$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json) Hash identifier: RylXPOQzRRHtUbW4TN7Kl2jQ1VR8g70SYTM6+oiVTUw= Subject key identifier: 2B:AD:CC:7F:6F:56:89:97:EA:77:4A:72:F4:DE:19:ED:AE:F2:19:FD Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft Manifest number: 8A Signing time: Thu 03 Jul 2025 06:50:57 +0000 Manifest this update: Thu 03 Jul 2025 06:50:56 +0000 Manifest next update: Thu 10 Jul 2025 06:50:56 +0000 Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: OI3Sb41H/hg/vDJkaCOjD2zCbGF5gJG1CF8kko9V41g=) 2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=) 3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC Validity Not Before: Jul 3 06:50:56 2025 GMT Not After : Jul 10 06:50:56 2025 GMT Subject: CN=68662850-70a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:8f:78:9b:2e:d3:0a:66:86:3b:86:1e:fb: f8:99:56:d8:74:e5:97:85:6f:85:43:4f:18:35:60: b2:c1:bf:61:b4:bc:32:6d:c1:48:6b:ed:83:88:33: fa:91:eb:10:aa:07:4e:ce:d7:5a:dd:6d:18:f0:65: 1e:a7:cf:44:c3:4c:cd:3b:19:1f:2e:82:68:c2:0a: e8:45:46:e8:6e:22:95:35:41:c9:35:29:aa:d3:fe: 7a:07:31:49:75:99:3d:a3:45:a9:55:49:01:aa:a5: bd:7a:52:22:6f:fc:12:70:43:7e:b2:44:e5:dc:50: 92:fa:ef:64:bf:34:0b:28:4b:fc:b1:51:e8:f4:2d: 36:a7:8b:63:b5:7a:8e:07:7f:6e:63:bb:37:79:b8: ea:d4:c6:8b:bc:b6:93:2e:09:a4:7b:8b:94:17:ef: ea:fc:91:35:a0:3f:f1:63:a1:45:01:62:cf:e2:79: e2:25:c8:16:2c:b3:a1:e7:85:4d:d4:ea:8c:00:ea: e1:f7:5c:52:54:ad:7b:ef:7e:bf:4d:bd:81:35:f0: bc:12:74:e4:b6:aa:e6:87:75:a7:7d:87:21:5e:42: f5:13:6a:e3:c4:44:49:47:b0:c7:83:23:0b:9c:15: 05:3c:08:3a:3b:f2:e7:e9:2b:09:5b:e6:77:60:0d: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AD:CC:7F:6F:56:89:97:EA:77:4A:72:F4:DE:19:ED:AE:F2:19:FD X509v3 Authority Key Identifier: keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d1:a3:76:b0:77:4c:ca:5b:9d:e9:38:21:06:5c:97:7e:4b: d8:3a:d5:f1:73:2a:f9:f1:85:5e:a0:4a:a9:1f:d4:39:d1:71: 71:91:c0:17:98:bf:ab:54:fd:b4:54:24:0f:dc:35:39:88:f7: 55:29:41:8a:a8:0b:e3:20:f8:68:79:4e:e4:8c:99:c8:12:d0: cc:22:77:9a:ab:3c:91:98:5c:4b:5d:24:d8:a7:af:20:71:e0: f6:71:a7:4f:72:03:9d:8c:5a:1a:6a:b6:80:e3:e8:8a:e9:25: 60:29:78:73:b4:02:de:41:83:42:d9:05:23:04:77:65:92:21: 85:61:37:fc:c4:99:fd:8e:01:89:db:38:e7:58:43:f0:e8:91: 83:d7:96:89:a8:89:61:85:1d:58:0b:6d:86:f3:4e:84:be:c4: 4c:88:c6:e1:bd:07:35:b3:21:d2:f9:e4:c7:93:60:c9:96:3c: b7:62:52:06:69:5f:7f:38:dc:9a:f9:69:04:f5:c3:43:3f:10: 31:8d:8d:bd:5c:59:1b:71:ec:91:7c:e6:23:a5:63:ef:e7:9b: 01:dd:af:28:0c:52:e9:80:7a:d2:b1:20:34:60:57:a8:f9:c3: cc:12:7d:4d:d9:69:fc:da:f0:b4:e3:30:08:38:7e:a6:2b:05: 2d:4f:cd:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE RTc2Qzg0QkMwHhcNMjUwNzAzMDY1MDU2WhcNMjUwNzEwMDY1MDU2WjAYMRYwFAYD VQQDEw02ODY2Mjg1MC03MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuWPeJsu0wpmhjuGHvv4mVbYdOWXhW+FQ08YNWCywb9htLwybcFIa+2DiDP6 kesQqgdOztda3W0Y8GUep89Ew0zNOxkfLoJowgroRUbobiKVNUHJNSmq0/56BzFJ dZk9o0WpVUkBqqW9elIib/wScEN+skTl3FCS+u9kvzQLKEv8sVHo9C02p4tjtXqO B39uY7s3ebjq1MaLvLaTLgmke4uUF+/q/JE1oD/xY6FFAWLP4nniJcgWLLOh54VN 1OqMAOrh91xSVK17736/Tb2BNfC8EnTktqrmh3WnfYchXkL1E2rjxERJR7DHgyML nBUFPAg6O/Ln6SsJW+Z3YA1gGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCutzH9v VomX6ndKcvTeGe2u8hn9MB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB70aN2sHdMylud6TghBlyXfkvYOtXxcyr58YVeoEqpH9Q50XFxkcAX mL+rVP20VCQP3DU5iPdVKUGKqAvjIPhoeU7kjJnIEtDMIneaqzyRmFxLXSTYp68g ceD2cadPcgOdjFoaaraA4+iK6SVgKXhztALeQYNC2QUjBHdlkiGFYTf8xJn9jgGJ 2zjnWEPw6JGD15aJqIlhhR1YC22G806EvsRMiMbhvQc1syHS+eTHk2DJljy3YlIG aV9/ONya+WkE9cNDPxAxjY29XFkbceyRfOYjpWPv55sB3a8oDFLpgHrSsSA0YFeo +cPMEn1N2Wn82vC04zAIOH6mKwUtT83u -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:56 2025 by rpki-client