$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: De4U12tm7uoA3Et5ruBTprOdri/R/iP/ZrJ7ORBo9/w= Subject key identifier: 9C:60:BF:30:70:FB:39:50:BA:09:80:61:E0:10:F4:18:FD:B1:95:EF Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 72 Signing time: Thu 03 Jul 2025 07:04:40 +0000 Manifest this update: Thu 03 Jul 2025 07:04:39 +0000 Manifest next update: Thu 10 Jul 2025 07:04:39 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: XFf5csHLuwVsTWyUIazbT4bXFB47QAbYj86rvCk8QJQ=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jul 3 07:04:39 2025 GMT Not After : Jul 10 07:04:39 2025 GMT Subject: CN=68662b87-2b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:15:21:82:0b:c3:03:d4:0a:3b:56:7a:ab:6b: 1c:eb:fd:8a:50:73:24:6c:4d:1c:d7:77:d3:4d:9f: d8:f8:38:00:fe:e8:f6:24:44:18:51:65:f5:50:f8: eb:97:a0:ee:c7:e0:81:1b:57:b0:3c:da:f6:2e:a1: d1:2c:fa:db:f3:84:08:ae:84:17:4e:dd:cf:a3:09: 49:4f:92:e2:34:12:19:e2:af:d7:6b:e9:87:85:c8: 6a:98:57:82:fd:f0:7f:54:1f:97:63:fa:81:4d:9a: 99:06:6f:95:0c:55:d3:e3:81:c4:94:27:f4:24:e6: c4:d9:e7:f9:2f:99:c1:38:84:a9:01:ca:e4:bb:b1: 52:b7:5c:85:4f:81:7c:5d:67:22:05:bf:a8:1c:cb: 7b:a7:13:eb:a2:ff:43:d7:47:7d:ed:e7:df:28:51: c9:ce:d9:ac:74:a1:59:26:e1:ac:d7:00:6a:5b:c6: 98:62:2f:89:76:98:bc:64:b7:4d:7a:e8:de:2c:7d: 95:44:ce:ac:01:44:83:25:b0:d6:fc:6a:9a:11:bc: ea:8c:24:97:52:8b:9f:db:92:6e:4e:7e:46:d1:d0: 39:59:b2:6a:9d:b0:34:b4:cb:61:6b:a2:6e:76:2d: 5f:61:05:e9:98:b6:58:c5:2a:a0:af:19:71:f2:56: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:60:BF:30:70:FB:39:50:BA:09:80:61:E0:10:F4:18:FD:B1:95:EF X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:08:d2:1f:3d:a2:a0:a0:8d:a2:c6:25:a4:f2:39:e0:ca:e0: f0:bc:cb:ea:be:ef:f7:2a:a0:04:92:d8:21:b1:87:1c:04:e3: ac:d2:c2:42:7c:f0:dd:63:c6:c1:d1:78:89:d2:4e:8a:e3:ac: 75:e3:29:d3:7c:60:1b:1b:a5:35:df:99:06:23:5a:e0:07:46: 0a:fc:d9:f9:7b:86:20:6a:c3:a1:e9:5b:fb:b1:3a:cd:97:b2: 55:42:22:ca:06:b2:f0:38:e9:0e:b3:b6:6a:e2:29:d8:2b:19: 28:a5:f0:c7:ae:55:21:59:89:fc:21:37:58:7e:81:dc:89:da: ac:a9:b5:b8:f4:9e:70:58:53:c9:e6:b4:7f:e6:2f:ca:20:a5: 52:02:28:99:ef:07:db:eb:8e:e6:0b:28:8c:d1:9b:f4:89:63: db:c2:f0:c4:c2:7d:62:9e:d2:2b:a8:9c:b0:9d:ea:d0:27:71: 4d:fb:c1:9e:26:99:4a:f2:64:21:c0:c9:d0:41:18:46:66:46: 99:d5:0f:ee:ef:46:77:a8:24:95:ad:63:df:59:bd:bb:d7:77: 66:a5:e3:43:99:ea:8f:3c:d4:b7:a3:2a:41:65:94:6c:bc:cd: 39:90:f5:da:6c:83:31:d4:bd:30:c2:bf:cb:04:be:b2:17:58: b1:a5:b3:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNTA3MDMwNzA0MzlaFw0yNTA3MTAwNzA0MzlaMBgxFjAUBgNV BAMTDTY4NjYyYjg3LTJiNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmFSGCC8MD1Ao7Vnqraxzr/YpQcyRsTRzXd9NNn9j4OAD+6PYkRBhRZfVQ+OuX oO7H4IEbV7A82vYuodEs+tvzhAiuhBdO3c+jCUlPkuI0Ehnir9dr6YeFyGqYV4L9 8H9UH5dj+oFNmpkGb5UMVdPjgcSUJ/Qk5sTZ5/kvmcE4hKkByuS7sVK3XIVPgXxd ZyIFv6gcy3unE+ui/0PXR33t598oUcnO2ax0oVkm4azXAGpbxphiL4l2mLxkt016 6N4sfZVEzqwBRIMlsNb8apoRvOqMJJdSi5/bkm5OfkbR0DlZsmqdsDS0y2From52 LV9hBemYtljFKqCvGXHyVnVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnGC/MHD7 OVC6CYBh4BD0GP2xle8wHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzA0QkFBNjE0QTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5M NUZqV19mVk84NjFOSG1Ecy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwI0h89oqCgjaLGJaTyOeDK4PC8y+q+7/cqoASS2CGxhxwE46zSwkJ8 8N1jxsHReInSTorjrHXjKdN8YBsbpTXfmQYjWuAHRgr82fl7hiBqw6HpW/uxOs2X slVCIsoGsvA46Q6ztmriKdgrGSil8MeuVSFZifwhN1h+gdyJ2qyptbj0nnBYU8nm tH/mL8ogpVICKJnvB9vrjuYLKIzRm/SJY9vC8MTCfWKe0iuonLCd6tAncU37wZ4m mUryZCHAydBBGEZmRpnVD+7vRneoJJWtY99ZvbvXd2al40OZ6o881LejKkFllGy8 zTmQ9dpsgzHUvTDCv8sEvrIXWLGlsz4= -----END CERTIFICATE-----Generated at Fri Jul 4 08:15:13 2025 by rpki-client