$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: 1aCqYTjj3bSeAjKFk/CYXsjRLRxgQ27UQdWNcGYXG58= Subject key identifier: 4A:28:C2:FC:8C:23:B9:DD:FE:76:BD:65:2E:F1:7D:BA:2E:8B:64:48 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 0115 Signing time: Tue 01 Jul 2025 05:18:44 +0000 Manifest this update: Tue 01 Jul 2025 05:18:44 +0000 Manifest next update: Tue 08 Jul 2025 05:18:44 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: bisWoXFEDRRf2p3LBtQawypzWphQPhpjYY6y9smreSg=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Jul 1 05:18:44 2025 GMT Not After : Jul 8 05:18:44 2025 GMT Subject: CN=68636fb4-3238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:0b:74:87:d8:b3:6e:20:ae:36:2d:8a:d0: be:5f:0a:1c:7f:9e:bb:de:41:bf:b3:30:7c:b7:5a: c7:e5:55:46:a2:39:82:b5:ea:46:f9:2d:16:df:b0: 25:57:d8:da:6f:d9:cd:5a:00:b1:37:de:c4:fc:f2: db:ff:5e:c7:c8:9e:33:57:12:41:e3:a6:de:c1:7e: 28:b9:26:9d:dd:c7:48:c0:90:f9:91:6d:b7:23:c3: c4:f1:07:37:5b:44:97:23:75:e3:31:e3:b1:1c:af: d7:46:7b:0a:04:ab:8b:90:8c:a8:9a:47:98:3f:93: fc:91:3b:bc:6f:54:21:01:10:5f:eb:59:f9:a3:b3: 64:cb:48:95:cf:b5:0b:14:e0:6d:f3:b5:37:22:f7: 19:c0:fb:7b:21:60:47:97:d4:a6:9e:53:ac:70:7e: 32:b7:ac:71:2b:93:b2:79:05:ae:10:37:da:75:e1: e9:fe:8d:cb:ed:29:77:0e:aa:2b:a9:92:f4:89:b0: a2:49:b2:bc:d1:d2:23:79:f0:87:a9:e3:75:0a:56: 43:7b:38:29:e7:d2:74:85:4d:10:37:35:e0:38:98: cf:18:19:af:75:27:7b:f4:70:ed:3a:d2:7b:1a:29: 3d:81:b6:39:ba:07:97:79:77:ca:da:17:35:78:ca: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:C2:FC:8C:23:B9:DD:FE:76:BD:65:2E:F1:7D:BA:2E:8B:64:48 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:56:86:ba:9d:db:75:07:f5:6e:2e:0a:e1:9e:55:10:0f: 91:82:6f:01:9d:0b:96:24:9c:ba:7e:01:4f:df:b5:f3:25:17: 9e:69:3e:16:eb:d3:4d:c1:33:7d:67:b3:c7:59:40:f4:bd:75: ec:94:ec:63:7a:dc:17:f7:01:0f:d7:50:9c:5b:2b:70:f2:5d: ae:8e:a4:4d:91:87:31:98:b5:41:2b:6b:a8:20:21:98:67:ec: fc:05:82:a6:6d:b3:1b:62:2c:f6:71:6b:dc:2e:82:bd:a8:e0: 7c:27:96:ae:67:16:70:76:fc:48:46:4e:7a:3b:f7:23:3d:3e: da:4d:3d:6e:9c:ae:7f:b0:72:01:55:47:29:43:26:57:cf:76: 5b:64:c9:f5:21:4a:74:5f:55:b8:04:e8:f6:40:34:40:ae:7f: 67:36:7c:60:e0:37:3e:25:dd:67:61:4b:92:d7:77:0c:0b:69: 9a:a1:44:cf:82:7a:b7:5d:3a:f9:16:8a:e9:49:42:f5:44:c2: de:65:08:35:99:46:c7:7b:f3:c9:ef:ea:5a:af:bb:4d:a5:b2: e3:98:20:d4:7c:f8:a5:10:ba:db:f8:03:af:d3:42:59:db:51: 5b:20:e7:29:b0:ee:cb:90:48:0c:78:57:5d:c0:e0:98:d1:32: 13:3c:fc:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNzAxMDUxODQ0WhcNMjUwNzA4MDUxODQ0WjAYMRYwFAYD VQQDEw02ODYzNmZiNC0zMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmLQLdIfYs24grjYtitC+Xwocf5673kG/szB8t1rH5VVGojmCtepG+S0W37Al V9jab9nNWgCxN97E/PLb/17HyJ4zVxJB46bewX4ouSad3cdIwJD5kW23I8PE8Qc3 W0SXI3XjMeOxHK/XRnsKBKuLkIyomkeYP5P8kTu8b1QhARBf61n5o7Nky0iVz7UL FOBt87U3IvcZwPt7IWBHl9SmnlOscH4yt6xxK5OyeQWuEDfadeHp/o3L7Sl3Dqor qZL0ibCiSbK80dIjefCHqeN1ClZDezgp59J0hU0QNzXgOJjPGBmvdSd79HDtOtJ7 Gik9gbY5ugeXeXfK2hc1eMrgdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoowvyM I7nd/na9ZS7xfboui2RIMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFlaGup3bdQf1bi4K4Z5VEA+Rgm8BnQuWJJy6fgFP37XzJReeaT4W 69NNwTN9Z7PHWUD0vXXslOxjetwX9wEP11CcWytw8l2ujqRNkYcxmLVBK2uoICGY Z+z8BYKmbbMbYiz2cWvcLoK9qOB8J5auZxZwdvxIRk56O/cjPT7aTT1unK5/sHIB VUcpQyZXz3ZbZMn1IUp0X1W4BOj2QDRArn9nNnxg4Dc+Jd1nYUuS13cMC2maoUTP gnq3XTr5ForpSUL1RMLeZQg1mUbHe/PJ7+par7tNpbLjmCDUfPilELrb+AOv00JZ 21FbIOcpsO7LkEgMeFddwOCY0TITPPwK -----END CERTIFICATE-----Generated at Thu Jul 3 04:27:29 2025 by rpki-client