtZcJfho6gRGjqRUIXVKdvDoJkg1/L4LjdQQg8aGAS3SuuO FvE4fuVHbPT3puTlwfsnd2xaIsy+XtyE8u2G1qEwjD62fqDXefoEJfQwtUuIl+Pz KjmElPqNd+6YKykKbvRFm3/5lPyafDbwLjaNAVPLUBeOH5FM/EuJgxvNFjKgWN65 e7FRAz6WEYjLevnuRgKIDDx9WexJliDC -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:02 2025 by rpki-client