$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json) Hash identifier: KvrmsxY1wEWAwoI/Uz933qHXybzLSM0r+XMYo4Ul3cA= Subject key identifier: F1:8A:72:C5:B9:16:46:01:EB:D9:09:FE:05:57:16:6F:93:10:18:14 Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Certificate serial: 138F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft Manifest number: 29E1 Signing time: Mon 30 Jun 2025 17:09:11 +0000 Manifest this update: Mon 30 Jun 2025 17:09:10 +0000 Manifest next update: Mon 07 Jul 2025 17:09:10 +0000 Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: asPsqQn9j/Vp5nruwQAQ9cFHK4H07FoOVbdr+zQo1jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5007 (0x138f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052 Validity Not Before: Jun 30 17:09:10 2025 GMT Not After : Jul 7 17:09:10 2025 GMT Subject: CN=6862c4b6-f528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1c:19:fd:5d:ed:ec:30:84:64:a7:1c:99:21: 1f:5c:0e:4f:b4:b7:3e:7d:c0:bf:72:c5:e0:17:2e: ba:15:91:a9:8e:30:bd:6d:03:cd:08:d7:f5:53:3b: ac:84:f0:88:c8:90:58:cc:5c:ad:81:56:6f:ee:b8: 58:bd:24:81:78:e2:05:9d:1b:a6:30:9e:c6:7a:7e: 85:20:f0:01:4e:d6:e9:6c:c7:59:64:ca:c7:4e:c3: 5d:71:ad:58:8c:1f:f4:ac:91:8f:a4:06:c9:b8:57: c2:3b:88:0a:fc:6e:6f:80:7e:1a:af:b1:db:98:19: f9:4a:ce:cb:46:a5:2e:75:86:f8:6a:2c:e6:7f:e4: 46:f9:a7:4f:74:6b:c5:d4:8c:79:d8:e2:27:8c:f3: ea:fa:69:3b:5d:91:fa:9f:60:2f:1c:52:75:88:f2: 1e:53:fa:41:ac:11:84:aa:01:d3:49:d0:29:cd:70: ff:6c:f3:da:aa:0d:62:35:be:4f:4a:20:d9:7d:c6: 57:b0:05:f0:f0:5c:9e:c3:f8:cf:8c:1b:6c:36:56: 4c:cc:1e:42:85:08:88:d8:fb:cd:4e:b5:c5:7e:55: b2:21:0d:45:d0:bb:84:ab:13:40:05:e9:f5:7f:3b: d1:18:7b:8d:c4:e3:7f:4d:00:e8:d7:a5:c5:a3:27: 70:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:72:C5:B9:16:46:01:EB:D9:09:FE:05:57:16:6F:93:10:18:14 X509v3 Authority Key Identifier: keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:75:9c:8f:70:0f:18:b5:20:e9:9d:ba:ca:8e:51:3c:73:d0: 7b:fa:36:6f:26:3b:91:5e:96:e9:02:63:e7:73:a8:b8:f5:5d: 44:59:62:b9:7b:df:94:29:e1:fa:60:5b:9b:ab:56:89:e4:07: 04:52:dd:ee:1b:a8:b1:00:14:5b:3c:45:b6:d9:ee:61:18:61: f3:27:27:2b:55:d0:d5:1e:52:b0:0d:af:c0:dc:a8:dd:00:5e: a4:ce:24:bd:48:f7:b2:c7:7c:f1:60:32:3a:35:59:42:22:f2: 9e:e7:b1:d7:22:97:d5:d8:8c:66:74:06:f0:7b:f5:71:df:ed: 83:58:be:75:1d:bc:ca:58:4e:d9:a3:c4:06:ee:bf:d3:da:bc: f3:23:5a:2b:3c:6d:37:0f:c0:e0:b0:17:f4:bc:b1:09:e9:a0: 89:71:ea:29:f7:ad:c8:f7:0f:09:cf:40:36:13:44:bf:34:fb: 1f:1d:f7:67:be:ba:fb:80:61:2d:26:f5:f3:89:89:f6:8a:5a: 47:7c:8c:fe:5a:01:f6:ce:79:42:f4:4e:54:ca:1b:8d:fa:1e: 10:1f:5e:42:b8:6c:b3:6e:a1:88:62:88:1e:79:8a:0b:a7:4d: c8:a5:36:88:b4:4c:16:41:50:d5:56:71:4d:5b:bc:24:d0:3b: 37:ed:89:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx RTA2NzcwNTIwHhcNMjUwNjMwMTcwOTEwWhcNMjUwNzA3MTcwOTEwWjAYMRYwFAYD VQQDEw02ODYyYzRiNi1mNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BwZ/V3t7DCEZKccmSEfXA5PtLc+fcC/csXgFy66FZGpjjC9bQPNCNf1Uzus hPCIyJBYzFytgVZv7rhYvSSBeOIFnRumMJ7Gen6FIPABTtbpbMdZZMrHTsNdca1Y jB/0rJGPpAbJuFfCO4gK/G5vgH4ar7HbmBn5Ss7LRqUudYb4aizmf+RG+adPdGvF 1Ix52OInjPPq+mk7XZH6n2AvHFJ1iPIeU/pBrBGEqgHTSdApzXD/bPPaqg1iNb5P SiDZfcZXsAXw8Fyew/jPjBtsNlZMzB5ChQiI2PvNTrXFflWyIQ1F0LuEqxNABen1 fzvRGHuNxON/TQDo16XFoydwKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGKcsW5 FkYB69kJ/gVXFm+TEBgUMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCdZyPcA8YtSDpnbrKjlE8c9B7+jZvJjuRXpbpAmPnc6i49V1EWWK5 e9+UKeH6YFubq1aJ5AcEUt3uG6ixABRbPEW22e5hGGHzJycrVdDVHlKwDa/A3Kjd AF6kziS9SPeyx3zxYDI6NVlCIvKe57HXIpfV2IxmdAbwe/Vx3+2DWL51HbzKWE7Z o8QG7r/T2rzzI1orPG03D8DgsBf0vLEJ6aCJceop963I9w8Jz0A2E0S/NPsfHfdn vrr7gGEtJvXziYn2ilpHfIz+WgH2znlC9E5UyhuN+h4QH15CuGyzbqGIYogeeYoL p03IpTaItEwWQVDVVnFNW7wk0Ds37Yn4 -----END CERTIFICATE-----Generated at Wed Jul 2 16:26:05 2025 by rpki-client